Star Thrown Privacy Policy

Boundless Alchemy LLC
Last updated: 3 November 2026
Contact: support@starthrown.com

Every service provider that processes player data for us, including Google (Firebase), Brevo and Unity (Vivox), is required to protect it to the same or an equal standard as this policy. Services that act on their own account, such as Apple and Google for app-store payments and beta testing, Google reCAPTCHA, Google Groups, Discord and Meta (for our sign-up form on Instagram and Facebook), apply their own privacy policies.

In-game chat (Vivox)

In-game text chat is provided by Vivox, a service of Unity Technologies. Unity processes the chat data listed below only on our behalf and on our instructions, as our service provider. Separately, Unity may process technical and performance data about how the chat service runs, which does not include your messages or your account details, under its own privacy policy: https://unity.com/legal/game-player-and-app-user-privacy-policy.

Data

Your player account ID, display name, the text of the chat and direct messages you send, a device identifier and a truncated IP address.

Purpose

Delivering in-game chat between players.

Retention

Message text is deleted automatically after 7 days, and identifiers within 30 days, including after you delete your Star Thrown account.

Transfers

Processed in the United States under the European Commission's Standard Contractual Clauses; contact us for a copy.

Other data we collect

Profile pictures

If you upload a profile picture, we store it with Google (Firebase Cloud Storage). Smaller copies are shown to other players and can be viewed by anyone who has their link. Your pictures are deleted when your account is deleted.

Purchase records

Apple or Google handles every payment, and we never see your card details. For each purchase we keep the item, the store, the time and a fingerprint of the store receipt, linked to your account ID. We use them to deliver your items, handle refunds, prevent fraud and meet tax obligations. They are kept after you delete your account, and deleted automatically 7 years after the purchase or refund.

Chat diagnostics

Vivox also collects anonymous performance and diagnostic data about the chat connection, to measure and improve chat. It is not linked to your account.

Device integrity check

To protect the game from modified apps and automated abuse, the app asks Google (Firebase App Check) to confirm it is a genuine copy on a genuine device. It uses Google Play Integrity on Android and Apple App Attest on iOS.

Age

Star Thrown is for players aged 18 and over, as our Terms of Service require. We do not knowingly collect data from anyone under 18. If you believe a child has given us data, contact support@starthrown.com.

Beta testers

This section covers the Star Thrown beta: applying at starthrown.com/beta or through our sign-up form on Instagram or Facebook, and taking part. Boundless Alchemy LLC is responsible for this data. If you live in Korea and applied through our Korean sign-up form, see For users in Korea below.

Data

When you apply: your email address, your device (iOS or Android) and, if you answer it, whether you play strategy games and, if you came through one of our ads, which post or ad it was (for example, instagram / paid). If you sign up through our form on Instagram or Facebook: your email address, your phone (iPhone or Android) and that you signed up through that form; the form cannot be sent without confirming you are 18 or older. Brevo also records when you sent the form and your IP address. If you take part: your beta sign-in account (email address and password), your username and profile picture, your game data, chat, records of any test purchases, any reports, messages you send us from the in-game Help screen (which include your account ID, stardom ID and display name) or by email, and your Discord username and what you post in our Discord server.

Purpose

Running the beta: checking that the form is not sent by a bot, sending you install links, beta updates and an end-of-beta email, running the beta game, and finding and fixing problems before launch. We also count sign-ups by the post or ad they came from, to see which work. We do not send you marketing emails. If you sign up through our form on Instagram or Facebook, Meta collects your answers there and passes them to us; we send nothing back to Meta, and we do not otherwise share beta data with advertisers or ad networks.

Legal basis

Your consent, which you give by sending the application form on starthrown.com/beta or our form on Instagram or Facebook. You can withdraw it at any time; see "Leaving the beta early" below. Withdrawing does not affect what we did before.

