Astrolabix · Legal

Privacy Policy

Last updated - 2026-09-26

Astrolabix builds software for clients in the United States and around the world. This policy explains what personal data this website collects, why, and what you can ask us to do with it. The short version: nothing third-party loads until you choose. If you accept cookies, this site loads one Meta (Facebook) pixel so we can measure our advertising. If you decline, it loads nothing and sets no cookies. Either way, the only personal data you give us directly is what you type into the contact form.

1. Who we are

Astrolabix LLC (“Astrolabix”, “we”, “us”) is the controller of the personal data described in this policy.

Postal address: 30 N Gould St, STE R
Sheridan, WY 82801, USA
Privacy contact: hello@astrolabix.com

This policy covers astrolabix.com. It does not cover the systems we build or operate for clients under a signed statement of work - those are governed by the agreement for that engagement.

2. Cookies and measurement

We advertise on Meta’s platforms, and we want to know which of those ads bring people here. That is the only reason this site loads anything from a third party, and it does not load until you say so.

If you accept, the site loads the Meta pixel (dataset “Astrolabix”, ID 1397489795784374). It sets cookies in your browser and tells Meta Platforms, Inc. that you visited this site, which page you were on, your IP address and browser user-agent, and - if you send us a brief - that a contact form was completed. Meta may match that against an account you hold with them and use it to attribute and target advertising.

If you decline, or if you simply never answer, the pixel is never loaded, no request is made to Meta, and no cookies are set. Your choice is stored in your own browser so we do not have to ask again, and it is not sent anywhere.

You can change your mind whenever you like.

Whether or not you accept, this website:

runs no analytics of its own - no page-view counting, no session recording, no heatmaps;
loads no other third-party scripts, tag managers, embeds or social widgets;
serves its fonts, images and code from its own domain;
does no fingerprinting, and builds no advertising profile of its own about you;
sends no marketing email unless you ask us to;
never sells your personal data.

If your browser sends a Global Privacy Control signal, we treat it as a decline: the pixel stays unloaded and you are not asked.

3. What we collect

The contact form. When you send us a brief we receive:

your name;
your email address;
your company, if you choose to give it - the field is optional;
your project brief, the free-text description of what you want to build.

Please do not put confidential information, trade secrets, health or financial details, government identifiers, or other people’s personal data into the brief. A first message is not a secure channel; tell us instead that there is more to discuss and we will arrange one.

The spam trap. The form contains a hidden field named website. It is invisible to people and to assistive technology, and you are never asked to fill it in. Automated spam tools fill it anyway, so a submission that arrives with it completed is discarded as spam. We collect nothing else for spam filtering - no scoring service, no CAPTCHA.

Email you send us. If you write to hello@astrolabix.com we hold that correspondence, and whatever you chose to put in it, in our mailbox.

The Meta pixel, and only if you accept it. Section 2 sets out exactly what it collects and sends. We never put your name, your email address, or the text of your brief into it: its events record that a page was viewed or that a form was completed, never what you wrote.

Technical logs held by our providers. Delivering any website necessarily involves a hosting provider, and delivering the form involves a form-processing provider. Those providers keep their own short-lived operational records - for example the IP address a request came from - to serve pages and to protect the service from abuse. We do not use those records for analytics or profiling, and we do not combine them with anything else.

4. Why we use it, and our lawful basis

For anyone in the European Economic Area, the United Kingdom or Switzerland, the GDPR requires us to name a lawful basis for each purpose. Ours are:

Replying to your enquiry: Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in responding to people who ask us to (Art. 6(1)(f)).
Preventing spam and abuse: Our legitimate interest in keeping our inbox and our systems usable (Art. 6(1)(f)).
Keeping records of engagements: Performance of the contract with our client (Art. 6(1)(b)), and compliance with tax, accounting and other legal obligations (Art. 6(1)(c)).

For the Meta pixel we rely on your consent (Art. 6(1)(a) GDPR). That is why nothing loads until you give it, and why you can withdraw it at any time from section 2; withdrawing does not affect processing already carried out. For everything else on this page we rely on the bases in the table above, not on consent. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

5. How long we keep it

Enquiries that do not lead to work: deleted within 24 months of our last exchange with you.
Enquiries that become an engagement: kept for the life of the engagement, then for as long as we need them for our records and for the periods required by tax, accounting and limitation rules.
Meta pixel data: held by Meta under its own retention rules, not ours. Your cookie choice stays in your browser until you change it or clear your site data.
Submissions caught by the spam trap: discarded, and not read.

You can ask us to delete your enquiry sooner. See your rights below.

We do not sell your personal data, and we never have. If you accept cookies, the Meta pixel discloses your visit to Meta for advertising measurement, as described in section 2. That is the only advertising disclosure this site makes, and it does not happen unless you accept it. Otherwise we disclose personal data only:

to the service providers who make the site and our mail work - our hosting provider, our email provider, and the form-processing provider that delivers contact-form submissions to our inbox. They act on our documented instructions as processors, and may not use your data for their own purposes;
to Meta Platforms, Inc., if you accepted cookies, for advertising measurement and targeting. Meta acts as an independent controller for that data, under its own terms rather than our instructions;
to our professional advisers, where they need it and are bound by confidentiality;
where we are legally required to, or where it is necessary to establish, exercise or defend legal claims;
to a successor entity, if the business is ever transferred - in which case this policy continues to apply to data transferred with it.

