StarForge ("we," "us," "our") is committed to protecting your family's privacy. This Privacy Policy explains what data we collect, how we use it, and your rights.
Parent accounts: Email address and name (provided voluntarily). No third-party logins, no social media connections.
Child profiles: Anonymous scholar IDs (UUIDs). No names, no ages, no personal information tied to a child. Children are identified only by their randomized scholar_id.
Learning sessions: Response accuracy, response time, and anonymized motor-signal heuristics. No raw tap coordinates, no video, no audio.
Star Dust & rewards: Gamification data tied to anonymous scholar IDs.
Contact form: When you submit the contact form on our homepage, we collect your name, email address, and the message body. Submissions are stored in our database and forwarded to our operator for follow-up.
We use session data to deliver adaptive learning. We aggregate anonymized data to improve curriculum difficulty models. We do not sell, share, or transfer any personal data to third parties.
We use email addresses solely to send magic link authentication tokens and, if you opt in, product updates. You can unsubscribe at any time.
We use anonymized usage analytics (PostHog) to understand which features are used; this captures page views and aggregate behavior, not personally identifying input beyond your account email.
We use a short-lived session cookie to keep you signed in and an OAuth state cookie during Google sign-in. We use one localStorage identifier for analytics attribution. We do not use advertising cookies, third-party tracking pixels beyond anonymized PostHog analytics, or social-media cookies.
StarForge is fully COPPA-compliant. We do not collect personal information from children under 13 without verifiable parental consent. Parents control all child profile data and can delete accounts and all associated data at any time from the Settings page.
Parent accounts and child profiles are retained until deleted by the parent. Session data is retained for product improvement purposes and can be deleted upon account deletion. Contact-form submissions are retained as long as needed to respond and are deleted upon request.
You have the right to access, correct, or delete all personal data. Contact us at privacy@starforge.polsia.app or use the Account Deletion feature in Settings. We respond to all privacy requests within 30 days.
All data is encrypted in transit (TLS) and at rest. Authentication uses magic link tokens with short expiry windows. No password storage.
We will update this policy and notify all registered parents by email. Material changes will require re-consent.
StarForge is operated by an independent operator using the Polsia platform. For privacy questions, data requests, or to exercise your rights, contact our operator at the address listed in our email reply-to field or privacy@starforge.polsia.app. We respond to all privacy requests within 30 days.