Who receives it

• Meta runs our sign-up form on Instagram and Facebook and sends your answers to Brevo for us. Meta also uses form data for its own purposes, such as filling in forms for you later, under Meta's Privacy Policy; Meta, not us, is responsible for that use.
• Brevo (Brevo Inc., United States) stores your application and sends our beta emails.
• Google reCAPTCHA checks that the form is not sent by a bot. Google's privacy policy and terms, linked under the form, apply to it.
• On iPhone, you test through Apple TestFlight, and Apple holds your Apple Account. Apple collects crash logs and usage information from the beta app and shares them with us, and you cannot opt out. They may include your name and email address. Feedback you send through TestFlight goes to Apple and to us.
• On Android, you join our Google Group and test through Google Play. As the group's owner, we can see your Google Account email address. Google Play shares device information and usage data from the beta app with us.
• The beta game runs on a separate beta server with Google (Firebase), which holds your beta account and game data. In-game chat works as described in "In-game chat (Vivox)" above.
• The beta app sends crash reports to Google (Firebase Crashlytics) and usage statistics to Google Analytics for Firebase.
• Fastmail hosts our support mailbox, support@starthrown.com.
• Discord runs the server where we post beta announcements and you can report bugs. Discord's own privacy policy applies to your Discord account.

Transfers

We are based in the United States. The beta server (Google Firebase sign-in, database, profile pictures and backups) is in the United States. Apple processes TestFlight data, and Discord its data, in the United States; Fastmail processes our support mailbox in the United States and other countries; Unity processes chat data as described above. Google and Discord rely on the EU-U.S. Data Privacy Framework, and Apple and Fastmail on the European Commission's Standard Contractual Clauses. Brevo stores your application on its servers in France and Belgium; Brevo group companies in Germany, the United States and India can access it for support and maintenance, under the EU-U.S. Data Privacy Framework and the Standard Contractual Clauses. Meta's Privacy Policy explains where Meta processes form data.

Retention

The beta closes when the beta round ends or Star Thrown launches, whichever comes first. Within 30 days after the close, we delete the beta data we hold: your application and answers at Brevo, our Google Group, our TestFlight testers and builds, your beta account, game data, chat, test purchase records, reports and support messages, our beta Discord channels, the feedback log and tester list we keep during the beta, and the beta's Google Analytics data. Unlike the live game, we do not keep beta purchase records for 7 years or beta reports for 2 years. Applications that reach us after the close are deleted within 14 days of arriving. Some copies last longer:

• Our backups of the beta server, and deleted profile pictures, are erased within a further 40 days.
• Our beta server's logs are deleted automatically 30 days after they are written.
• Google Analytics erases the beta's data permanently 35 days after we delete it.
• Google removes deleted sign-in accounts from its systems and backups within 180 days.
• Google (Firebase Crashlytics) keeps crash reports for 90 days, then starts deleting them.
• In-game chat is deleted as described in "In-game chat (Vivox)" above.
• Apple keeps TestFlight feedback for one year, and may keep crash logs and usage data until the bugs are resolved.
• Google Play keeps feedback you send through it under Google's own policies.
• Discord keeps its own copies under its privacy policy.
• Brevo deletes its logs of the emails we send you one month after they are sent. It keeps its log of your form submission, including your IP address, with no time limit by default; unless you are on our launch list, we ask Brevo to delete it when the beta closes. Brevo's own backups are kept for a period it does not publish.
• If you signed up on Instagram or Facebook, your form stays available to us in Meta for 90 days from when you sent it, then expires. We do not keep downloaded copies of it. Meta keeps its own copy under its Privacy Policy.

Launch emails

Applying for the beta does not sign you up for launch emails. You can sign up on our homepage.

Leaving the beta early

Unsubscribing from our beta emails withdraws your application: within 14 days we delete it at Brevo (or, if you are on our launch list, your beta answers). It does not delete your beta account. To delete your beta account, use Delete Account in the beta app's Account Settings, or our account deletion page. It is deleted after 7 days, as that page describes; the purchase, report and deletion records that page says we keep are deleted with the rest of the beta data, within 30 days after the beta closes; chat, crash reports and server logs follow the periods under Retention above. To leave our Google Group or the beta altogether, email support@starthrown.com, and we remove your application and your Group membership within 14 days.

Your rights

Your rights over your data, including the right to complain to a data protection authority, are set out in our full privacy policy at https://www.iubenda.com/privacy-policy/51182608. If you are in Brazil, you also have the rights in Article 18 of the LGPD, including the right to petition the ANPD.

For users in Korea · 한국 이용자 안내