How Orbit handles your data, blocks and messages. Last updated: September 16, 2026.
Orbit (orbitapp.buzz) is the data controller for the personal data described on this page. You can contact the controller at orbitapp@atomicmail.io for any question about this notice or your personal data.
Orbit is a small independent service and is not required to appoint a Data Protection Officer. Privacy requests are handled directly by the controller at orbitapp@atomicmail.io, which acts as the single contact point for data protection matters.
We process your account, posts, messages and call metadata to perform the contract you enter when you create an account (Art. 6(1)(b) GDPR). Security, anti-abuse, rate limiting and moderation rely on our legitimate interest in keeping the service safe (Art. 6(1)(f)). Optional features such as notifications rely on your consent (Art. 6(1)(a)), which you can withdraw in Settings at any time.
Your data is shared only with the people you choose inside the app (friends, group members, recipients of your messages) and with the processors that run the service on our behalf: our hosting and database/storage provider, and Cloudflare for the human verification check and network protection. We never sell your data and never share it with advertisers.
Our processors may store or process data outside the European Economic Area, including in the United States. Such transfers rely on the European Commission's Standard Contractual Clauses and additional safeguards in our processors' data processing agreements. You can ask for details at orbitapp@atomicmail.io.
Account data, posts and messages are retained while your account is active. Deleting content removes it immediately; deleting your account removes your profile, posts, media and messages. Completely empty accounts inactive for more than 7 days are deleted automatically. Security and anti-abuse records (such as sign-up rate-limit signals and moderation decisions) are kept for up to 12 months.
You have the right to access your data, to rectify it, to erase it, to restrict or object to processing, and to data portability. Use the request form on this page, or edit and delete your data directly from Settings and Edit profile.
If you believe your data has been handled unlawfully, you can lodge a complaint with your national data protection supervisory authority — for users in Italy, the Garante per la protezione dei dati personali (gpdp.it). You may also complain to the authority in your country of residence or workplace.
Your email address, the @username you choose, display name, profile photo and banner. We also store whether you have set a password and accepted the terms.
Photos, videos, captions, likes, reposts, saves and comments you create. Media you upload is stored in a private bucket and is only visible according to your privacy settings and your connections.
Direct and group messages, including text, photos, videos and voice notes. Call metadata (who called whom and when) is created so calls can be connected. Message content is visible only to the people in the conversation.
Friendship requests and status, read receipts, last-seen indicators on messages and login records used to protect your account (such as two-step verification factors). We use Cloudflare Turnstile to verify you are human without tracking you across the web.
Your data is used to show your profile, feed, chats, calls and notifications, and to connect you with friends and groups you interact with.
Direct messages, group messages and their media are visible only to the participants. Your post and chat privacy settings control who can see your content and who can message you. Row-level security enforces these rules on the database itself.
Moderators can review reported posts, remove content that breaks the rules, and ban or suspend accounts. Moderation actions are recorded with a reason and, for suspensions, an expiry date.
Your content stays as long as your account is active. You can delete posts, messages and conversations at any time. When you delete your account, your profile, posts and messages are removed.
You can request a copy of the personal data we hold about you — your profile, posts, messages and activity — at any time. Send the request from your account email to a moderator.
If any of your personal data is inaccurate or incomplete, you can correct it directly from Edit profile and Settings, or ask a moderator to fix it for you.
You can request that we delete your personal data. Deleting your account removes your profile, posts, messages and media. Some records may be kept briefly where required to prevent abuse or comply with legal duties.
You can object to the processing of your data for certain purposes. You may close your account, limit who can contact you via chat privacy settings, and block any account at any time.
You can receive your data in a structured format to move it to another service. You can also withdraw consent for optional processing — such as notifications — at any time from Settings, without losing access to your account.
Use the request form to ask for access, correction or deletion of your data, or to object to how it is processed. You can follow the status of every request you send.
Open the request form@username, display name, bio, profile photo, banner
Kept until: You delete your account
Email address (login only — not stored in any app table)
Kept until: You delete your account
Password
Kept until: Never stored — only an encrypted hash held by the login system
App settings: theme, notifications, autoplay, chat and post privacy
Kept until: You delete your account
Posts with photos, videos and captions
Kept until: You delete the post or your account
Likes, saves, reposts and comments
Kept until: You delete them or your account
Stories and the list of who viewed them
Kept until: 24 hours after publishing
Friend requests, friendships, follows and blocks
Kept until: You remove them or delete your account
Direct and group messages, media, voice notes, reactions
Kept until: You delete them or your account
View-once media
Kept until: Deleted content stays only as an “opened” marker
Reports you send, with any photo or video attached as proof
Kept until: The report is closed by moderators
Moderation records: bans, suspensions, reasons
Kept until: Kept while needed to prevent abuse
Data requests you send and the contact email you type in them
Kept until: You delete your account
Anti-bot checks (Cloudflare Turnstile)
Kept until: Minutes — no cross-site tracking
We never sell your data, never share it with advertisers, and never store your password — it is kept encrypted by the login system and cannot be read by anyone, including us.
When you block someone, any friendship between you is removed and neither of you can send messages to or call the other. Your profile, posts, photos, videos and banner become invisible to that person, and theirs become invisible to you.
Blocking is reciprocal. The other person cannot see your posts or contact you, and you cannot see theirs. Existing messages are hidden but not deleted; they reappear only if the block is lifted.
You can unblock an account at any time from Settings → Blocked accounts. Unblocking does not restore a friendship automatically — you would need to send a new friend request.
By default, only your friends can send you direct messages. You can change this in Settings → Chat privacy to allow anyone. Group messages are sent within conversations you are a member of.
Direct messages are visible only to you and the other person. Group messages are visible only to members of the group. Read receipts (Sent / Read) and timestamps are shown to the participants.
Accounts you have blocked, or who have blocked you, cannot send you messages or start calls. Their messages, media and profile are hidden from you and yours are hidden from them.
Want to know exactly what is allowed, how reporting works, and what a ban or a suspension means? Read the dedicated moderation FAQ.
Open Moderation FAQBy using Orbit you confirm you are old enough to use a social app in your country and that you accept these terms. Breaking them can lead to a suspension or a permanent ban.