Legal
Muninn is built and run by one person in Maine. This policy describes exactly what data the service collects, where it sits, who else touches it, and how long it sticks around. No dark patterns, no hidden trackers.
.glb 3D model and the .tif orthophoto, also stored in Wasabi until they expire.Muninn uses exactly one cookie: a signed session cookie that holds your logged-in user ID. It is set on login, cleared on logout, and never read by any third party. We do not need a cookie banner because we do not run any non-essential cookies.
Muninn is a small operation that leans on infrastructure providers instead of running everything ourselves. Each one has its own privacy policy you can read. We send each provider only what it needs to do its job.
| Provider | What they handle | What they see |
|---|---|---|
| Railway | App hosting and Postgres database | Everything in the database (account, missions, parcels, job rows, credit ledger, waitlist) plus request logs |
| Wasabi | Object storage (US-East-1) for uploaded photo zips and generated 3D outputs | The raw photo zip and the resulting .glb + orthophoto, until lifecycle expiry |
| RunPod | Ephemeral GPU pods that run OpenDroneMap on your photos | The contents of the photo zip during a single job; the pod is destroyed afterward |
| Stripe | Subscriptions, credit-pack purchases, payment processing | Your email, billing address, and payment method — sent directly from your browser to Stripe’s hosted Checkout |
| MailerSend | Transactional email delivery (confirmation, welcome, job complete, billing) | Your email address and the body of the message we send you |
| Open-Meteo | Worldwide elevation DEM and current weather (proxied through our server) | Latitude/longitude coordinates only — no account info |
| FAA ArcGIS | Airspace data (proxied through our server) | The bounding box of the area you are looking at — no account info |
| airplanes.live | Live ADS-B aircraft positions (proxied through our server) | Latitude/longitude only — no account info |
| Esri / OpenStreetMap | Map tiles (loaded directly by your browser) | Your IP address and the tiles you request, governed by their own terms |
| Google Fonts, unpkg, jsdelivr, cloudflare CDN | Static assets (fonts and JS libraries) | Your IP address and the asset URL, when your browser fetches the file |
Muninn does not use any of these providers’ analytics, advertising, or audience-building features. They are used purely for the technical service they provide.
| Data | Retention |
|---|---|
| Uploaded photo zips | 14 days from upload, then auto-deleted by the Wasabi bucket lifecycle policy |
| Generated 3D models + orthophotos | 30 days from creation, then auto-deleted by the bucket lifecycle policy |
| Saved missions, named parcels, account settings | Until you delete them, or until you delete your account |
| Job records (status, photo count, error messages) | Kept after the files expire so you can see your history; deleted when you delete your account |
| Credit ledger entries | Kept for as long as your account exists, for accounting and dispute support |
| Stripe billing records | Retained by Stripe per their policy and applicable tax/financial-records law (typically 7 years) |
| Server request logs | Whatever the standard Railway log retention is at the time (rolling, short window) |
You can also explicitly delete a saved mission, a parcel, or a 3D job at any time from your dashboard.
We do not use your photos, missions, or any other content to train AI models, sell to third parties, or build advertising profiles.
Muninn sends a small set of transactional emails: an account-confirmation link when you register, a welcome note, a "job complete" message for each 3D job (if you have that toggle on), and billing receipts via Stripe. The marketing-email toggle is off by default; you have to explicitly opt in. You can change all email preferences in Settings. Account confirmation and billing emails are required for the service to work and can’t be turned off without closing the account.
Depending on where you live (the EU/UK GDPR, California’s CCPA, and similar laws elsewhere), you may have the right to:
To exercise any of these, email [email protected] from the address on file. We respond personally, usually within a couple of days. We do not charge for these requests and we will not retaliate by degrading your account.
Account deletion is not yet self-serve. To delete your account today, email [email protected] from the address on file. We will:
users row, which cascade-deletes your missions, parcels, jobs, credits, ledger entries, API keys, and waitlist row,Stripe billing history (invoices, charges, refunds) is retained by Stripe per their own policy and applicable tax law — we can’t purge those even at your request.
Muninn is not directed at children under 13 (or under 16 in jurisdictions that set a higher age of digital consent). We don’t knowingly collect personal data from children. If you believe a child has registered, email us and we will delete the account.
Muninn is operated from the United States, and the providers above are primarily US-hosted. If you use the service from outside the US, you understand and consent that your data will be transferred to and processed in the US. We have no facilities outside the US and we do not deliberately transfer your data anywhere else.
We follow standard practice: passwords are bcrypt-hashed; secrets are kept in environment variables, never in source control; HTTPS is enforced; the session cookie is HTTP-only and signed; database access is scoped to the application and locked to the application’s private network. No system is perfectly secure — if we ever suffer a breach affecting your account, we will notify you by email without undue delay.
If we change anything material about how we handle your data, we will update this page, change the "Last updated" date at the top, and email registered users before the change takes effect. Minor wording fixes won’t trigger an email.
Mail [email protected]. A real person reads it. EU/UK users also have the right to complain to their local data protection authority if they believe we’ve mishandled their data, but we’d much rather you tell us first so we can make it right.