Who we are and how to contact us
STARCHASERS operates Star Chaser and is responsible for the personal information described here. Star Chaser uses virtual coins, tokens and skins with no cash value.
For data access, corrections, deletion problems or privacy questions, email r34@tuta.com. If automatic deletion fails, an activity cannot be resolved, or you cannot sign in, contact us for manual review. We may ask for proportionate information to verify that the account is yours.
Information we use
- Discord sign-in: Discord user ID, display name and avatar. We request the identify scope; we do not request your Discord email, password, messages or server memberships. OAuth access tokens are used server-side to retrieve your identity and are not stored as account credentials.
- Your account and game: collector UID, profile name, biography and appearance, progress, virtual balances, inventory, achievements, activity history, rooms, trades, request receipts and moderation status. Guests have a browser-linked save too.
- Community: public profile details, chat messages, reactions, online presence and exceptional-win announcements.
- Uploads: profile avatars and headers, their type, ownership and upload time.
- Technical information: essential session and OAuth-state cookies. Cloudflare may process IP addresses, request details and basic hosting/security logs to deliver and protect the service. Contacting us also provides your email address and the information you choose to send.
Why we use it and our lawful bases
We use information to sign you in, save your collection, deliver requested gameplay and community features, process trades and rooms reliably, handle uploads, respond to requests and prevent abuse.
Our intended UK GDPR bases are performance of our agreement with you where processing is necessary to provide the service you request; legitimate interests in running, maintaining and securing a small free community, subject to balancing those interests against your rights; and legal obligations where a particular obligation applies. Optional public content is published at your request. These bases depend on the circumstances and do not remove your rights. Contact us to question a use or object to processing based on legitimate interests.
What other people can see
Collector UIDs, public profile names, biographies, avatars, headers, selected appearance, profile statistics, showcased items, leaderboard entries, item ownership, rooms, trade offers, chat, reactions and online presence are intentionally visible to other visitors. Completed multiplayer results may show a generic “Deleted collector” after deletion. Discord user IDs, session credentials and staff-only moderation details are not published by the application.
Avoid putting contact details or other private information in public content. Others may copy public material; deleting it from Star Chaser cannot remove copies they independently made.
Cookies and device preferences
star_session is essential to keep a guest save or Discord session associated with your browser. Discord sessions expire after 30 days; guest cookies last up to one year. star_oauth is an essential browser check for sign-in and expires after 10 minutes. Sign-in rotates the session; signing out or deleting the account revokes it.
The interface also remembers choices such as sound, theme and chat visibility on your device, and may use a sidebar preference cookie. These preferences do not track you across sites. We currently use no advertising cookies or non-essential analytics. There is no advertising or analytics cookie-consent banner because those technologies are not currently used.
Service providers and international processing
Cloudflare provides Workers hosting, D1 database storage, R2 media storage and security services. Discord provides sign-in and Discord avatar delivery. These providers may process information internationally, including outside the UK, under their applicable terms and safeguards. Where we make a restricted transfer, an appropriate UK transfer mechanism is needed, such as adequacy arrangements or approved contractual safeguards; contact us for details.
Some artwork and fonts may load from external hosts such as Steam’s content network and Google Fonts, which receive the technical request information needed to serve them. Bundled item prices are game estimates.
If donations are enabled later, Ko-fi or the selected external payment provider will process payment information under its own privacy terms. Provider, contact and refund details must be available before activation. Payment information will not be processed by gameplay or entitlement automation in Star Chaser.
Read the Cloudflare privacy policy and Discord privacy policy.
How long information stays
- Discord sessions: 30 days. OAuth state: 10 minutes. Expired rows are removed in bounded scheduled cleanup; they cannot authenticate after expiry.
- Chat messages and reactions: 30 days, then scheduled removal. Cleanup can take longer during outages or backlogs. Account deletion removes the account’s messages and reactions.
- Profiles and gameplay data, including guest saves: until account deletion, an explicit progress reset where applicable, or a documented service closure/reset. There is no general inactivity deletion period currently.
- Uploaded media: until replaced or the account is deleted. Removed media immediately loses application access; failed object deletion is queued for scheduled retries. Previously downloaded or cached copies cannot be recalled.
- Presence: publicly shown for about 90 seconds after the last heartbeat; stale presence rows are removed after a day by scheduled cleanup.
- Minimum pseudonymous request receipts, retired UID records and completed room/trade results: kept for replay prevention and game integrity for the life of the relevant service data. Deletion removes personal presentation and receipt payloads. Old UIDs are never reassigned.
- Security/moderation event types, pseudonymous references and timestamps may be retained where reasonably necessary to prevent abuse and resolve disputes. Related free-text reasons are removed on deletion. Provider log retention and protected backups depend on the configured service and backup schedule; no immediate erasure from every backup is promised. Retention necessity should be reviewed regularly.
Your rights and account deletion
You may request access, correction, erasure, restriction, objection and, where applicable, a portable copy of your information. Rights and exceptions depend on the processing involved. We normally respond within one month, subject to lawful extensions and necessary identity checks. You can edit your profile in the game and use Profile → Delete account when signed in with Discord. Finish or cancel active games and trades first.
Deletion removes your Discord link, profile, balances, inventory, achievements, sessions, messages, reactions, presence and uploaded-media access. Completed shared results are anonymized in presentation; other players keep their items and outcomes. Signing in later creates a new account and UID. For a guest save or an edge case, contact r34@tuta.com.
You can complain to the UK Information Commissioner’s Office. You do not need our permission to do so.
Private conversations and requests
Private trade offers, arcade invitations and direct messages are visible to their participants. The site owner can review direct-message logs for moderation; moderators do not have this access. Owner log reviews are recorded in staff activity. Blocks prevent further requests or messages of the selected type. Deleting an account removes its private messages, notifications and blocks.
Age and children
Star Chaser is a gambling-styled simulator intended for adults aged 18 or over, even though it involves no real-money gambling. It is not intended for children. Discord sign-in does not verify adulthood. If you believe a child has supplied personal information, contact us so we can review and take appropriate steps. Do not send identity documents or a child’s sensitive information unless we arrange a proportionate, secure process.
Changes to this notice
We will update this page and its effective date when practices change, and provide an appropriate notice for material changes. New analytics, donation services or materially different data uses require a review before activation. See also the Terms and simulator rules.