Family data belongs to the family.

This policy explains what StarSeeker collects, why it is needed, which providers help operate the service, and how a guardian can review or delete family information.

Effective July 10, 2026

Who operates StarSeeker

StarSeeker Reading Command operates the service at playstarseeker.com. Privacy questions, access requests, and deletion requests can be sent to contact@playstarseeker.com.

Information we collect

Guardian account information

Guardian name, email address, account security records, consent records, and family account settings. Passwords are hashed by our authentication provider and are never stored as readable text.

Child profile and learning information

A first name or nickname, guardian-selected reading and speaking skill levels, chosen support settings, mission progress, answers, hints, and learning history. We do not ask a child for an email address, legal name, exact birth date, home address, or diagnosis.

Speaking level and response preferences

A guardian selects an observable speaking level so StarSeeker can choose pacing, language complexity, and tap or AAC-friendly prompts. This selection is not a voice assessment. Public family play disables the microphone and does not record, upload, transcribe, or externally process a child's voice.

Billing and technical information

Subscription status and Stripe customer/subscription identifiers; security and reliability information such as IP-derived rate-limit keys, session records, device/browser type, and error reports. StarSeeker does not store full card numbers.

How information is used

Provide and personalize reading missions for the selected child profile.
Keep each family's data separate and protect guardian-only controls.
Show reading progress and guardian-selected response supports.
Process subscriptions, prevent repeated trial abuse, and provide billing support.
Detect abuse, repair errors, protect the service, and control provider costs.
Send account verification, password-reset, privacy, and billing messages to the guardian.

We do not sell child or guardian information, run behavioral advertising, or use child information to advertise to a child.

Service providers

StarSeeker uses service providers only to operate the product:

Supabase for guardian authentication and family data storage.
Stripe for trial, payment, invoice, and billing-portal services.
Hostinger for hosting, DNS, and account email infrastructure.
Sentry for privacy-scrubbed reliability and error monitoring when enabled.

These providers receive only the information needed for the requested function. We do not authorize them to use child information for advertising. Public family accounts are configured so child profile, progress, prompt, and voice data are not sent to external artificial-intelligence providers.

Voice features are unavailable

StarSeeker does not request microphone permission from a child using a public family account and does not accept child voice uploads through its public speech routes. The public runtime also blocks external artificial-intelligence generation and assessment requests. Prepared or previously cached game audio may still play, but it is not created from the child's voice or profile. If a child voice feature is considered in the future, it will remain unavailable until StarSeeker provides a separate direct notice and obtains any required guardian consent.

Guardian choices and rights

A verified guardian can:

Review child profile, progress, settings, and learning records.
Correct profile and placement information.
Request an export of family data.
Delete a child profile or close the family account.
Refuse future optional collection if a separately noticed feature is ever introduced.

Send a request from the guardian account email to contact@playstarseeker.com. We will verify the requester before disclosing or deleting child information.

Retention and deletion

Child profiles and learning records remain available while the family account is active. Closing the family account first terminates StarSeeker billing and then removes the family's active guardian, child, consent, progress, session, and game records from Supabase and the application database.

Root-only application backups are retained for no more than 14 days. Deleted records may also remain temporarily in encrypted or access-restricted infrastructure backups until the hosting provider's backup cycle overwrites them. Backups are used only for disaster recovery; a restore must reapply completed deletion requests before the service resumes.

Stripe keeps payment, invoice, and transaction records under its legal and financial obligations. StarSeeker may retain detached Stripe identifiers, required fraud/security records, and a one-way trial-eligibility marker so a deleted account cannot repeatedly claim a free trial. Those retained records are not used to recreate a child profile or for advertising.

Security and account separation

Guardian accounts use verified email authentication. Family data is restricted by database row-level security, child profiles are visible only inside the family account, sessions are stored as hashes, and payment details remain with Stripe. No internet service can promise zero risk; StarSeeker limits collection and maintains controls intended to reduce both likelihood and impact.

Policy updates

If a material change affects child information or an existing guardian choice, StarSeeker will provide direct notice to the guardian and request new consent when required. The effective date at the top identifies the current version.

Children's direct notice

The shorter notice shown during guardian setup is available on the Children's Privacy Notice page.