Last updated: 2 September 2026
Privacy Policy
This policy explains how STARS COMPUTING handles information tied to your account and orders. Using the site means you understand the practices below. Payments and third-party sign-in are also covered by those providers' own policies.
What we collect
Email, display name, a password hash (not the password), language and currency preferences, notification switches. If you sign in with Google or GitHub we store that provider's user id so the next visit maps back to the same account. After an order we keep the order id, amount, currency, invoice name and tax id, payment status, and the entitlement scope. Servers also record time, path, and coarse device data for debugging and abuse prevention.
What we do not collect
Full card numbers, wallet private keys, government ID numbers. Card and wallet data stay with Stripe or PayPal. Deliverable files live in object storage, not as database blobs.
How we use it
To let you sign in, fulfill reading and downloads and in-term subscription access, process refunds and reconciliation, send notifications you turned on, spot abuse, and improve the catalog and search. We do not sell your email to ad networks.
Third parties
Stripe and PayPal process payments and may verify you directly. Google and GitHub only participate when you click their button, limited to the email and public profile needed for sign-in. Delivery copies of files sit on Volcengine TOS in the Johor region; if a source file lives in an internal artifact store, we copy it once at publish time. Hosting and the database are in the same cloud region.
Cookies and local preferences
sc_session is the sign-in cookie, HttpOnly, and lasts according to Remember me. sc_oauth_state exists for ten minutes during a third-party sign-in round trip to stop cross-site request forgery. Language and currency live in ordinary preference cookies and do not identify you. We do not use third-party advertising cookies.
Download links
Downloads are five-minute pre-signed URLs; bytes do not pass through the app server. When a link expires, click download again. After a refund, new reads and downloads are refused; a link already signed may live up to five more minutes.
Your rights
Settings lets you view and change display name, language, currency, and notifications. Changing your password signs other devices out. You can sign out of this device or every device. Closing an account or exporting your data is requested from Settings and handled by a person — there is no self-serve deletion API yet.
How long we keep it
Account and entitlements stay while you use the service. Orders, payment rows, and ledger entries are reconciliation records; a refund appends a reversing row rather than deleting the payment. Expired sessions are cleared from the database. Access logs rotate for operations and are not kept on the box forever.
Changes to this policy
Material changes update the date at the top of this page. Continued use means you accept the new version. Wording that only affects internal debugging may change the date alone.
Contact
Privacy requests go through Settings after you sign in. STARS COMPUTING does not publish a public intake email.