Starlevel by Duodu Studio
Privacy
Starlevel is run by Duodu Studio (org. no. 931908324, Oslo, Norway), which is the data controller for everything described here. We collect as little as we can, we never sell data, and we do not use advertising trackers or cookies.
What we store and why
| What | Why | How long |
|---|---|---|
| Your account: email, @name, name, bio, role (creator or business) and the links you add | To give you an account and a public profile (contract) | Until you delete your account |
| Sign-in: a one-time code sent to your email, or Google sign-in (we receive your email and name from Google) | To let you sign in securely (contract) | Codes expire after 15 minutes; sessions after 30 days |
| Projects and remixes: titles, texts, colours and image links you add | To show your portfolio and save your remixes (contract) | Until you delete them or your account |
| Private messages between users, plus blocks and reports | To deliver messages and keep the community safe (contract and legitimate interest) | Until you delete your account; a reported conversation is reviewed by Duodu Studio |
| Brand scans: the website address and email you enter, and what our automated tools find on that public website | To send you the report you asked for, and to follow up once (legitimate interest) | As long as it is relevant to you – ask us and we delete it |
| Questions to the help centre | To answer you (legitimate interest) | Until the question is resolved, or until you delete your account |
| Purchases: what you bought, amount, email and receipt (card details are handled by Stripe, never by us) | To deliver the template, refund if something goes wrong, and keep the accounts (contract and legal obligation) | 5 years, as the Norwegian Bookkeeping Act requires |
| Visits: anonymous page views via Cloudflare Web Analytics, without cookies and without a profile of you | To understand which pages are useful (legitimate interest) | Aggregated counts only |
Your profile, projects and @name are public – that is the point of a portfolio. Your email and your messages are never shown to other users.
Who helps us run Starlevel
- Cloudflare – hosting of the Starlevel service, database, image storage and anonymous visit counts
- Netlify – hosting of the website
- Google – optional Google sign-in, and the email system we send codes and replies from
- Stripe – payments, receipts and refunds
- A US software provider that helps us draft replies to help-centre questions – only the question and the page you asked from are shared, never your account data
Some of these companies are based in the United States. Transfers are covered by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses. They process data only on our behalf.
Your rights
You can see, correct, export or delete your data at any time. You can delete your account yourself on your profile page – your profile, projects, remixes, messages and sign-in data are removed right away. For anything else, write to roderick@duodustudio.com and we reply within 30 days. You can also object to processing based on legitimate interest, and you can complain to the Norwegian Data Protection Authority (Datatilsynet).
Emails
We send the emails you ask for (sign-in codes, your scan report, receipts and replies) and, now and then, Starlevel news and tips. Every email has an unsubscribe link, and you can switch news on or off on your profile at any time – including subscribing again if you change your mind.
Age
Starlevel is for people aged 16 and over.
Changes
If we change how we handle data, we update this page and the date above. Important changes are announced by email to account holders.