Privacy policy.

Who we are

Near Orbit is a brand of Bspace Holding B.V., based in The Netherlands. Bspace Holding B.V. is the controller responsible for the personal data we process through this website and correspondence.

Contact us about privacy at info@near-orbit.com.

We do not sell personal data or use it for advertising, audience profiling or tracking. We do not add analytics SDKs, tracking pixels or advertising trackers to Magnetar or this website. Delivering a website and receiving an email nevertheless involves some personal-data processing, explained below.

Magnetar: on your device, to your NAS

Magnetar is a client for Synology Download Station. It has no Near Orbit account, developer-operated backend or telemetry service. It does not send your NAS credentials, download activity or usage information to us.

The app stores your saved NAS connection details on your device, including its address, username and connection preferences. Passwords are stored in Apple’s Keychain. If you enable them, certificate trust details and NAS-issued trusted-device tokens are also saved locally. Biometric protection is handled by iOS; we do not receive your biometric data.

When you connect, Magnetar sends the credentials and commands needed to the NAS address you configure. Download links, torrent files and file selections are sent there when you request a download. The NAS handles downloads and may contact download sources, trackers or peers as part of that task. These BitTorrent trackers are part of the download protocol, not advertising trackers embedded in Magnetar.

You control the NAS and its configuration. Its administrator and any services you choose may have their own logging and retention practices. Near Orbit does not receive that information. Use HTTPS and connect only to NAS servers you trust.

Saved account details remain until you remove the account in Magnetar. Removing it deletes its saved connection details and Keychain password; it does not delete files or records on your NAS. Original torrent files remain wherever you saved them. Manage NAS data and trusted-device access directly in DSM.

The website and Cloudflare

We use Cloudflare to host and deliver near-orbit.com and protect it from abuse. Cloudflare processes technical request data, which can include your IP address, requested URL, time of access, browser information, country inferred from your IP address and security events. This is necessary to serve pages and maintain a reliable, secure website. Our legal basis is our legitimate interest in providing and protecting the site (GDPR Article 6(1)(f)).

We do not maintain our own visitor database or use traffic data to build marketing profiles. Cloudflare may make operational and security information available to us and processes some network data for its own security and service purposes. See Cloudflare’s privacy policy.

Network-error reports

Cloudflare currently enables Network Error Logging for this site. Supporting browsers may send connectivity-failure reports to Cloudflare, including the affected URL and technical connection details. Cloudflare says it uses the client IP temporarily to determine network and approximate location, then discards the IP from this reporting pipeline. This is infrastructure diagnostics, not advertising or cross-site tracking. See Cloudflare’s NEL documentation.

Cookies and browser storage

Our website code does not set cookies or store identifiers in your browser. Cloudflare security features may set necessary cookies when protecting the site or checking a request. A cf_clearance cookie can remember a passed security challenge; our Challenge Passage setting is 30 minutes. Bot Fight Mode and continuous script monitoring are disabled. These are conditional security mechanisms, not cookies we use for advertising. See Cloudflare’s cookie information.

Hosting retention

We do not export visitor logs into a separate archive. Cloudflare’s published terms do not give one fixed retention period for every service: its processor terms tie retention to the service agreement and necessity of processing, while its own policy also considers security and legal requirements. The applicable criteria are in its Data Processing Addendum, Annex 1 and privacy policy, section 11. We cannot promise immediate deletion from Cloudflare’s systems.

If you email us

Email is optional. Sending a message shares your email address, any sender name, the message, attachments and delivery metadata with us and our email provider, Proton Mail. We use this only to read and handle what you have sent, based on our legitimate interest in receiving correspondence (GDPR Article 6(1)(f)). Please do not send passwords, identification documents or sensitive personal information.

Our policy is to permanently delete emails containing personal information from our active mailbox immediately after first reading. This includes attachments and removal from Trash. We do not keep a correspondence archive or copy personal details into a contact list. Until first reading, the message remains in the mailbox.

This does not erase every provider copy instantly. Proton states that its encrypted backups are retained for up to 30 days, and it processes email metadata for service operation and security. Your own email provider and copies you retain are outside our control. See Proton Mail’s privacy policy.

Providers and international transfers

Cloudflare, Inc. supplies website infrastructure; Proton AG supplies email. Their authorized service providers may also process data needed to deliver those services. Their own privacy notices describe processing for which they determine the purposes independently.

Cloudflare operates a global network, so data may be processed outside the European Economic Area, including in the United States. Its published Data Processing Addendum provides for EU Standard Contractual Clauses and additional safeguards for restricted transfers. You can contact us for information about the applicable safeguards.

Proton states that email storage is in Switzerland, Germany or Norway. Switzerland benefits from a European Commission adequacy decision; Germany and Norway are in the EEA.

Your rights and choices

Where applicable, you can request access, correction, deletion, restriction or portability of your personal data. You can object to processing based on legitimate interests for reasons relating to your situation. We do not make decisions about you based solely on automated processing that produce legal or similarly significant effects.

Email info@near-orbit.com to exercise your rights. We respond without undue delay, normally within one month. If an extension permitted by law is needed, we will explain it within that month. We may need limited information to verify your request, but please do not send an identity document unless we specifically explain why it is necessary.

We do not collect extra identifying information merely to identify otherwise unidentified visitors. If we no longer hold your data, or cannot identify it, we will explain that. Processing necessary to handle a statutory rights request is based on our legal obligations (GDPR Article 6(1)(c)).

You may complain to the Dutch Autoriteit Persoonsgegevens, or to the supervisory authority where you live or work. You do not have to contact us first.

Changes to this policy

We will update this page if our data practices change and revise the date above. Any new processing that requires consent will not begin without it.