Summary: We use OAuth sign-in only. No passwords are ever stored. For signed-in accounts we keep your email address to link accounts across providers — nothing else.
Information We Collect
SatMCP collects the following information when you use our service:
Search queries - Place names and dates you search for
Server logs - IP addresses, timestamps, and request metadata (standard web server logs)
Email address and display name - Collected only when you sign in, to identify your account and link it across OAuth providers
We do not collect:
Passwords — authentication is handled entirely by your chosen identity provider (Google, GitHub, or Microsoft) via OAuth
Cookies or tracking identifiers beyond your active login session
Location data beyond what you explicitly search for
Authentication
Sign-in is handled exclusively through OAuth with your chosen identity provider. We never see or store your password. When you sign in, your provider confirms your identity and shares your verified email address with us. That email is the only personal data we store — it is used to identify your profile and to link accounts if you sign in with multiple providers.
How We Use Information
We use collected information to:
Provide and improve the satellite imagery search service
Account email and display name - Retained for as long as your account exists; deleted on request
Third-Party Services
SatMCP uses the following third-party services:
OpenStreetMap Nominatim - For geocoding place names. See their privacy policy.
Satellite imagery providers - Public imagery catalogs and cloud-hosted imagery sources.
Google Cloud Platform - For hosting. See their privacy notice.
Data Security
We implement reasonable security measures including:
HTTPS encryption for all API traffic
VPC-isolated infrastructure
Regular security updates
Your Rights
If you have signed in, your email address is stored on our servers. You can request deletion of your account data at any time by contacting us. If you've only used anonymous search or contacted us by email and want that correspondence removed, we'll handle it promptly.
Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated revision date.