Privacy Policy

1. Who we are

Starmap360 is operated by NetBox software Michał Chrząszcz (see the company details at the bottom of this page), acting as the data controller for the personal data described here.

2. What we collect, and why

One map (anonymous purchase)

• Email address — to send your order confirmation and the download link for your finished map. Required to deliver what you paid for.
• Payment details — handled entirely by Stripe; we never see or store your card number.
• The map itself — the date, time, place, and text you choose. The place is whatever you type or pick; we don’t read your device’s location.

Starmap Studio (account holders)

• Account data — your email and authentication details, managed by Clerk. Creating a free account costs nothing and doesn’t require a subscription.
• Subscription and billing data — plan, billing cycle, and payment details, handled by Stripe.
• Saved presets — map configurations you choose to save to your account.
• API usage — which endpoints your API key called and when, to enforce your plan’s monthly quota.

Everyone

• Analytics data — only if you accept analytics cookies in the consent banner. See the Cookie Policy for what this covers and how to withdraw consent.
• Server logs — standard technical logs (IP address, request time) kept briefly for security and abuse prevention.

3. Who we share data with

We use a small number of processors, each for a specific job — nothing beyond this list:

• Stripe — payment processing and subscription billing.
• Clerk — account authentication for Starmap Studio.
• Google Maps/Places API — resolves the place you search for into coordinates. This call is made from our server, not your browser.
• Resend — delivers transactional email (order confirmations, API keys).
• Google Tag Manager / Google Analytics — website analytics, only loaded with your consent.

4. Legal basis for processing

We process order and account data because it’s necessary to perform the contract you enter into by buying a map or creating an account. Analytics data is processed only with your consent, which you can withdraw at any time. Server logs are kept under our legitimate interest in keeping the service secure.

5. International transfers

Stripe, Clerk, Resend, and Google are based in the United States. Where personal data is transferred there, it’s under those providers’ standard contractual clauses or equivalent safeguards.

6. How long we keep data

Order and account records are kept as long as needed for accounting, tax, and support purposes, and no longer than the law requires us to. Analytics data retention follows Google Analytics’ own default settings once you’ve consented to it.

7. Your rights

Under GDPR, you can ask us to:

• show you what data we hold about you (access)
• correct it if it’s wrong (rectification)
• delete it, where we’re not required to keep it (erasure)
• hand you a copy in a portable format (portability)
• stop a particular use of it (objection)

You can also withdraw analytics consent at any time — see the Cookie Policy. If you think we’ve mishandled your data, you can lodge a complaint with Poland’s data protection authority, UODO (uodo.gov.pl).

8. Cookies

Full detail on cookies and how to control them lives in the Cookie Policy — this page won’t repeat it.

9. Children

Starmap360 isn’t directed at children, and we don’t knowingly collect their data.

10. Changes to this policy

If this policy changes in a meaningful way, we’ll update this page. Checking back occasionally is the only notice you’ll get — we don’t currently email past customers about policy updates.

11. Contact

Questions about this policy, or a request about your data, go to the address below.