Terms of Service

1. Who we are

Starfed is a private, non-commercial collection of self-hosted services, run by the Operator for family, friends and invited members. There is no company behind it, no advertising, and no sale of your data.

Keystone, at keystone.starfed.org, is the account and sign-in service for Starfed. A Keystone account is required to use the Services.

2. Access and accounts

• Access is invite-only. There is no public sign-up. Invitations are personal and can be withdrawn at any time.
• Accounts are personal. Do not share, lend, sell or transfer your account or credentials.
• Keep your password strong and unique. Multi-factor authentication is mandatory.
• Keep the email address on your account up to date and secure. It is your recovery path.
• Tell the Operator promptly if you suspect your account is compromised.
• You are responsible for activity performed with your account, including devices you connect to the Services.
• If you lose both your password and your second-factor device, and your email is unreachable, the Operator may be unable to restore your account.

3. Acceptable use

Do not use Starfed to:

• break the law or help others do so;
• upload, store or share illegal content, malware, spam or content that violates someone else's rights;
• harass, threaten, dox or defame anyone;
• share credentials, session tokens or API tokens;
• bypass authentication, security controls or rate limits;
• attack, overload or degrade the Services;
• read, change or delete other people's data without permission;
• use the Services for commercial purposes;
• send unsolicited bulk messages or phishing;
• redistribute media or other content outside the group of people authorised to access it.

Report security issues privately to the Operator. Responsible disclosure is welcome and will not be treated as a violation.

4. Service-specific rules

Odessy and media

Odessy is the private media service, including the Jellyfin library, Seer requests, the watch portal and Navidrome music.

• The library is for personal, non-commercial use by authorised account holders and their households.
• Do not share credentials, restream, record, redistribute or bulk-download the library, or use it for public performances.
• Fair use applies. The Operator may limit concurrent streams and change playback settings.
• Seer requests are requests, not orders. Fulfilment is at the Operator's discretion.
• The watch portal's player area uses third-party players. They have their own ads, trackers and terms. Never enter your Starfed password, payment details or other credentials on those pages.
• The watch portal stores "Continue watching" and "My List" in your browser, not on the server.

Matrix

Matrix is the chat and calls service.

• Rooms can connect to other Matrix servers. Messages in those rooms may be copied and stored by those servers, outside the Operator's control.
• Some rooms are bridged to Discord or WhatsApp. Messages in those rooms are delivered to those networks.
• Calls are relayed, not recorded by the Operator.
• Do not post illegal content, or content that harasses or threatens anyone.
• Deleted messages may still exist in backups or on other servers.

Email

• Email is for personal use by the account holder. Do not use it for bulk mail, spam or phishing.
• Delivery is best-effort. The Operator is not responsible for lost, delayed or rejected mail.
• Email is not a sealed anonymous system. An administrator could technically access mailbox storage. Do not use it for communications that would be catastrophic if an administrator could read them.
• Do not rely on Starfed email as the only address for critical accounts.

Vaultwarden

• The password vault is end-to-end encrypted. The Operator cannot read it.
• If you lose your master password, the vault cannot be recovered by anyone, including the Operator.
• Keep your own backup of critical credentials.

Git

• Repository content belongs to its authors. Do not publish content you do not have the right to publish.
• Private repositories must stay private. Do not copy or redistribute private code, secrets or configuration outside the authorised group.
• The Operator may add, remove or reorganise repositories.

Files

• Files is for personal and community files. Do not use it for illegal content, malware or public distribution of material you do not have the right to share.
• You are responsible for the files you upload. Keep your own copies of anything important.
• Access is limited to the accounts and groups authorised to see each file.

JupyterHub

• Notebooks run in a sandbox on shared infrastructure. Resources are limited and fair use applies.
• The Operator may reset or prune notebook storage. Do not keep the only copy of anything important there.
• Do not try to escape the sandbox, access other users' storage, probe internal networks, mine cryptocurrency or run sustained high-load workloads without permission.

