Privacy Policy

Last updated 9 October 2026

Starfall is a card game made by an independent developer (“we”, “us”). This policy covers the game at starfallsky.com and the Starfall apps for iPhone and Android. It says what we keep, why, who else sees it, and how to have it removed.

What stays on your device

The game keeps your progress and settings in your browser’s or app’s local storage on your device. That includes your table name, decks, story progress, daily results, and settings such as music and voices. None of this leaves your device unless one of the features below sends it. Clearing the site’s data in your browser, or uninstalling the app, removes it. On Android, your phone’s own backup (if you have it turned on) may include the app’s data in your Google account backup.

To pick the right season for your half of the world, the game reads your device’s time zone. It never sends the time zone anywhere, and it never uses your location.

Accounts and progress sync

Signing in is optional. If you create an account, we store:

• an account name (3–20 letters, numbers, spaces, dashes or underscores), which you choose;
• your email address, which we use only to send a passphrase reset link when you ask for one;
• your passphrase, scrambled with a one-way hash (scrypt) and a random salt, so we cannot read it;
• sign-in sessions, kept as one-way hashes, and the dates you created the account and last signed in.

To keep your progress in step across devices, the game uploads a star chart. This is a small record of your progress: your table name, win and loss record, trials beaten, daily results, decks, story save, and which tips you have seen. If you haven’t made an account, the chart is tied to a random chart code instead (for example K7RW-M2PB), and the code itself is the key to it. A chart nobody has updated for two years is deleted.

Playing online

When you play someone online or invite a friend, your opponent sees your table name, your court, and your moves. There is no chat. The game is held on our server while it is played and deleted within a few hours after it ends. Quick match also sends your device’s random ID (see below) so you are never paired with yourself.

Reporting and blocking players

You can report an opponent, or a name on the daily board, from inside the game. A report keeps the name, the reason and any note you add, and we get an email about it. If you block an opponent, your device keeps a scrambled tag for them, and quick match never pairs the two of you again. The tag is made from the other player’s device ID, which is never shown to you or sent to your device. Blocking a daily board name just hides it on your device.

The daily challenge board

When you finish the daily challenge while online, your table name and score are sent to the daily board. Anyone can see the top 25 for each day. Scores are deleted after seven days. If you don’t want your name shown, change your table name before you play the daily challenge.

Tales

You can ask the game to write you a short story. The game asks before your first one is sent. Then your idea, the length you chose, and any details you add under Make it personal (a main character’s name, a pet, a favourite toy) are sent to Anthropic, which writes the story with its Claude AI models. So that a series stays consistent, short summaries of your recent tales (their titles, settings and characters) are sent along with it, and Claude may be asked whether a new idea carries on one of them, or what a rewrite note is asking for. If you choose to have it read aloud, the finished story is sent to Inworld, which records the narration. We do not send your account name, email, account, chart code or device ID to either company.

Your tales and their recordings are stored on our server and shown only to you, unless you share one. Deleting a tale removes it; deleting your account or star chart removes all of your tales. Please leave out anything you wouldn’t want shared.

Sharing a tale. If you turn on a tale’s share link, anyone with the link can read it, listen to it and download it, until you turn the link off. Before a link goes live, Claude checks the tale’s title and text against our content rules. If someone reports a shared tale, we may review it and take the link down.

Ratings and reports. If you rate a tale, we keep your stars and any note with your account or star chart. Others see only a tale’s average, once it has a few ratings; your note is read only by us. A report keeps the reason and any note you give, with a scrambled (one-way hashed) form of your IP address so one person can’t report the same tale many times. We also count how often each tale’s narration is played and how far it is heard. These are counts per tale and day, with nothing about who was listening.

Play counts, feedback and error reports

To learn whether people enjoy the game, it counts a few things: opening the game, which home-screen buttons are pressed, starting and finishing a duel, winning, searching for a quick match, starting the story or the tutorial, and sending feedback. The first time a device opens the game, it also records where the device found it, as one name from a fixed list (for example Reddit, Google, the app, or “direct”). It never records the address of the page you came from. Each count is stored with the day and a random device ID that the game creates. We don’t store your IP address, device type, account or location with these counts. They are deleted after about four months. To stop the counts on a device, open starfallsky.com/?notrack=1 once on that device.

If you send feedback from the game, we keep your note, any contact details you choose to add, and a few facts about where the note came from: the screen you were on, the game version, your screen size, your browser or device type (user agent), and the device ID. We keep feedback until we no longer need it, and we will delete it on request.

If the game hits an error, it sends a report: the error message, where in the game’s code it happened, the game version, the screen, and your browser or device type. The report is not linked to you, and reports are deleted after about four months.

Who else handles your information

We use a small number of service providers, only to run the game:

• Render hosts our website, server and database. Like most hosts, it may keep routine technical logs of requests, such as IP addresses.
• Resend or Brevo delivers passphrase reset emails, so it receives your email address and account name when you ask for a reset.
• Anthropic writes tales and checks shared ones, and Inworld reads them aloud, as described above.
• The same email service tells us when a tale is reported, with the report’s reason and note.

Our server uses your IP address briefly, in memory, to stop abuse (for example too many sign-in attempts). It doesn’t save it. We may disclose information if the law requires it. We don’t sell, rent or trade your information, and we don’t use it for advertising.

Keeping it safe

Everything travels to and from our server over encrypted connections (HTTPS). Passphrases, sign-in sessions and reset links are stored only as one-way hashes. A reset link works once and expires after an hour. No system is perfectly secure, but we keep what we hold to the minimum the game needs.

Deleting your information

• Your account: sign in, open Your Star Chart from the main menu, choose Delete my chart, and type your passphrase to confirm. This removes your account, your sign-in sessions, your star chart and your tales from our server. It leaves your progress on that device, so you can keep playing there; clear the site’s data or uninstall the app to remove that too.
• Things not tied to an account: to remove a feedback note, a chart that has a code but no account, or anything else, email us (address below). Include what you can (your chart code, or roughly what your note said) so we can find it.

Depending on where you live (for example in the EU, UK or California), you may have rights to see, correct, delete or move the information we hold about you, or to object to how we use it. Email us to use any of them; we will answer within 30 days. We rely on providing the game you asked for, and on our legitimate interest in keeping it working and improving it, as our reasons for using this information.

Children

Starfall is made to be gentle enough for everyone, but accounts and online features are not meant for children under 13, and we don’t knowingly collect personal information from them. A child can play without an account; a parent can use Tales to write bedtime stories to read aloud to them. If you think a child under 13 has given us personal information, email us and we will delete it.

Changes

If what the game collects changes, we will update this page and the date at the top. If a change matters, we will also say so in the game.

Contact

Questions or requests: privacy@starfallsky.com. You can also use Send feedback on the game’s home screen.