Privacy Policy

OperatorLink, by Lunarwerx. Updated 8 November 2026.

OperatorLink needs no account and no email address to use. You open or share a jobsite link, type a name, and the crew on that jobsite sees your signals. This page says what a jobsite keeps while it is open and what happens to it afterwards.

What a jobsite keeps, and why

• The name you type when you join. Others on the jobsite see it. If you leave it empty the app gives you a crew number instead, such as “Operator 42”. It is kept with your chat messages and button presses below, and the app also remembers it on your own device.
• A participant id, and your role and machine. The id is a code worked out from the jobsite code and a secret key your device makes for itself, so that you keep the same place when you reconnect. It is not tied to your name, an account or your phone. Your role (signaller or operator) and the machine you choose are shared with the jobsite so signals reach the right person.
• Button presses. The signal buttons held on at the moment, and who pressed them, so a person who joins late or reconnects sees the current state.
• Chat messages. The text you send in a jobsite’s chat, with your name and the time, so people who join later see the recent conversation. Only the most recent messages are kept.

OperatorLink does not ask for your contacts, photos or location. It has no ads, and nothing is sold or used for advertising. The one measuring tool is the visit counter described next.

Visit counter on the web app

When you open OperatorLink in a web browser, the page loads a small visit counter from Connections (analytics.connectionsapi.com). It counts page views and what visitors click and scroll, under a random anonymous visitor id, so we can see how many people use the web app. To do that it stores that id in a cookie named argus_anon and in your browser’s local and session storage. It is switched off in your browser if you send Do Not Track or Global Privacy Control, and it does not run on a local test address. The counter is not part of the Android and iPhone apps, only of the page in a browser.

Reports

If you report a chat message, the report sends us the jobsite code, the name of the person who reported and the name of the person who sent the message, the reported message, and the time it was sent. We use it only to review the report and, if the message breaks our Terms, to remove the message or the person from the jobsite. We delete the report when it has been dealt with.

Voice

Voice between people on a jobsite is optional and starts only when you join the call. The audio goes between the phones or browsers on the call; our server only passes along the messages that set the call up and does not receive, record or store the audio. When a direct route is not possible, a relay run by Cloudflare passes the audio along without recording it.

Who handles the data

• Cloudflare runs the jobsite server and keeps what is listed above while the jobsite is open, runs the relay for voice calls, and hosts this page and the app. As with any web host, it handles ordinary connection details such as your IP address when your device connects.
• Google runs a public STUN address that a voice call may ask to find a route between devices. That request contains your network address and no audio.
• Connections runs the visit counter above, and the optional sign-in offered on the app’s start screen. You do not need to sign in to join or run a jobsite, and your sign-in is not sent to a jobsite.

When it is erased

A jobsite ends when nobody has been in it for 3 hours, or 12 hours after it was first used, whichever comes first. When nobody has been in it for 3 hours, its stored chat and button presses are deleted. Once the 12 hours have also passed, the rest of what the jobsite stored is deleted too, and the code is no longer a live room. A jobsite link is not a permanent address.

How to delete your data

There is no account to delete. Jobsite data is erased when the jobsite ends, as described above. You can ask for it to be erased sooner by writing to contact@lunarwerx.com with the jobsite code. What the app remembers on your own device (your name, recent jobsites and screen settings) is removed by clearing the app’s data or deleting the app.

Contact

Questions about privacy: contact@lunarwerx.com.

A communication aid for crews, used alongside a site's own signalling rules and a qualified signal person, never in their place. Not certified to any safety standard.