What we collect, why, how long we keep it, and what we refuse to do.
We collect what we need to run a learning platform and keep it safe. We do not
sell your data. We are stricter with young people's data than the law makes us
be.
Privacy law is weaker in some countries than others. We don't use that.
Every member gets the same protection, wherever they live — the standard we
would have to meet for a young person in Canada, applied to everyone. A student
in Addis Ababa, Karachi or Toronto gets identical treatment: the same retention
limits, the same right to see and delete their data, the same refusal to profile
or sell.
Where a local law is stricter than our standard, we follow the local law.
Stardust Odyssey, Dubai mainland, United Arab Emirates, is the controller of
your personal data. Reach us at contact@stardustinc.ca.
When you sign up: your email, a display name, your date of birth and your
country. Date of birth decides which features are age-appropriate. Country
decides what we're permitted to offer you.
When you use the platform: which pages you open and how long they stay open,
courses started and finished, XP earned, posts and comments you write, events
you register for, rooms you join.
When you sign in: the time, your IP address and your browser's description.
This is for security — spotting somebody else getting into your account.
If you upload things: photos, videos, files and anything you write.
If you pay us: payments are handled by a payment provider. We never see or
store your card number.
time, not where you were sitting. Your IP is kept only for sign-ins, where it
protects your account.
where you are from your IP address, and we do not send your IP to any outside
company to find out.
anybody, ever.**
| What | How long |
|---|---|
| Page-by-page browsing records | **30 days** — see below |
| Daily totals (pages opened, minutes) | While your account exists |
| Sign-in records | 12 months |
| Your posts, courses and certificates | While your account exists |
| Record that you agreed to these policies | While your account exists |
Browsing records are kept for 30 days if you're under 18 — **or if we don't know
how old you are.** Most members have never told us their date of birth, and
guessing "adult" is the guess that could hurt a child, so we assume the
protective answer. Only members we know to be adults get the longer 90-day
window.
After that window passes the detailed rows are deleted and only counts remain.
We keep how *much* you used Stardust, not a list of everywhere you went.
Odyssey is built for young people, so:
guardian approves them.
whose age we don't know.
A parent or guardian can ask to see, correct or delete their child's data at any
time.
Only where it's needed to run the service:
servers. Calls are not recorded unless you're told they are.
provider needs.
your work and progress in their classroom, the same way a teacher would.
We do not share your data with advertisers, data brokers or anybody else.
On servers in Europe, run by us. Stardust Odyssey is a UAE company, so your data
may be accessed by our team from the UAE and Canada to operate the service.
You can ask us to show you your data, correct it, delete it, or send you a copy
to take elsewhere. You can object to how we use it. Email
contact@stardustinc.ca and we'll respond within 30 days.
You can turn off non-essential emails at any time from any email we send, or in
your settings. Emails you can't turn off are the ones you need — password
resets, sign-in links, receipts.
We use cookies to keep you signed in and to keep forms secure. That's all. We
don't use advertising or tracking cookies. See Cookies & Tracking.
If your data is exposed in a way that could harm you, we'll tell you and the
relevant authority promptly, and say what we're doing about it.
If we change this in a way that matters, we'll ask you to read it again.