Privacy Policy
Last updated October 5, 2026
1. Who is responsible
Vidyuth Subbaiah, who operates Mars Move-In, is responsible for your personal data. Contact: hello@marsmovein.com.
2. What we collect and why
| Data | Purpose | Legal basis (EU/UK) |
|---|---|---|
| Email address and account id | Sign-in links, receipts, notices about your habitats | Contract |
| Orders: plot, price, credits used, Stripe session id, campaign tags | Deliver purchases, refunds, accounting, measure which campaigns work | Contract; legitimate interest |
| Habitat content: name, logo, colors, description, link, address | Show your habitat publicly on the map and its page | Contract |
| Technical logs: IP address, browser, pages requested | Security, abuse prevention, fixing errors | Legitimate interest |
| Visit counter cookie (random id) | Count each habitat's visits once per visitor per day | Legitimate interest |
| Product analytics and session replays (PostHog), typed text masked | Understand how the map is used and improve it | Consent where required; otherwise legitimate interest |
| Ad measurement (X and Meta pixels) | Know whether our ads lead to visits and purchases | Consent where required; otherwise legitimate interest |
| Content reports and emails you send us | Handle reports, support and legal requests | Legitimate interest; legal obligation |
3. Where it comes from
From you (sign-in, habitat design, emails), from your browser as you use the site, and from Stripe when a payment succeeds or fails. We never receive your full card number.
4. Public information
Your habitat's name, owner label, logo, description, link, value, visit counts and history of prices are public on the map, your habitat page, rankings and directory. Your email address is never shown.
5. Analytics, ads and consent
In the EU, EEA, UK and Switzerland we ask before using analytics storage, session replay and ad pixels; choosing "Essential only" keeps them off. Elsewhere they load by default and you can block them with your browser. Details are in the Cookie Policy.
6. Who processes it for us
Supabase (database, sign-in, file storage), Stripe (payments), Resend (email), Vercel (hosting), PostHog (analytics), X and Meta (ad measurement, where allowed). They act on our instructions or under their own privacy terms for ad measurement. We don't sell personal information.
7. International transfers
These providers may process data in the United States and other countries. Where EU or UK law applies, transfers rely on the providers' standard contractual clauses or equivalent safeguards.
8. How long we keep it
Account and habitat data: while your account is active, plus up to 12 months. Orders and payment records: as long as tax and accounting law requires (usually 7 years). Analytics events: up to 12 months. Server logs: up to 30 days.
9. Automated decisions
We don't make decisions with legal or similar effects about you by automated means.
10. Your rights
Depending on where you live, you can ask to access, correct, delete or export your data, object to or restrict some uses, and withdraw consent. Email hello@marsmovein.com from the address you signed in with. You can also complain to your local data protection authority.
11. Security
Data is encrypted in transit, access is limited and logged, and payments run on Stripe. If a breach affects you we'll tell you as the law requires.
12. Children and changes
Mars Move-In isn't aimed at children under 13 and we don't knowingly collect their data. We'll update this policy when our practices change; the date above shows the latest version.