Spaceposium / Legal

Privacy Notice

Last updated September 7, 2026. This notice describes the current practices of the Spaceposium Mission Control application at app.spaceposium.com. It covers this application only.

Who operates this application

Spaceposium Mission Control is operated by Spaceposium. For any privacy question or request, contact service@spaceposium.com. We respond to requests using the email address associated with your submission or account.

What we collect

We collect only what you enter, plus the minimum technical records needed to operate the application.

Applications (“Join the Network”)

  • Your name, email address, and optionally country and phone number.
  • Participation type (for example educator, school representative, sponsor, speaker).
  • Organization details when your participation type is organizational: organization or school name, website, city, state or province, district, student count and grade bands.
  • Free-text you provide: participation goals, sponsorship level and areas of interest, additional context or questions, speaker biography, proposed topics and expertise areas.
  • Application status, review notes written by reviewers, and a status-change history.

Accounts

  • Email address, password (stored only as a hash by our authentication provider) or Google sign-in.
  • Display name, and an avatar image if you upload one.
  • Sign-in timestamps and role assignments (for example participant, organization admin, administrator).

Newsletter

  • Name, email address, optional organization, area of interest, and which page you signed up from.

Technical records

  • An internal activity log of administrative actions taken inside the application.
  • An email delivery log recording the recipient address, template name, status and any error.
  • Sign-in session data stored in your browser so you stay signed in.

This application does not run third-party advertising or web-analytics trackers, and does not sell personal information.

How we use it

  • To review and decide applications, and to record the decision history.
  • To create and operate your account and show you your own participation records.
  • To send transactional messages such as application acknowledgements and sign-in or password emails.
  • To send the newsletter when you asked for it. Every newsletter includes an unsubscribe link.
  • To produce aggregate network statistics. Public pages show aggregate counts, not individual records.

Who can see your information

  • You — your own person record, application and participations, through your account.
  • Your organization’s administrators — records belonging to the organization you are associated with.
  • Spaceposium administrators — application, organization and participation records, for review and support.
  • The public — only approved, non-demo organization and event information, and aggregate counts. Reviewer notes, internal organization notes and private files are not publicly readable.

Access is enforced in the database with row-level security policies, not only in the interface.

Service providers

  • Supabase — database, authentication, and file storage for this application.
  • Lovable — application hosting and the email sending service used for transactional email.
  • Google — only if you choose Google sign-in, to verify your identity.

These providers process information on our instructions in order to run the service.

Retention and deletion

We keep application, organization, participation and account records for as long as they are needed to operate the network and to maintain an accurate record of decisions. We have not set a fixed automatic deletion schedule for these records; deletion happens on request or when a record is no longer needed.

  • Deletion or correction: email service@spaceposium.com from the address on the record. We remove or correct the record and confirm when it is done. There is no self-service delete button in the application today.
  • Copy of your data: request an export by email and we will provide the records we hold about you.
  • Newsletter: use the unsubscribe link, or email us. Unsubscribed and bounced addresses are kept on a suppression list so we do not email them again.

Adults only: how students take part

Applications and accounts on this site are for adults aged 18 or older. There is no direct student application. Students take part through an educator, an authorized representative of their school, or a parent or guardian, who applies and holds the account on their behalf.

When you apply, you confirm you are 18 or older. When you create an account — by email or with Google — the same confirmation is required before you can use any signed-in part of the site, and we record the date it was given. We do not ask for your date of birth. This is a self-declaration, not verified age checking, and it is not a claim of compliance with any children’s privacy law or certification scheme.

Our public pages — programmes, resources, news and the Expo — stay open to everyone, including students, with no account needed.

We do not collect coursework, grades, classroom activity, or records about identifiable individual students. School applications ask about the school itself: district, total student numbers and grade bands. We ask educators and school representatives not to send us details about identifiable students.

If information about a young person has been sent to us and you want it removed, email service@spaceposium.com and we will delete it.

Security

Access to records is controlled by authentication, role checks and database row-level security policies. Private files are served only to people entitled to see them. No online service can guarantee absolute security; we do not claim any certification or compliance status here.

Changes to this notice

We update this notice when our practices change and revise the date above. Material changes will be reflected on this page.