Last updated: September 10, 2025


Starmirror (“we,” “our,” or “us”) is committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable laws. This Privacy Policy explains how we collect, use, and safeguard your data when you use the Starmirror mobile application (“App”).

⸻


1. Data Controller


The data controller responsible for processing your personal data is:


Herndon Dryhurst Studio

Kyffhauserstr 22, Berlin, Germany 10781

mat@starmirror.org


⸻


2. Data We Collect

•Photos: Photos you capture in the App are stored securely by our third-party provider, Supabase, along with associated metadata such as capture time and location.

•Location Data: Location information is used to tag photos and display relevant map data.

•App Usage Data: We may collect non-personal, aggregated data such as device type, operating system, and in-app activity for analytics and performance improvement.


We do not collect names, email addresses, or other identifying information unless you voluntarily provide them (e.g., if you contact us).

⸻


3. Purposes and Legal Basis for Processing


We process your data only where legally permitted under GDPR:

•Performance of Contract (Art. 6(1)(b) GDPR): To provide the App’s core functions (storing photos, tagging locations, displaying maps).

•Legitimate Interests (Art. 6(1)(f) GDPR): To maintain and improve the App, ensure security, and understand usage trends.

•Consent (Art. 6(1)(a) GDPR): Where required, such as optional data collection beyond the App’s core functions.


⸻


4. How We Use Your Data

• To store your photos and associated location tags.

• To show which areas have been explored or remain undocumented.

• To provide mapping functionality.

• To eventually release photos into the public domain, in line with Starmirror’s mission.

• To improve performance and reliability of the App.


We do not sell or rent your personal data to advertisers or other third parties.

⸻


5. Third-Party Services


We use trusted third parties to operate Starmirror:

•Supabase – provides secure cloud storage and database services for photos, metadata, and account data. Privacy Policy: https://supabase.com/privacy

•Mapbox – provides mapping and location services. Privacy Policy: https://www.mapbox.com/legal/privacy


These providers may process your data in the EU or internationally, with safeguards in place under GDPR (such as Standard Contractual Clauses).


⸻


6. Data Retention

• Photos remain in storage until you delete them in the App or until they are released into the public domain.

• Metadata is retained as long as necessary for the functioning of the App.

• Aggregated usage data may be retained for analytics purposes without time limit.


⸻

7. Your Rights under GDPR

You have the following rights:

•Access – to request a copy of your personal data.

•Rectification – to correct inaccurate or incomplete data.

•Erasure – to delete your data (“right to be forgotten”).

•Restriction – to limit processing of your data.

•Portability – to receive your data in a portable format.

•Objection – to object to processing based on legitimate interests.

•Withdraw Consent – to withdraw any consent previously given.


To exercise these rights, contact us at mat@starmirror.org

⸻

8. Children’s Privacy

Starmirror is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13. If you believe we have collected such data, please contact us so we can delete it.

⸻

9. Security

We take appropriate technical and organizational measures to protect your data, including encryption, secure storage, and access controls.

⸻

10. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available in the App and on our website.

⸻

11. Contact

If you have questions about this Privacy Policy or your data, please contact us:

Herndon Dryhurst Studio

Kyffhauserstr 22, Berlin, Germany 10781

mat@starmirror.org