Privacy without hiding the mechanism.
The Airlock is built around public accountability. This page explains what stays public, what stays private, and which services help run the ship.
Who runs The Airlock
The Airlock is operated from theairlock.space. For privacy questions, contact oskar@theairlock.space.
This policy applies to the public site, boarder accounts, manifest checkout, public profiles, mission logs, dashboard, and related API routes.
Data we collect
We collect the information needed to authenticate you, sell and assign seats, operate missions, maintain public accountability records, and keep the service secure.
- Account and authentication data: Clerk user ID, email address, authentication status, session data, and related security events.
- Boarding and billing data: selected plan, seat number, cohort, price paid, boarding status, re-boarding status, and billing entitlement data. Payment card details are handled by Clerk and its payment infrastructure, including Stripe; The Airlock does not store full card numbers.
- Public profile data: handle, display name, bio, profile path, avatar status, avatar URL, social links, seat history, and mission history.
- Usage analytics: page views, browser and device context, referral information, and interaction events used to understand and improve the product.
- Mission data: mission declaration, declaration URL, proof URL, timestamps, deadline, mission status, review outcome, airlock status, and redemption state.
- Accountability stack data: whether Crew Alert, The Wake, or the re-entry challenge is enabled, plus Crew Alert contacts if you choose to provide them.
- Technical data: API requests, device and browser metadata, IP-derived security logs, profile-view counts, error logs, and cookies or local storage needed for authentication, checkout, abuse prevention, and core site operation.
- Avatar data: if you upload a source photo for astronaut-suit avatar generation, the source may be stored privately and sent to an image-generation provider to create the public avatar.
Some data is public on purpose
The Airlock works because the deadline and outcome are visible. Your handle, display name, public profile, seat label, mission declaration, mission URLs, mission status, launch confirmations, airlock stamps, and Wake entries may be visible publicly.
Do not put secrets, private client work, credentials, unreleased confidential information, or anything you are not allowed to share into your handle, bio, mission declaration, declaration URL, proof URL, or social links.
Airlock records are designed to persist. We may remove or redact data when required by law, for safety, or to fix abuse, but the product is not designed as an erasable private journal.
How we use data
- Authenticate users and protect accounts.
- Process checkout, determine billing entitlements, and assign seats.
- Run the 30-day mission cycle, mission proof review, Wake entries, profile pages, and dashboard.
- Send operational notices, security messages, support replies, and selected Crew Alert notifications.
- Measure basic service health, count profile views, debug errors, prevent abuse, and enforce the Terms.
- Maintain public records that make the accountability mechanic work.
Where privacy law requires a legal basis, we rely on contract performance, legitimate interests in operating and securing the service, consent where requested, and legal obligations where applicable.
Cookies and local storage
The site uses cookies, local storage, and similar browser storage for authentication, session continuity, checkout, security, and core functionality. We do not run behavioral advertising cookies in v1.
How long data stays
Account, billing, mission, seat, and public accountability records are kept for as long as needed to operate The Airlock, keep the public log coherent, resolve disputes, comply with law, and prevent abuse. Security and diagnostic logs are retained for a shorter operational period where practical.
You can request deletion or correction. Some public mission, seat, and airlock records may remain visible or be annotated instead of deleted where retention is necessary for the accountability mechanic, legal compliance, fraud prevention, or dispute records.
Your privacy rights
Depending on where you live, you may have rights to access, correct, delete, restrict, export, or object to certain processing of your personal data. You may also have the right to withdraw consent where processing depends on consent, and to complain to a data protection authority.
Send requests to oskar@theairlock.space. We may need to verify that the requesting person controls the relevant account before acting on a request.
Security, transfers, and age limits
We use reasonable technical and organizational safeguards for the size and nature of the service. No internet service can guarantee absolute security.
The Airlock and its providers may process data in countries other than yours. Where required, transfers rely on provider safeguards and applicable legal mechanisms.
The Airlock is not intended for children under 18. Do not use the service if you are under 18.
Changes to this policy
We may update this policy as the product changes. The updated date above shows when the latest version went live. Material changes may also be announced in the product or by email.