Privacy Policy

The controller for StarVerse is:

If StarVerse is not yet operated through a registered company, these details must be replaced before public launch.

Account information — email address, display name, authentication/session information, account creation date, login and security metadata.

Star ownership information — stars claimed or received, star names, certificates issued, public star profile information, ownership events and transfer history inside StarVerse.

Gift information — recipient name, recipient email, gift message, gift status, redemption status.

Offer and marketplace information — offers sent and received, offer amount, offer status, transfer status, marketplace activity connected to symbolic StarVerse ownership.

Moderation and reporting information — reports submitted, moderation actions, hidden or restricted names, audit records needed for platform safety.

Support information — messages sent to support, contact details you provide, information needed to resolve your request.

Technical and security information — IP address, browser and device information, error logs, security logs, rate-limit events, cookies and local storage used for essential app functionality.

Payment information — when payments are enabled, processing may be handled by a third-party provider such as Stripe. StarVerse does not store full card details.

Contract — to provide the StarVerse service, including accounts, star claims, gifts, certificates, and marketplace features.

Legitimate interests — to keep StarVerse secure, prevent fraud, moderate content, maintain audit logs, improve reliability, and protect users.

Legal obligation — where required by law, tax, accounting, dispute, or regulatory obligations.

Consent — where required, for optional cookies, marketing, or non-essential tracking. You can withdraw consent where consent is the lawful basis.

Some StarVerse information may be public, including star name, star ID, star category and rarity, public certificate details, owner display name (if shown), and public star page details.

We do not display your email address publicly. Do not choose a star name or display name containing private information you do not want others to see.

StarVerse may send you transactional service messages about your account and activity — for example star claims, certificates, gifts, offers, ownership transfers, account and privacy requests, and security or moderation actions. These are part of providing the service.

Marketing emails are not enabled. If optional marketing communications are added in future, they will require separate consent and an unsubscribe option.

You control what is shared for each star you own. From your dashboard you can choose whether a star has a public share page, whether its certificate can be viewed publicly, whether your display name appears (otherwise pages show “Private StarVerse owner”), whether other users may send offers, and whether search engines may index the public star page.

All of these are OFF by default (offers are allowed by default), so a newly claimed, transferred, or gifted star starts private until you enable sharing. Your email address is never shown publicly regardless of these settings.

If someone gifts you a StarVerse star, we may process your name and email so the gift can be created and redeemed.

If you do not want to redeem a gift, you can contact us at [PRIVACY_EMAIL — e.g. privacy@starverse.example, TODO].

TODO(before launch): define exact retention periods for account data, logs, support records, gift records, and inactive accounts.

We may share information with trusted providers that help operate StarVerse, and current/future processors may include:

Some providers may process data outside the United Kingdom or European Economic Area. Where this happens, we rely on appropriate safeguards required by data protection law.

Depending on your location, you may have rights to: access, correct, delete, restrict, or object to processing; receive a copy of your data; withdraw consent where processing is based on consent; and complain to a data protection authority.

To make a privacy request, contact [PRIVACY_EMAIL — e.g. privacy@starverse.example, TODO]. We may need to verify your identity before completing a request.

Signed-in users can download a copy of their own StarVerse data and submit an account deletion or privacy request from Account Settings. Deletion is reviewed before processing: some records may be retained where required for legal, security, fraud prevention, dispute, ownership, or accounting reasons, so a deletion request does not immediately erase ownership or marketplace history.

You can also change your display name from Account Settings.

We use technical and organisational measures including authentication controls, database access controls, Row Level Security, secure server-side operations, and audit records. No system is completely secure — if you believe your account or data is at risk, contact us immediately.

StarVerse is not intended for children under 13. If you believe a child has provided personal information, contact us.

You can contact us first at [PRIVACY_EMAIL — e.g. privacy@starverse.example, TODO]. You also have the right to complain to the Information Commissioner's Office in the UK: https://ico.org.uk/make-a-complaint/

We may update this Privacy Policy from time to time. The latest version will be posted on this page.