1. Who is responsible
Quaranet is a pre-incorporation engineering project run by its two founders. Until a legal entity is registered, the founders act as the data controllers for anything you send through this site. We would rather say that plainly than name a company that does not yet exist.
You can reach us for any privacy question at hello@quaranet.space. A person reads it; there is no ticketing system in between.
2. What we collect
Only two things: what you deliberately submit, and what any web server unavoidably sees.
From the contact form
| Field | Required | Why we ask |
|---|---|---|
| Full name | Yes | To address you properly in the reply. |
| Email address | Yes | It is the only way we can answer you. |
| Company / agency | No | Helps us pitch the answer at the right level. |
| Message | Yes | The thing you actually want to tell us. |
| Areas of interest | No | The checkboxes. Lets us route the reply. |
Automatically, when the form is submitted
- Your IP address. Two uses, both narrow. It is written into the notification email we receive so we can tell a real enquiry from an abusive one, and it is hashed and stored briefly in a temporary file to enforce a rate limit of five submissions per ten minutes.
- A timestamp, for the same rate limit.
Our web host also keeps standard server access logs, as every web host does. We do not read them for anything except diagnosing a fault, and we do not connect them to form submissions.
We do not use cookies. No analytics, no tag manager, no advertising or social pixels, no session tracking, no fingerprinting, no A/B testing, no chat widget, no newsletter list. If you never touch the contact form, we never learn anything about you.
3. Third parties that see your request
We want to be exact about this, because "we don't track you" is often said by sites that quietly load half a dozen third-party scripts. This site loads assets from two external services, and both of them can see your IP address and browser user-agent when your browser fetches from them:
| Service | What it serves | Where |
|---|---|---|
Google Fontsfonts.googleapis.comfonts.gstatic.com |
The two typefaces used across the site. | Google, global |
jsDelivrcdn.jsdelivr.net |
The 3D library and Earth textures on the front page. | Global CDN |
Neither service is given your name, email or message, and neither sets a cookie in this configuration. We are working towards self-hosting both so that even this is unnecessary.
Email we receive from the form is delivered over authenticated SMTP into a Google Workspace mailbox, so Google processes it as our email provider, the same way it would if you had emailed us directly.
4. Why we are allowed to hold it
If the GDPR (Regulation (EU) 2016/679) applies to you, our legal basis is Article 6(1)(b), taking steps at your request before entering into a contract, and, where that does not fit, Article 6(1)(f), our legitimate interest in answering people who contact us about our work. You supplied the data specifically so that we would reply to it.
If Turkish law applies to you, the equivalent basis under KVKK (Law No. 6698) is Article 5/2(f), legitimate interest, and Article 5/2(c) where a contract is in prospect.
We do not do automated decision-making or profiling on anything you send, and we never sell, rent or share it. There is no third party to share it with.
5. How long we keep it
- Rate-limit records (hashed IP + timestamps): cleared automatically after 10 minutes.
- Your message and the details attached to it: kept in our mailbox for as long as the conversation is live, and for up to 24 months afterwards so that we have context if you come back to us. Then deleted.
- If you ask us to delete it sooner, we delete it. See below.
6. Your rights
Under the GDPR and under KVKK you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it entirely;
- restrict what we do with it, or object to us holding it at all;
- send it to you in a portable form.
Email hello@quaranet.space and say which one. We do not require a form, an account, or proof of identity beyond replying from the address you contacted us with. We aim to act within 7 days, and the law gives us 30 at the outside.
If you think we have handled your data badly, you are entitled to complain to your national supervisory authority. In the EU that is your country's data protection authority, and in Turkey it is the Kişisel Verileri Koruma Kurumu (KVKK). We would appreciate the chance to fix it first, but that is your choice, not a precondition.
7. Security
The form is served over HTTPS and submitted to a server-side endpoint that validates input, rate-limits by IP, and escapes everything before it is placed into an email. Mail credentials are stored outside the web root's reach and blocked at the server configuration level. The site pins its third-party scripts by cryptographic hash (Subresource Integrity), so a compromised CDN cannot substitute different code.
No system is perfect. If you find a security problem with this site, please tell us at hello@quaranet.space before publishing it, and we will credit you when it is fixed.
8. Children
This site is aimed at space agencies, satellite manufacturers, defense organisations and investors. It is not directed at children and we do not knowingly collect their data.
9. Changes to this notice
If we change how any of this works, for example when Quaranet is formally incorporated, or if we ever add analytics, we will update this page and change the date at the top. We will not quietly start collecting something new under an old notice.