Status and administration

• The status page is public and informational.
• Administration surfaces are available only to accounts with the corresponding access level. Admin access may be revoked at any time. Misuse of admin access is a serious violation of these Terms.

Future services

Any service added to Starfed in the future is covered by these Terms from the moment it uses Keystone or a Starfed account.

5. Your content

Your content remains yours. By storing it in the Services, you give the Operator permission to store, transmit, back up, restore and display it only as needed to provide the Services.

You are responsible for having the rights to the content you upload. The Operator's infrastructure, configuration and branding remain the Operator's property.

6. Availability, backups and changes

• The Services are provided on a best-effort basis. There is no uptime guarantee, response-time guarantee or recovery-time guarantee.
• The Operator may take any Service offline, restart it, rebuild it or change it at any time, including for maintenance, upgrades or experiments.
• Backups exist, but no specific data is guaranteed to survive an incident. Keep your own copies of anything important.
• The Operator may add, change or remove Services at any time.
• The current service status is published at starfed.uptimepage.dev.

7. Suspension and termination

• The Operator may suspend or limit access to any Service at any time, with or without notice, for suspected violations, security incidents, resource abuse or operational needs.
• You may stop using the Services at any time and ask for your account and data to be deleted.
• On termination, access to all Services ends.
• Deletion removes active data promptly, but backup copies may take longer to expire.
• If termination would cause you to lose data with no copy elsewhere, the Operator will try to give reasonable notice, but this is a courtesy, not an obligation.

8. Third-party services

Starfed uses third parties for hosting, storage, email delivery, edge networking, media metadata and similar operational needs. These providers process data under their own terms and privacy policies. The Operator is not responsible for third-party content, availability, privacy practices or security.

Interactions you start with a third party from inside a Service, such as playing a third-party video or entering a bridged chat room, are between you and that third party.

9. Law enforcement

• Starfed collects only the minimum data needed to run the Services, so there is little to disclose by design.
• If served with a valid, legally binding request from a competent authority, the Operator will comply to the minimum extent required by law.
• The Operator will notify you of a request affecting your data unless legally prohibited, and will challenge or narrow overbroad or unlawful requests where there is a reasonable basis.
• Informal or out-of-process requests are refused. The Operator does not voluntarily disclose user data to law enforcement, intelligence agencies or private parties.

10. Changes to these Terms

The Operator may update these Terms. The new version will be published on this page with an updated date. Continuing to use the Services after a change means you accept the new Terms.

11. Disclaimers

The Services are provided "as is" and "as available", without warranties of any kind, express or implied. The Operator does not warrant that the Services will be error-free, secure, uninterrupted or suitable for any particular purpose. Do not use Starfed as the only place to store anything important.

12. Liability

To the maximum extent permitted by law, the Operator is not liable for indirect, incidental, special, consequential or punitive damages, or for loss of profits, data, content, goodwill or use, arising from or related to the Services or these Terms, even if advised of the possibility.

The Operator's total aggregate liability for all claims relating to the Services is limited to zero euros, except where the law does not permit such a limitation. The Services are a private, free, best-effort arrangement.

13. Indemnity

To the extent permitted by law, you agree to hold the Operator harmless from claims, damages and expenses arising from your use of the Services in violation of these Terms or of any law, or from content you place on the Services.

14. Governing law and contact

These Terms are governed by the laws of the country where the Operator resides, without regard to conflict-of-law rules, except where mandatory consumer-protection law of your country applies.

The Operator and you agree to try to resolve any dispute informally and directly before starting formal proceedings.

Contact:

• General questions, account requests and security reports: [email protected]
• Abuse reports: [email protected]

---

By using any Starfed Service, including Keystone, the Git server, media streaming, the request and watch portals, music, chat and calls, email, the password vault, notebooks and files, you confirm that you have read and accepted these Terms and the Privacy Policy.