stareto

Privacy Policy

Last updated: February 2026

1. Controller

The controller responsible for data processing on this website is:

Zivue AS
Per Krohgs vei 4C, 1065 Oslo, Norway
Email: office (at) zivue.com

Zivue AS operates the Stareto platform.

2. Overview

We take the protection of your personal data seriously. We process personal data confidentially and in accordance with the EU General Data Protection Regulation (GDPR), the Norwegian Personal Data Act (personopplysningsloven), and this privacy policy.

3. What Data We Collect

3.1 Account Data

When you register, we collect:

  • Email address
  • Username / display name
  • Password, stored as a cryptographic hash only

Authentication is handled by a self-hosted Authentik identity provider. We do not use third-party login providers.

3.2 Profile Data

You may optionally provide biography, birthdate, avatar image, language and theme preferences, and privacy settings.

3.3 Usage Data

When you use Stareto, we automatically collect IP address, browser and operating system details, pages accessed, request timestamps, and interactions such as searches, ratings, and saved favourites.

3.4 Server Log Files

Our hosting infrastructure automatically records technical data such as browser type, operating system, referrer URL, hostname, and request time. This data cannot be attributed to specific individuals and is not merged with other data sources.

4. Legal Basis for Processing

  • Consent (Art. 6(1)(a)) for optional profile information you choose to provide.
  • Contract performance (Art. 6(1)(b)) to provide the Stareto service after registration.
  • Legitimate interest (Art. 6(1)(f)) for security logging, abuse prevention, and service improvement.

5. Purpose of Processing

We use your data to provide and maintain Stareto, personalise your experience, improve services through anonymised statistical analysis, and ensure platform security.

6. Cookies

Stareto does not use tracking cookies. We use only technically necessary session tokens required for authentication.

7. Data Sharing

We do not sell, rent, or share your personal data with third parties. Data may only be disclosed if required by law or a court order.

8. Data Retention

Your personal data is retained for as long as your account is active. If you delete your account, your data will be permanently removed within 30 days, except where longer retention is required by law.

9. Data Hosting

All data is hosted within the European Economic Area (EEA).

10. Your Rights

Under the GDPR, you have rights of access, rectification, erasure, restriction, data portability, objection, and withdrawal of consent. To exercise these rights, contact us at the email address listed above.

11. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. The competent authority for Zivue AS is Datatilsynet.

12. Children and Minors

Stareto is not intended for persons under 16 years of age. We do not knowingly collect data from children under 16.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify registered users of material changes by email. The current version is always available on our website.