7. International transfers

Astrolabix operates from the United States, and our service providers process data in the United States. If you contact us from the EEA, the UK, Switzerland or anywhere else outside the US, your personal data will be transferred to and stored in the United States, whose data protection laws differ from those where you live.

Where a transfer mechanism is legally required, we rely on the European Commission’s Standard Contractual Clauses - together with the UK International Data Transfer Addendum where the UK GDPR applies - in our agreements with the providers who process data on our behalf, alongside the technical measures described in this policy. Write to us if you would like details of the safeguards that apply to your data.

If you accept cookies, the Meta pixel sends data to Meta Platforms, Inc. in the United States under Meta’s own terms and transfer mechanisms rather than ours. Declining keeps that transfer from happening at all.

If you are in the EEA, the UK or Switzerland, you have the following rights over your personal data. They are free to exercise, and we will respond within one month.

Access: Get confirmation of what we hold about you, and a copy of it.
Rectification: Have inaccurate data corrected and incomplete data completed.
Erasure: Have your data deleted where we no longer need it or where you have successfully objected to our use of it.
Restriction: Have us pause our use of your data while a dispute about it is resolved.
Objection: Object to processing we base on legitimate interests, on grounds relating to your situation.
Portability: Receive the data you gave us in a structured, commonly used, machine-readable format, and have it sent to another controller where technically feasible.
Complaint: Lodge a complaint with the data protection authority in the country where you live or work - in the UK, the Information Commissioner’s Office. We would rather you came to us first, but that is your choice, not a condition.

To exercise any of these, email hello@astrolabix.com. We may ask you to confirm that you control the email address in our records, so that we do not disclose your data to someone else.

9. Your rights in California (CCPA/CPRA)

This section applies to California residents and uses the terms of the California Consumer Privacy Act as amended by the CPRA.

Categories collected in the last 12 months. All of it comes directly from you, through the contact form or by email, and is used for the business purposes described in section 4.

Identifiers: Your name, email address, and company name if you give one.
Professional information: Your employer and role, to the extent you describe them in your brief.
Commercial information: The content of your project brief, to the extent it records services you are considering.
Internet or network activity: Only if you accept cookies: the pages you view on this site, your IP address and your browser user-agent, collected by the Meta pixel.

Categories we do not collect: sensitive personal information (including government identifiers, financial account details, precise geolocation, race or ethnicity, religion, union membership, genetic, biometric, health or sex-life data); audio, visual or biometric data; education records; characteristics of protected classifications; and inferences drawn to create a profile. Because we collect no sensitive personal information, there is nothing for a request to limit its use to apply to.

No sale. Sharing only if you accept. We do not sell personal information and have not done so in the preceding 12 months. If you accept cookies, the Meta pixel is sharing for cross-context behavioural advertising as the CCPA defines it. You opt out by declining cookies, by withdrawing consent in section 2, or by sending a Global Privacy Control signal - each one stops the pixel loading. We do not share the personal information of consumers we know to be under 16.

Your rights. As a California resident you may:

request to know the categories and specific pieces of personal information we have collected, the sources, our purposes, and the categories of recipients;
request that we delete personal information we collected from you;
request that we correct inaccurate personal information;
opt out of sharing personal information for cross-context behavioural advertising - decline cookies, or withdraw consent in section 2. We never sell;
not be discriminated against for exercising any of these rights. We will not deny you service, charge you a different price, or give you a lesser experience.

Make a request by emailing hello@astrolabix.com with “Privacy request” in the subject line. We will verify you by corresponding with the email address we hold, and will respond within the statutory period. An authorised agent may act for you if they provide written permission signed by you; we may still contact you to confirm.

Residents of other US states with comprehensive privacy laws - among them Virginia, Colorado, Connecticut, Utah, Texas and Oregon - have comparable rights of access, correction, deletion and portability, and should contact us the same way.

10. Children

This site is aimed at businesses. It is not directed to children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to us and we will delete it.

11. Security

The site is served over HTTPS. Access to the mailbox and to form submissions is limited to the people at Astrolabix who need it and is protected by strong authentication. We keep the attack surface small on purpose: at most one third-party script, loaded only with your consent, and no database of visitors. No method of transmission or storage is perfectly secure, and we cannot guarantee absolute security.

12. Changes to this policy

If we change how we handle personal data, we will revise this page and move the “Last updated” date. Material changes will be described here rather than made quietly.

13. How to reach us

Questions, requests and complaints about this policy all go to the same place:

Email: hello@astrolabix.com
Post: Astrolabix LLC
30 N Gould St, STE R
Sheridan, WY 82801, USA

← Back to the site