Skip to main content
Space Frontiers LogoSpace Frontiers Logo
Loading news...

Privacy Policy

Effective date: 2026

This Privacy Policy explains how Space Frontiers (the "Provider", "we", "us", or "our") collects, uses, discloses, and protects your information when you use our services.

1. Information We Collect

  • Personal Information: such as your name, email address, and payment details when you register or use our services.
  • Usage Data: including IP address, browser type, device information, and usage patterns.
  • Cookies and Tracking Technologies: to enhance your experience and analyze service usage.

2. How We Use Your Information

  • To provide, maintain, and improve our services
  • To process payments and manage your account
  • To communicate with you about updates, support, and marketing (with your consent)
  • To ensure security and prevent fraud
  • To comply with legal obligations

3. API and MCP Server

Space Frontiers exposes a public REST API at api.spacefrontiers.org and an MCP (Model Context Protocol) server at mcp.spacefrontiers.org. When an AI agent or your own integration calls these endpoints on your behalf, we process the following data:

  • Search query text and tool arguments: stored for debugging and relevance evaluation; retained for up to 30 days then aggregated.
  • Account identifier: the Space Frontiers user_id and (if applicable) organization_id attached to each request, used for billing and quota.
  • Request metadata: timestamp, source IP, user-agent, latency, HTTP status. Standard access-log retention.
  • The MCP client name: when you authorize a third-party agent (Claude Desktop, Cursor, ChatGPT, etc.) via OAuth, we record the software_id and client_name the agent registered under, so you can revoke access per-client from your account settings.

What we do NOT do: we do not sell or share search queries with advertisers, we do not train a public model on your queries, and we do not pass query text to the connected MCP client beyond the answer the agent requested.

4. OAuth Tokens and Long-Lived API Keys

We issue two kinds of credentials:

  • OAuth 2.1 access tokens minted via the consent flow at spacefrontiers.org/oauth/authorize. Access tokens expire after 1 hour. Refresh tokens are stored as SHA-256 hashes (we never keep the raw value), expire after 30 days, and rotate on every use; reuse of a previously-rotated refresh token revokes the entire token chain immediately. Each token is audience-bound to mcp.spacefrontiers.org so it cannot be replayed against another service.
  • Long-lived API keys created from your account dashboard. These do not expire automatically; you can revoke them any time from your account settings.

Authorization-code values are deleted from our database the moment they are exchanged for a token (or after 60 seconds if unused).

5. Cookies

We use cookies and similar technologies to remember your preferences, analyze traffic, and improve our services. You can control cookies through your browser settings.

6. Sharing Your Information

We do not sell your personal information. We may share your data with trusted third-party service providers (such as payment processors or analytics providers) only as necessary to operate our services, or if required by law.

7. Your Rights

  • Access, update, or delete your personal information
  • Withdraw consent for marketing communications
  • Request information about how your data is processed

To exercise your rights, please contact us using the information below.

8. Data Security

We implement appropriate technical and organizational measures to protect your data from unauthorized access, disclosure, alteration, or destruction.

9. International Data Transfers

Your information may be processed and stored in countries outside your own. We ensure adequate protection for such transfers as required by law.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

11. Contact Us

If you have any questions or requests regarding this Privacy Policy, please contact us at [email protected].

12. Service Provider

This service is provided by Space Frontiers, a Wyoming private corporation with registered address at 30 N Gould St Ste R, Sheridan, WY 82801, USA.

Last updated: 5/15/2026