Privacy policy

Black Sky (“we”) operates https://incubator.to, a writing platform run on an ongoing best-effort basis. We keep it deliberately light: no advertising, no third-party analytics, and no cookies beyond the one that keeps you signed in.

What we store

An account is your email address, username, display name, a bcrypt hash of your password (never the password itself), your birthdate (checked once so nobody under 18 joins; we keep no data about minors), and the bio you choose to add.

Your content is the projects and articles you write, their revision history, the images you upload, and your comments. Engagement is who you follow, the projects you subscribe to, the tags you follow, your likes, your bookmarks, and the notifications addressed to you.

For operations we keep browser sessions (expired after 30 days), email verification and sign-in links (stored hashed; valid 48 hours and 15 minutes), an audit log of email address changes (so a hijacked account can be restored to its previous address), and server logs carrying IP addresses, request URLs and browser user agents for delivery and security monitoring.

Cookies

One cookie, session, keeps you signed in and protects forms against cross-site request forgery. There are no advertising cookies, no analytics cookies and no cross-site tracking of any kind. Telemetry about the service’s own health stays on our infrastructure.

Delivery

The site runs on our own infrastructure. It may be delivered through Cloudflare, our CDN and edge provider; to serve pages, Cloudflare then receives your IP address, browser user agent and the URLs you visit, and processes them on our behalf. Verification and sign-in email goes out through our own mail infrastructure.

Legal basis

We process this data to provide the service you signed up for and to keep it secure (GDPR Art. 6(1)(b) and 6(1)(f)).

Sharing

We do not sell your data. Beyond the delivery providers above, it is shared with nobody.

Retention

Deleting your account deactivates it and removes it from public view; a restorable record is retained. Deleting content moves it to a trash that purges on its retention window - 30 days by default, configurable per project. Backup snapshots are pruned after 14 days, so removed data leaves the backups as they rotate.

Your rights

You can export your projects and articles at any time: signed in, /export.zip downloads them as markdown files. You can delete your account yourself in your settings. For access, correction or anything else, mail team@mobiustime.com. You may also complain to your data protection authority.

Last updated: 2026-10-09.