Privacy Policy

1. INTRODUCTION

Space Weed Universe ("we," "us," "our") operates TheMarsSpace.com and SpacePiff.com (collectively, "the Platform"). This Privacy Policy explains how we collect, use, store, and protect your information when you use the Platform.

By using the Platform, you consent to the practices described in this policy. If you do not agree, please do not use the Platform.

2. INFORMATION WE COLLECT

Account Information:

Email address (encrypted at rest — see Section 4)
Password (hashed with bcrypt — we cannot read your password)
Martian name, role, bio, and earth sector (user-provided)
Transmission ID (TID) — automatically assigned unique identifier

Google Authentication: If you register or log in via Google OAuth, we receive your Google email address, display name, and profile picture URL. We do not receive or store your Google password.

AI Generation Data: Character customization selections (skin tone, eye color, headwear, suit color, expression, flair) and optional text descriptions ("user prompts") provided during avatar generation.

User Content: Music uploads, wall comments, profile information, and other content you voluntarily submit.

Automatically Collected: IP addresses (for rate limiting and security), timestamps of account creation and last login.

3. HOW WE USE YOUR INFORMATION

Data	Purpose
Email	Account authentication, password recovery, important notifications
Password hash	Secure login verification
Profile info	Display on public profile, dashboard, and community features
Character choices	AI avatar generation, stored for regeneration
User prompts	Influence AI avatar generation (not stored permanently after generation)
IP address	Rate limiting, security, abuse prevention
Login timestamps	Account security, intelligence reports

4. EMAIL ENCRYPTION & STORAGE

Your email address is stored in an encrypted format using industry-standard Fernet symmetric encryption. A one-way SHA-256 hash of your email is used for login lookups. This means:

Your raw email is never stored in plaintext in our database
Only authorized administrators with the encryption key can decrypt emails
The email hash is irreversible — it cannot be used to recover your email

5. THIRD-PARTY SERVICES

We use the following third-party services:

Service	Purpose	Data Shared
Google OAuth	Optional login/registration	Email, name (from Google)
HighLevel CRM	Contact management and notifications	Email, name, tags
Resend	Transactional email delivery	Email address (for sending)
Gemini AI (Google)	Character avatar generation	Customization options and prompts (no personal data)
Emergent Object Storage	Avatar image storage	Generated avatar images

We do not sell your personal data to any third party.

6. COOKIES & LOCAL STORAGE

The Platform uses browser localStorage (not traditional cookies) to store:

Authentication token (JWT) — for maintaining your login session
Active user profile information — for displaying your dashboard

We do not use advertising cookies, tracking pixels, or third-party analytics cookies. No data is shared with advertising networks.

7. PUBLIC PROFILE VISIBILITY

The following information is publicly visible on your profile page:

Martian name and Transmission ID (TID)
Character avatar (AI-generated or custom)
Role, bio, and earth sector
Wall comments (posted by you and others)
Friend connections

Public profiles are accessible via a direct URL (/martian/#TID). Your email address is never displayed publicly.

Recently generated characters may appear in the "Recent Recruits" gallery on the landing page, displaying your Martian name, TID, and avatar.

8. DATA RETENTION

We retain your account data for as long as your account is active. Upon account deletion:

Your profile, avatar, and associated content will be removed
Wall comments you posted on other profiles may be anonymized rather than deleted
We may retain encrypted email records for up to 30 days for security purposes
CRM records in HighLevel may be retained for business communication purposes
Activity logs may be retained in anonymized form for analytics

9. DATA DELETION REQUESTS

You may request deletion of your account and associated data by contacting us at highcommand@spaceweeduniverse.com. We will process deletion requests within 30 days.

Please include your Transmission ID (TID) and the email address associated with your account in your request.

10. YOUR RIGHTS (CCPA / GDPR)

California Residents (CCPA): You have the right to know what personal information we collect, request deletion of your data, and opt out of the sale of personal information. We do not sell personal information.

EU/EEA Residents (GDPR): You have the right to access, rectify, erase, restrict processing, and port your personal data. You also have the right to withdraw consent and lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at highcommand@spaceweeduniverse.com.

11. CHILDREN'S PRIVACY

The Platform is not intended for individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has created an account, please contact us immediately and we will take steps to delete the account.

12. DATA SECURITY

We implement industry-standard security measures including:

Email encryption (Fernet symmetric encryption)
Password hashing (bcrypt)
HTTPS/TLS for all data transmission
JWT-based authentication with expiration
Rate limiting on authentication endpoints

While we strive to protect your data, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

13. CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. We will notify users of material changes via the Platform. Continued use after changes constitutes acceptance of the updated policy.

14. CONTACT

For privacy-related inquiries, data requests, or questions about this policy:

Email: highcommand@spaceweeduniverse.com

Space Weed Universe
TheMarsSpace.com