Privacy policy

Last updated: 2026-10-12

This policy covers Star Haven (starhaven.dev and its subdomains) and the Diorama64 app. Alexander Bates runs Star Haven from the United Kingdom. For anything about your information, email [email protected].

Star Haven has no ads or tracking, and doesn't sell your information.

What Star Haven collects, and why

• Your account's email address, handle, and password. The password is stored only as a hash. Star Haven uses your email address for sign-up and account emails.
• When you ask for a sign-up email, your email address and IP address, kept for up to 48 hours to stop abuse. Cloudflare Turnstile also checks that you're not a bot.
• The devices you've signed in from, with their IP address and browser, and copies of account emails sent to you. Star Haven keeps these while your account exists.
• What you publish: your profile, mod listings, mod downloads, and the mods you star.
• How many times each mod is viewed and downloaded each day, as totals only. To count each visitor once a day, Star Haven holds a hash of your IP address and browser in memory, salted with a random value it throws away at midnight UTC, so no one can link one day's visits to another's.
• The files and history of mods you save online from Diorama64, which only you and your collaborators can access, and a record of which mods you own or collaborate on.
• Server logs of requests and connections, including IP addresses, which keep the service running and secure. Website logs are deleted after 14 days, and other logs after 30 days.

Star Haven uses this information to provide the service you signed up for. Logs and sign-up checks also keep it secure.

What's public

Star Haven is built on the AT Protocol, the network Bluesky uses. Your handle, profile, mod listings, the mods you star, the names and collaborators of mods you save online, and the public SSH keys Diorama64 creates for you are published to that network, and other services copy them. Deleting them here can't remove those copies, or the history kept by plc.directory.

Who else sees your information

Hetzner hosts the servers and files in Germany. Cloudflare runs DNS and the Turnstile check at sign-up. Resend sends account emails from the United States.

Transfers to providers in the United States are protected by the EU-US Data Privacy Framework and its UK extension, or by standard contractual clauses. Star Haven also shares information with authorities when the law requires it, such as reporting child sexual abuse material to the UK National Crime Agency.

How long Star Haven keeps it

Your account, mods, and published records stay until you delete them or your account. Server backups last up to 7 days.

Your rights

You can ask for a copy of your information, or ask for it to be corrected or deleted. You can delete your mods and your account yourself, and move your account to another AT Protocol server. For anything else, email [email protected], and you'll get a reply within one month.

If you're unhappy with how your information is handled, email [email protected]. You can also complain to the UK's Information Commissioner's Office at ico.org.uk, or to your local data protection authority.

Children

You must be at least 13 to use Star Haven. Star Haven deletes accounts that belong to anyone younger.

Cookies

Star Haven only uses the cookies it needs to keep you signed in, plus Cloudflare's for the Turnstile check. None of them track you.

Changes

If this policy changes in a way that matters, account holders get an email at least 30 days before the change takes effect.