Privacy policy

Effective 17 September 2026. Includes GDPR. Publisher / controller: Paul Driessen (Stellar Girls).

This policy covers this website and the Stellar Girls Windows game. It describes how the project actually works today. Steam Cloud, store checkout, and achievements, if they go live, are also covered by Valve. We will update this page when that happens.

1. Who is responsible

For GDPR, the controller of personal data we decide the purposes of is Paul Driessen, publishing as Stellar Girls. Contact: the support form or stellargirls-support@agentmail.to. Steam's listing is also a contact path once it is public.

GitHub, Inc. hosts this site (GitHub Pages) and processes connection data. Valve processes data if you use Steam. They act as independent controllers for their own platforms.

2. This website

• Static files. No login or newsletter.
• There is a support form (see section 2a).
• No advertising. No first-party analytics cookies. Fonts are self-hosted.
• We store only your cookie-banner choice in localStorage (sg_cookie_consent_v1), for 12 months. See the cookie policy.
• GitHub may log IP address, user-agent, and similar technical data to serve pages. See GitHub's privacy statement.

Legal bases (GDPR Art. 6)

• 6(1)(f) legitimate interest — operating a public website (hosting, security, serving files).
• 6(1)(c) legal obligation — recording your cookie choice where ePrivacy requires it.
• 6(1)(a) consent — would apply to any optional cookies or tags we add later. None are loaded today.

Legitimate interest balancing: we publish game information without tracking you across the web. You can avoid the processing by not loading the site.

2a. Support form

If you use the support form or email the support address, we process what you send so we can answer you: name, email address, topic, and message. Optional: anything you choose to include in the message.

• FormSubmit (formsubmit.co) receives the POST from your browser and forwards it by email. Their privacy policy: formsubmit.co/privacy.pdf.
• AgentMail hosts the mailbox stellargirls-support@agentmail.to.

Legal bases:

• 6(1)(b) — answering a request you asked us to handle (support, privacy rights).
• 6(1)(a) consent — the checkbox on the form, for sending the message through FormSubmit to AgentMail.
• 6(1)(c) — where the message is a GDPR rights request we must handle.

International transfers: FormSubmit and AgentMail may process the message outside the EEA. We use them because a static site cannot receive mail itself. You can withhold consent by not submitting the form; you may still contact us through Steam when the listing is public.

International transfers

GitHub is a US company. If you visit from the EEA/UK, connection data may transfer outside the EEA under GitHub's terms (including Standard Contractual Clauses where they apply). We do not send your data to other countries ourselves.

3. The game (offline-first)

Stellar Girls is an Electron app. It does not require a Stellar Girls account.

• Campaign save — local file under Windows user data (saves/campaign.json): progress, Trust, ★, lineup, relationship flags.
• Settings and tips — localStorage on this machine (volume, display, “already taught”).
• No telemetry backend. The current build does not phone home for analytics.
• Reset in the menu deletes the campaign file we manage, not your whole PC.

Legal basis for local play data: it stays on your device under your control (typically not a controller–processor relationship until it leaves the device). If Steam Cloud ships, Valve's agreement and our update to this page will cover that copy.

4. Steam

Purchases, Steam ID, overlay, and Cloud (if enabled) are processed by Valve under the Steam Privacy Agreement. Cloud sync is not in the current build.

5. Children

Intended for mature audiences (PEGI 16 / ESRB M target). We do not knowingly collect personal data from children. Do not let a child play this title via your accounts.

6. Your GDPR rights

If GDPR (or UK GDPR) applies to you, you may ask us to:

• Access the personal data we hold about you
• Rectify inaccurate data
• Erase data (where an exception does not apply)
• Restrict or object to processing based on legitimate interest
• Receive data you provided, in a portable format, where processing is based on consent or contract and is automated
• Withdraw consent without affecting earlier lawful processing

We hold almost no identifiable data ourselves beyond support mail you send and the consent record in your browser (we cannot read that remote localStorage). Hosting logs are GitHub's.

You may lodge a complaint with your lead supervisory authority (in the EU, the DPA of your country; in the UK, the ICO). We would rather fix the issue if you contact us first.

7. Retention

• Cookie choice: 12 months on your device, or until you clear site data / change settings.
• GitHub Pages logs: GitHub's retention.
• Support mail: until the request is finished, then up to 24 months unless a longer legal hold applies. FormSubmit's copy follows their retention.
• Local game saves: until you reset or delete the folder.

8. Contact & changes

Privacy questions: the support form, stellargirls-support@agentmail.to, or the Steam publisher listing when live. Material changes will get a new date at the top of this page.