Privacy Policy

1. Who we are

Starfed is a private, non-commercial collection of self-hosted services, run by the Operator for family, friends and invited members. There is no company behind it, no advertising, and no sale of your data.

You sign in with a Keystone account at keystone.starfed.org. This policy explains what data Starfed processes, why, how long it keeps it, who can see it, and what you can do about it.

2. What we collect

• Account data: username, email address, password hash, multi-factor authentication details and group memberships.
• Content you create: messages, files, media, repositories, notebooks, password-vault entries, media requests, playlists, watch history and similar material.
• Service data: device names, session state and basic preferences needed to run each Service.
• Support messages: anything you send when asking for help.
• Security data: limited logs needed to keep the Services secure and troubleshoot problems.
• Language preference: your browser language is used to choose English or Italian. This happens in your browser and is not stored.

3. Why we use it

We use your data to:

• create and manage your account;
• provide the Services you use;
• keep the Services secure and prevent abuse;
• troubleshoot problems and improve reliability;
• comply with legal obligations.

4. What we do not do

• We do not sell, rent or trade your data.
• We do not run advertising.
• We do not build profiles across Services.
• We do not use automated decision-making about you.
• We do not share your data with advertisers or data brokers.

5. Who can see it

• The Operator and authorised administrators can access data when needed to run and secure the Services.
• Email is not a sealed anonymous system: an administrator could technically access mailbox storage.
• Infrastructure providers for hosting, storage, email delivery and similar operational needs process data only as needed to provide those services.
• Authorities may receive data when required by law.
• Other people see your data only when you choose to share it.
• Matrix rooms can connect to other Matrix servers. Messages in those rooms may be copied and stored by those servers, outside the Operator's control.
• Third-party players in the Odessy watch portal have their own ads, trackers and privacy practices. Never enter your Starfed password, payment details or other credentials on those pages.

6. How long we keep it

• Account data is kept while your account is active.
• Content is kept until you delete it or your account is closed.
• Security logs and backups are kept for short periods, normally around 30 days for logs and 14 days for backups, then deleted.
• Vaultwarden data is kept until your account is closed. It is encrypted and unreadable by the Operator.
• Email is kept for the life of the mailbox and then expires from backups.
• Watch-portal lists stay in your browser until you clear browser storage.

7. Cookies and sessions

Starfed uses only essential cookies and local storage needed to keep you signed in and remember basic preferences. There are no advertising cookies, tracking cookies or third-party analytics.

8. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to restrict or object to certain processing, and to complain to a supervisory authority.

To make a request, email [email protected]. Requests are handled personally and manually. Many requests can be handled faster by you, because most Services let you export or delete your own data.

9. Security

Starfed uses encryption in transit, multi-factor authentication, least-privilege access and encrypted backups. No system is perfectly secure. If a breach is likely to affect your rights, the Operator will notify you as soon as reasonably possible with what happened and what to do.

10. Children

Starfed is a family and community service with invite-only accounts. It is not directed at the general public, and the Operator does not knowingly issue accounts to children where that would be inappropriate.

11. Changes

This policy may be updated as the Services change. The new version will be published on this page with an updated date. Continuing to use the Services after a change means you accept the updated policy.

12. Contact

• General questions, account requests and privacy requests: [email protected]
• Abuse reports: [email protected]

---

This policy, together with the Terms of Service, covers the Starfed Services. It does not cover third-party websites or services you reach through links from Starfed.