Privacy Policy

Version 1.1 · effective October 30, 2026

What we store about you, why, for how long, who else sees it, and your rights.

In short

Fitz, a sole trader in Sweden is the controller of your personal data on polestar.guide. Write to [email protected].
We store what an account and its guides need: your email, sign-in methods, sessions, profile and what you publish. The full list, with the reason and how long for, is in Account › Privacy & your data.
No advertising, no tracking cookies, no selling or sharing of personal data.
You can download everything, correct it, or delete your account yourself. We answer other requests within 30 days.

1. Who is responsible

The controller is Fitz, a sole trader in Sweden, providing Polestar. Contact: [email protected].

2. What we store, and why

Everything we keep about you, where, on what legal basis and for how long:

WhatWhereWhy (legal basis)Kept

Account and emailYour email, whether it is confirmed, your role, and when you joined.DatabaseContractUntil you delete your account

Sign-in methodsYour password as a hash, and the Battle.net, Google, Discord or GitHub account ids you linked (with their sign-in tokens).DatabaseContractUntil you unlink it or delete your account

SessionsEach signed-in browser: its IP address, user agent and last activity.DatabaseLegitimate interestsUntil it expires (30 days unused) or you sign it out

One-time linksSign-in, confirmation and password-reset links, as single-use tokens tied to your email.DatabaseContract10 minutes to 24 hours, then they stop working

ProfileYour name, @handle, bio, website, Discord name, BattleTag and notification settings.DatabaseContractUntil you delete your account

AvatarThe picture you uploaded, re-encoded and stripped of metadata.File storageContractUntil you replace it or delete your account

Community guides and versionsThe listings, uploads, built addons, scan results and install counts of guides you own or co-author.Database and file storageContractUntil you delete the guide or your account

Guide imagesIcons, covers and screenshots you upload, and their review status.File storageContractUntil you remove them or the guide

CommentsWhat you wrote, when, and any edits.DatabaseContractUntil you delete them; after account deletion, kept as "deleted user"

Stars, follows and collectionsThe guides you starred, the creators you follow, and your lists.DatabaseContractUntil you remove them or delete your account

NotificationsWhat happened on your guides and comments, and whether you read it.DatabaseContractUntil you delete your account

API keysEach key’s name, first characters, expiry and last use; the key itself only as a hash.DatabaseContractUntil you delete your account

Terms acceptedWhich version of the Terms and Privacy Policy you accepted, and when.DatabaseLegal obligationUntil you delete your account

Reports you filedThe guide or comment you reported, the reason and your details.DatabaseLegitimate interestsAs long as needed to resolve and defend the decision

Copyright notices and counter-noticesA notice’s sender: name, organization, email, and the address and phone if given, seen by moderators only (a guide’s authors are told the name and organization). A counter-notice: everything in it, forwarded to the notice’s sender as the law requires.DatabaseLegal obligationAs long as needed for legal claims and the repeat-infringer rule; unconfirmed notices are deleted after 7 days

Moderation records about youModerator actions on your account or guides, with the reasons given.DatabaseLegal obligationAs long as needed for legal claims and appeals

Rate-limit countersShort-lived counts of attempts (sign-in, uploads, comments) by account or IP address.DatabaseLegitimate interestsOverwritten when each window ends (minutes to a day)

Install countsHow many players installed a guide each day. Reported anonymously by Polestar Client and never linked to you.DatabaseLegitimate interestsFor the life of the guide

3. Legal bases

We rely on contract for what running your account and your guides needs; on legitimate interests for keeping the service secure and working (sessions, rate limits, reports and anonymous install counts); and on legal obligation for moderation records and the record of the terms you accepted. Where we rely on legitimate interests, you can object.

4. Who else sees it

Your data is processed for us by a hosting provider, a database provider and file storage; by an email delivery service for the mail we send you; by a malware-scanning service that receives each built addon (a guide’s files, not your account); and, when it is switched on, by an image-screening service that sees uploaded guide images. Battle.net, Google, Discord and GitHub learn that you signed in to Polestar only if you use them to sign in. We do not sell personal data, and nothing on the site tracks you for advertising. Your public profile, published guides, comments, stars’ totals, follows’ totals and public collections are visible to everyone.

5. Transfers

Some of the services that process data for us may do so outside the EU and EEA. Where they do, the transfer is covered by an adequacy decision or the European Commission’s standard contractual clauses.

6. Your rights

Under the GDPR (EU and UK) you can access, correct, delete, restrict, object to and move your data. Download everything and delete your account yourself in Account › Privacy & your data, and correct your profile in Account › Profile; for anything else, write to [email protected] and we answer within 30 days. If you live in California, these rights cover the ones the CCPA gives you. We do not sell or share personal data.

7. Deleting your account

Deleting your account removes it at once, with your profile, sessions, sign-in methods, API keys, stars, follows, collections and notifications. Your guides go to a co-author you choose or are deleted with their files. Your comments stay, shown as written by "deleted user". Moderation records about you are kept only as long as needed for legal claims and appeals. There is no recovery period: deletion is immediate.

8. Cookies

We set only strictly necessary cookies, for signing in. The Cookie notice lists them.

9. Children

Polestar is not meant for anyone under 13, or under the higher age their country sets (up to 16). If you believe a child has made an account, write to [email protected] and we will delete it.

10. Complaints

You can complain to Integritetsskyddsmyndigheten (IMY), https://www.imy.se, or to the data protection authority where you live, work or think a breach happened. We would rather hear from you first.

11. Changes

We will tell you before a material change to this policy and ask you to accept it again.