Privacy Policy

1. What we process

Stardona Ranking is offered as a website (ranking.stardona.com) and as the Android app “Stardona Ranking”; this policy covers both (together, the “Site”). The Android app has no voting and no payment; signing up and signing in, nicknames and lines, and reports and blocks are handled there as on the website.

Signing up and signing in: your email address, your username and your password (stored only as a hash that cannot be turned back into the password). Signing up or signing in with Google: the email address and the account identifier Google gives us (erased when you delete your account). Voting: your nickname, each payment’s amount, time and status with Stripe’s payment identifier, and any line you leave. Reports and blocks: whom you reported, with the nickname and line shown at the time, and whom you blocked. Card numbers and other payment details are handled by Stripe directly; the Site never receives them.

Generated automatically: a cookie that keeps you signed in, your IP address (used to limit request rates), and server access logs.

Shown publicly: your nickname, the number of votes and the time of a vote appear on that star’s page for anyone to see (its latest votes and its top supporters). Your email address is never shown.

2. Why

To identify you and sign you in, count and show votes and rankings, process payments, refunds and disputes, answer enquiries, prevent abuse, and send service notices by email.

3. How long we keep it

Your email address, username, password, nickname and lines are erased promptly when you delete your account.

Payment records are kept as Korea’s Act on Consumer Protection in Electronic Commerce requires — 5 years for payment and supply records, 3 years for complaint and dispute records — and, after your account is deleted, in a form that does not identify you.

A verification code is valid for 10 minutes, and you stay signed in for at most 180 days.

4. Processors and transfers abroad

Payment processing: Stripe, Inc. (USA). Verification codes and notice emails: Google LLC (USA, Gmail). Network security and star photo storage: Cloudflare, Inc. (USA). Servers and database: Amazon Web Services (Seoul region, Republic of Korea).

Data transferred abroad travels over the network as you use the Site, and is kept until the processing ends or the contract ends.

5. Your rights

You can change your nickname, email address and password and delete your account at any time in My account. For any other request to access, correct, delete or stop processing your data, write to [email protected].

6. Contact

Privacy questions: [email protected]

7. Get Crown and profile photos

When you buy crowns on Get Crown we process the same payment data as for a vote (amount, time and status of the payment, and Stripe’s payment identifiers) and store the line you leave. A profile photo is stored only if you upload one.

Shown publicly: on Get Crown, the nickname, profile photo, line and number of crowns of members who bought crowns are visible to anyone.

Profile photos are kept in storage run by Cloudflare, Inc. (USA) and are deleted when you change or remove the photo and when you delete your account. A temporary copy in the delivery network (cache) can remain for up to one hour after that.

Crowns cannot be bought in the Android app; profile photos and Get Crown lines are handled there as on the website. You can change or remove your profile photo in My account at any time.