Privacy for Star Elements Games

Version 2026-09-18 · Star Elements · questions to support@starelements.net

This notice explains what Star Elements Games collects and why. It applies alongside the Star Elements privacy policy. We comply with GDPR and UK GDPR, CCPA/CPRA and COPPA.

Hosts

We collect your name, email, password (hashed), plan and billing status (payments are processed by Stripe; we never see card numbers), the games you create, your uploads, and usage such as sessions run and AI builder spend. Legal basis: contract and legitimate interest. We send transactional email about your account and, only if you opt in, marketing.

Players

When you join a game we store the name you type, your answers and scores, a session-only token on your device, and a hashed device identifier used to stop double voting. In everyone-rated games you may add an email to receive your score (transactional, legitimate interest). Marketing email is sent only if you tick the consent box; the consent, its wording version, time, IP address and browser are recorded. You can unsubscribe with one click in any email.

Children. Kids-rated games take a name only. Everyone-rated games ask players to confirm they are 13 or older before any email is collected. Star Elements student accounts join without any form. We do not knowingly collect personal information from children under 13 and there are no advertising trackers on any player page.

Retention

Player names, emails and answers are anonymised 90 days after a session ends unless the email was given with marketing consent, in which case it lives in our marketing list until you unsubscribe or ask for deletion. Hosts can delete a session's player data at any time. Logs are kept for 400 days.

Your rights

Access, correction, export and deletion: hosts from their settings; players via the data request form. We answer within 30 days. We do not sell or share personal information for cross-context behavioural advertising and we honour the Global Privacy Control signal. EU and UK users may complain to their supervisory authority.

Where data lives and who processes it

Data is stored with Supabase in the United States (us-west). Sub-processors: Supabase (database and storage), Vercel (hosting), Stripe (payments), Resend (email), Anthropic (AI builder and content checks; prompts and question text only). Standard Contractual Clauses cover transfers from the EU and UK.

Contact

support@starelements.net. Star Elements is the controller for host accounts and its marketing list; for a hosted game, the host is the controller of the players' data and Star Elements is the processor.