Privacy policy
Only the French version of these pages is authoritative.
In one word
Astralia neither sells nor passes on any personal data, premium or not.
Your data is there to run your account, nothing else. This page says it all: what we collect, why, where it lives, for how long.
Who is responsible
The publisher of Astralia (see Legal notice). For any question: the Contact page, subject “GDPR request”.
What we collect, and why
| Processing | Data | Legal basis |
|---|---|---|
| Your account | email, nickname, password or passkey, 2FA | performance of the contract (terms of service) |
| Your public profile | bio, avatar, banner, social links | consent (private by default, public if you decide so) |
| Sign-in with Discord, Google or Steam | your identifier at the provider, your email (Discord: identity and email, nothing more) | performance of the contract |
| Sessions | IP address, browser | legitimate interest (account security) |
| Support and donations | Stripe identifiers, support history | performance of the contract, then accounting obligation |
| Discord bridge (bot) | your Discord identifier and your honours, that is all | performance of the contract |
| Reports and moderation | the report, its reason, the decision | legitimate interest (a safe space) |
| Audit log | your account’s security events | legitimate interest and legal obligations |
| Emails (verification, alerts) | your email address | performance of the contract |
Never on our side
Your card number never touches our servers: payment happens at Stripe, and we only keep opaque identifiers.
Where your data lives
In Europe. The database and the API run at Hetzner in Falkenstein (Germany). Your images (avatar, banner) are stored on European storage. Emails are sent from France (Scaleway).
Processors
| Service | Role | Country |
|---|---|---|
| Hetzner Online GmbH | hosting of the data and the API | Germany |
| Vercel Inc. | serving the website | United States |
| Cloudflare, Inc. | network, protection, anti-robot (Turnstile), image storage (in Europe) | United States |
| Stripe | payments | United States |
| Scaleway | sending emails | France |
| Discord, Google, Steam | sign-in, if you choose it | United States |
| Sentry | technical error tracking, scrubbed of all personal data before sending | Europe |
Transparency about AI
News articles are translated by an artificial intelligence service; no personal data passes through it.
For how long
Your account: as long as it exists. Sessions: 7 days. The audit log: 12 months at most. Backups: 30 days at most, then they fade away on their own.
When you delete your account, erasure is immediate; the complete erasure of backups follows within 30 days.
Your rights
Access and portability: an export button lives in your account and gives you everything back. Rectification: your profile is edited directly. Erasure: a button too, not an obstacle course.
Objection and restriction: Contact page, subject “GDPR request”. And if you believe your rights are not respected, you can refer the matter to the CNIL (cnil.fr).
Minors
Astralia is open from 15 years of age (see terms of service).
This page evolves
Any substantial change is dated here. Last updated: at publication.