Legal
Privacy Policy
How Blue Feather Digital GmbH handles personal data in connection with StarFlash. Last updated 6 August 2026.
The short version
- The sensor data StarFlash indexes is public environmental data published by third-party networks. It is not personal data and does not describe you.
- You can search and browse without an account.
- If you create an account, we hold the minimum needed to operate it.
- We do not sell personal data.
Who we are
StarFlash is operated by Blue Feather Digital GmbH ([REGISTERED ADDRESS], [COMPANY NUMBER]). For any privacy question, or to exercise the rights described below, reach us through the contact page.
What we collect
When you browse
Standard request data needed to serve and secure a website: IP address, user agent, requested URL, timestamp and referrer. This is processed by our infrastructure provider for delivery, security and abuse prevention, and is retained for a limited period.
When you create an account
Sign-in uses Google OAuth. We receive your email address, name and profile image from Google — we never receive or store your Google password. We additionally store account state such as when the account was created and your preferences.
When you use the service
We log queries and interactions in order to operate and improve search relevance. Where this is associated with an account it is personal data; where it is not, it is aggregate usage data.
Why we process it, and on what basis
- To provide the service — performance of a contract with you.
- To keep it secure and available — legitimate interests in preventing abuse and protecting the service.
- To improve search quality — legitimate interests in operating a product that works.
- To meet legal obligations — where the law requires retention or disclosure.
Who processes data on our behalf
- Cloudflare — hosting, content delivery, compute, database and object storage. Traffic and stored data are handled on Cloudflare infrastructure.
- Google — identity provider for sign-in, where you choose to sign in.
These providers act as processors under our instructions. [CONFIRM WHETHER ANY ADDITIONAL SUB-PROCESSORS ARE IN USE — e.g. analytics, email delivery, payment processing — AND LIST THEM HERE.]
International transfers
Our infrastructure operates on globally distributed networks, so data may be processed outside your country. Transfers rely on the safeguards offered by those providers, including standard contractual clauses where applicable. [CONFIRM THE TRANSFER MECHANISM RELIED ON.]
How long we keep it
- Account data — for as long as the account exists, and a limited period afterwards.
- Request and security logs — a limited retention period set by our infrastructure provider. [CONFIRM EXACT PERIOD.]
- Usage and query logs — [CONFIRM RETENTION PERIOD.]
Your rights
Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict processing, and to withdraw consent. To exercise any of these, contact us through ${CONTACT}. You also have the right to complain to your data protection authority.
Cookies
We use only what is necessary to operate the site, including keeping you signed in. [CONFIRM WHETHER ANY NON-ESSENTIAL COOKIES OR ANALYTICS ARE SET; IF SO, A CONSENT MECHANISM IS REQUIRED.]
Children
The service is not directed at children and we do not knowingly collect their personal data.
Changes
If this policy changes materially we will update the date above and, where appropriate, notify account holders.