Privacy

Last updated 2026-06-11.

We keep this short and honest. We do not sell or rent your information, we collect the minimum we need, we keep it the shortest time we can, and we tell you plainly what we do.

Browsing the site

Reading the site sets no cookies, and no cross-site tracking or fingerprinting runs. We measure anonymous, aggregate usage two ways, both privacy-first: a cookieless analytics tool (GoatCounter, at spaceke.goatcounter.com) that counts page views and a small set of non-personal events (which buttons get clicked, by page type), and a Google Tag Manager container that receives the same non-personal page and click signals. Neither receives your name, email, or message; we do not run advertising scripts. (If we later switch on a Google Analytics dashboard, it reads only those same non-personal signals.) The one cookie we ever set is the sign-in session cookie for My SpaceKE accounts, described below; it exists only after you sign in and identifies your session to us alone, never to advertisers.

My SpaceKE accounts

Creating a My SpaceKE account stores, on our own server in our control: your email address, a securely hashed password (we never see or store the password itself), your saved tours and follows, your Concierge preferences if you sync them, service enquiries you ask us to continue, and a log of your actions inside your own dashboard (so the product works and so we can improve it). Signing in sets a session cookie (httpOnly and secure) that keeps you signed in for up to 30 days; it carries no tracking and is removed when you sign out. We protect sign-ins with email verification codes and optional 2-step verification. Your account data lives on our server in our sole control; no third-party identity provider receives it. You can export or permanently delete your account and everything in it from your settings at any time, and deletion is immediate and complete on our side.

Contact and "leave your email" forms

When you submit the contact form or a "leave your email" box, your message is sent to our server, which forwards it to our team at [email protected] so we can reply. To be sure a message is never lost if email delivery fails, the server also keeps a short-lived operational copy in an access-controlled file (not public, not a mailing list). We do not store your IP address with it. These copies are automatically deleted after 90 days, and the information also lives in our mailbox for as long as we need it to reply and follow up. These forms are not an automated alert system and do not add you to any marketing list; any "we'll keep you posted" means a person from our team following up.

If you prefer, the contact form's Copy as text button lets you copy your brief and send it from your own email client instead.

The SpaceKE Concierge (AI chat)

The Concierge answers questions from our verified information only. When you send it a message, that message is sent to our AI provider (Anthropic) to generate the reply; it is used to answer you, not to build a profile. Your conversation lives in your browser and is not stored on our servers. We keep only anonymized, aggregate signals about which topics and areas people ask about (never your message text, never an identifier) so we can improve our coverage. The Concierge also remembers your preferences on your own device only (see below); you can clear that at any time from the chat panel. If you have a My SpaceKE account and switch on "save my conversations" in your settings (off by default), your conversations are stored in your account on our server, only so you can continue them on any device; switching it off stops new saving, and deleting your account removes them entirely.

Stored on your device and account

Features like Follow, your watchlist, recently-viewed, and the Concierge's memory are saved in your browser's local storage on your device. When you sign in, saved tours, follows and any Concierge preferences you choose to sync are copied into your My SpaceKE account so they work across devices. Recently-viewed stays on your device. The Concierge also sends a short non-personal summary (for example "interested in Kiambu") with your chat so answers are relevant. Clearing your browser data, using the in-app controls, or deleting your account removes the matching data.

Newsletter

The weekly-digest newsletter is currently disabled. We are not collecting newsletter sign-ups; when it returns it will run through My SpaceKE accounts with a clear double opt-in. We will register with the Office of the Data Protection Commissioner as our account base grows; the protections in this notice apply from day one either way.

YouTube embeds

Video tours load via YouTube's privacy-enhanced youtube-nocookie.com domain, and only after you click a thumbnail (the page does not contact YouTube until then). YouTube applies its own privacy practices to anything it collects when you play a video; Space Kenya has no access to it.

Your rights

Under the Kenya Data Protection Act 2019 you have rights of access, correction and deletion over any personal data we hold about you. Write to [email protected] and we will, within 30 days, delete any messages from you in our mailbox and remove your details from the operational copy described above.

Contact

For privacy questions: [email protected]. For everything else: [email protected].