We collect the minimum data needed to provide K-Star Hub. This page explains exactly what we collect, why, who else processes it, and how you can exercise your rights.
We collect only your email and (if you subscribe) payment info. No data is sold or shared with advertisers. We use three processors — Stripe (payments), Resend (email), Supabase (hosting) — under data processing agreements. Compliant with GDPR and Korean PIPA.
Required: your email address (for account login and digest delivery). Optional: a display name. If you subscribe to Pro, payment information is collected by Stripe (we never see your card number — we only store a Stripe Customer ID). We log basic usage events (page views, digest opens, button clicks) without personally identifying details.
Email: account access, sending the digests you signed up for, billing receipts, important service notices. Display name: shown in the welcome email and account dashboard. Payment info: processing your subscription via Stripe and recovering failed payments. Usage events: aggregate analytics to improve the product. We do NOT use any of this for advertising targeting or profiling.
Account data is deleted within 30 days of account closure. Payment records are retained for 5 years per Korean Commercial Act §33 and Electronic Financial Transactions Act §22 — these are legal obligations we cannot waive. Usage analytics are retained for 12 months in aggregated form.
We use three processors who handle your data on our behalf under data processing agreements (DPAs): Stripe, Inc. (USA) — payment processing; Resend Inc. (USA) — transactional email delivery; Supabase Inc. (USA) — database hosting. None of them have any right to use your data for their own purposes. We do not share data with advertisers, data brokers, or third parties for marketing.
You can: (a) Access — request a copy of all data we hold about you; (b) Rectification — fix incorrect information via Account → Settings; (c) Erasure — delete your account and all associated data anytime via Account → Settings, or request manual deletion via email; (d) Portability — request an export of your data in JSON format; (e) Object — opt out of any non-essential processing. Email privacy@kstarhub.org for any of these — we respond within 30 days (GDPR / PIPA standard).
We use only essential cookies (login session, language preference, CSRF protection). No advertising cookies, no third-party tracking cookies, no Google Analytics. Browser storage may include a small cache of your last-read digest position, deletable via your browser settings.
Privacy questions, complaints, or rights requests: privacy@kstarhub.org. We respond within 30 days. EU/UK residents may also lodge a complaint with their local data protection authority. Korean residents may contact the Personal Information Protection Commission (privacy.go.kr).