Privacy Policy

Last updated: 2026-04-21 — this is a placeholder pending legal review.

What we collect

• Profile data from GitHub: id, login, avatar, public email (required for sign-in).
• Game data you generate: companies, projects, wallet ledger, feed events, chat messages, map positions.
• Device and connection data: IP address, user agent.
• Wallet address: if you connect a Solana wallet, we store its public address for holder verification. We never see or store private keys or seed phrases.

How we use it

To operate the service, prevent abuse, comply with law, and provide support. We do not sell your personal data.

Retention

Chat messages: 30 days. Webhook payloads: 90 days. Audit log: 2 years. Financial ledger: 7 years (regulatory minimum). Account data: until deletion + 30-day grace period.

Your rights

Under GDPR / CCPA you have the right to access, correct, delete, export, and restrict processing of your data. Contact privacy@starpup.app for requests.

International transfers

Data is hosted in the EU (Neon EU region, Upstash EU region). Sub- processors (GitHub, Helius RPC, Cloudflare R2, Resend, PostHog, Sentry) may process data outside the EU under Standard Contractual Clauses.

Cookies

We use essential cookies for authentication (NextAuth session cookie) and CSRF protection. We do not use third-party advertising cookies.

Contact

Data controller: STARPUP SAS (placeholder) — privacy@starpup.app.