Privacy Policy

Last updated: 2026-01-01

Introduction

Your Star in Space ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website at yourstarin.space and use our star naming services.

By using our services, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this Privacy Policy, please do not access the site.

Information We Collect

Personal Information

When you place an order or interact with our services, we may collect:

  • Contact Information: Email address for order delivery and communication
  • Order Details: Recipient name, star name, personal dedication messages
  • Gift Information: Name of the gift giver (if provided)
  • Payment Information: Processed securely by Stripe (we do not store card details)

Automatically Collected Information

When you visit our website, we may automatically collect:

  • Usage Data: Pages viewed, time spent on pages, click patterns
  • Device Information: Browser type, operating system, screen resolution
  • Location Data: Country and region (for currency detection only)
  • IP Address: Used for fraud prevention and analytics

How We Use Your Information

We use the information we collect to:

  • Process and fulfil your star naming orders
  • Generate and deliver personalised star certificates
  • Create and host your star's permanent mini-site
  • Send order confirmations and administrative emails
  • Respond to customer service requests and support needs
  • Detect and prevent fraudulent transactions
  • Improve our website and user experience
  • Comply with legal obligations

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience:

  • Essential Cookies: Required for website functionality (currency/language preferences)
  • Analytics Cookies: Help us understand how visitors use our site (via Plausible Analytics)

We use Plausible Analytics, a privacy-focused analytics service that does not use cookies for tracking and does not collect personal data. Plausible is GDPR-compliant by design.

Third-Party Services

We work with trusted third-party service providers:

Stripe (Payment Processing)

All payments are processed securely by Stripe. We never see, store, or have access to your full credit card number. Stripe is PCI-DSS Level 1 certified, the highest level of certification in the payments industry. View Stripe's Privacy Policy at stripe.com/privacy .

Plausible Analytics

We use Plausible for website analytics. Plausible does not use cookies, does not track users across devices or websites, and is fully GDPR-compliant. View their privacy policy at plausible.io/privacy .

Cloudflare

We may use Cloudflare for content delivery and security. Cloudflare processes some technical data to provide these services. View their privacy policy at cloudflare.com/privacypolicy .

Data Retention

We retain your personal information for as long as necessary to:

  • Maintain your star's permanent mini-site (indefinitely, as this is a core feature of our service)
  • Comply with legal, accounting, and reporting requirements
  • Resolve disputes and enforce our agreements

Transaction records are kept for a minimum of 7 years for tax and legal compliance purposes. You may request deletion of your data at any time, subject to legal retention requirements.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • HTTPS encryption for all data in transit
  • Secure database storage with encryption at rest
  • Regular security assessments and updates
  • Limited access to personal data on a need-to-know basis

While we strive to use commercially acceptable means to protect your personal data, no method of transmission over the Internet is 100% secure.

Your Rights

If you are a resident of the European Economic Area (EEA), United Kingdom, or other jurisdictions with similar data protection laws, you have certain data protection rights:

  • Access: Request copies of your personal data
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request limitation of processing
  • Portability: Request transfer of your data
  • Objection: Object to processing of your data

To exercise these rights, please contact us at [email protected] . We will respond within 30 days.

Children's Privacy

Our services are intended for users aged 16 and over. Users under the age of 16 may only use the service with the involvement and explicit consent of a parent or legal guardian. We do not knowingly collect data from children under 13 without verifiable parental consent. If you believe a child has provided us with data without such consent, please contact us.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. These countries may have different data protection laws. When we transfer data internationally, we ensure appropriate safeguards are in place to protect your information in compliance with applicable data protection laws.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

Contact Us

If you have any questions about this Privacy Policy, please contact us: