Privacy

Galaxy stores your account details and sign-in sessions to provide access to your Chats. Authentication uses GitHub, Google, Resend for email delivery, Upstash for temporary verification and rate limits, and Cloudflare Turnstile for abuse prevention.

After account deletion, we keep a keyed, hashed grant record of verified emails and GitHub or Google account IDs that received sign-up Credits. This prevents repeated grants. The record contains no raw email or provider ID and survives account deletion.

Deleted attachments leave a minimal storage cleanup record containing their object key and cleanup times, without filenames or file content. These records survive account deletion so delayed uploads can be removed. Once the upload URL has expired for at least 24 hours, a successful object deletion also removes the cleanup record. Cleanup runs when the application is used; it is not scheduled.

Do not include sensitive information in Chats. Contact the operator to request account deletion or ask about your data.