Privacy policy

Last updated 16 October 2026

1. Who is responsible

The controller of personal data processed through NextLiftoff is [to be completed], [to be completed], tax ID [to be completed]. You can reach us at [to be completed] about anything in this policy.

2. The short version

• No accounts, no tracking, no analytics, no advertising cookies.
• Your time zone and watchlist are stored only in your own browser.
• If you turn on launch reminders, we store what your browser needs to receive them, and nothing that identifies you by name.
• Nothing loads from other companies unless you press play on a YouTube stream.

3. What we process and why

Visiting the site

To deliver pages, our server receives your IP address and the usual request details from your browser. Our hosting provider, [to be completed], may keep these in short-lived server logs for security and to keep the service running. Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR).

Settings stored in your browser

Your chosen time zone, your starred launches and providers, and your reminder settings are saved in your browser's local storage. They never reach our server, except as described for reminders below. This storage is strictly necessary for features you ask for, so it does not need consent; you can clear it any time in your browser settings.

Launch reminders (push notifications)

When you enable reminders, your browser creates a push subscription: an address at your browser vendor's push service (for example Google, Mozilla, Apple or Microsoft) plus encryption keys. We store that subscription together with the IDs of the launches and providers you starred and how early you want to be reminded, so we can send the reminders. Legal basis: your consent (Art. 6(1)(a) GDPR). You can withdraw it any time with “Turn off” on the Watchlist page or in your browser; we then delete the subscription. Subscriptions that the push service reports as expired are deleted automatically. Reminders are delivered through your browser vendor's push service, which acts under its own privacy policy.

YouTube streams

Launch pages show a placeholder instead of a video. Only when you press play do we load the YouTube player (youtube-nocookie.com), and from then on Google Ireland Ltd. receives your IP address and may set cookies, under Google's privacy policy. Legal basis: your consent, given by pressing play.

Contacting us

If you email us, we use your address and message only to answer, and delete them when they are no longer needed.

4. Who receives data

Our hosting provider ([to be completed]) processes data on our behalf. Push services and YouTube receive data only in the situations above. We do not sell personal data.

5. Transfers outside the EEA

Push services and Google may process data outside the European Economic Area, for example in the United States, on the basis of the EU–US Data Privacy Framework or standard contractual clauses.

6. How long we keep it

Push subscriptions: until you turn reminders off or the subscription expires. Server logs: as briefly as our hosting provider allows, at most a few weeks. Emails: until the matter is closed.

7. Your rights

You have the right to access, rectify, erase and restrict processing of your data, to data portability, to object to processing based on legitimate interest, and to withdraw consent at any time. Write to [to be completed]. You can also complain to the supervisory authority: in Poland, the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl.

8. Changes

We will update this page when what we do with data changes, and change the date at the top.