Privacy Policy

Last updated: 17 April 2026

This Privacy Policy explains what personal data StarCity ("we", "us", or "our") collects when you use our website and services (the "Service"), how we use that data, and what rights you have over it. StarCity is an independent, non-commercial fan project and is not endorsed, sponsored, or affiliated with MovieStarPlanet ApS.

1. Who we are

StarCity is operated by the maintainers of the starcity.gg community platform. For any questions about this policy, or to exercise any of your rights, you can reach us at [email protected].

2. What we collect

2.1 Account data

When you create a StarCity account, we store:

• Username (required, 3 to 16 characters, letters, digits, hyphen, and underscore).
• Email address (optional). If you skip email at registration, you can add one later to enable password recovery.
• Password. Your password is securely hashed before it is stored, and we never keep it in plaintext.
• Profile bio (optional, up to 500 characters).
• Account metadata: creation date, last username change date, and active status.

2.2 Third-party sign-in

If you sign in with Google or Discord, the provider shares your email address, a stable user ID, and basic profile information such as your name. We store the provider ID, the email we receive, and a token that lets us keep your session active. We never receive your Google or Discord password.

2.3 MovieStarPlanet 2 account linking

StarCity lets you link your in-game MovieStarPlanet 2 ("MSP2") profile so we can display your character, inventory, and fame on your StarCity profile. Linking uses a short code that you generate inside the game. We never ask for and never store your MovieStarPlanet password. Once linked, we store:

• Your in-game profile identifier and server region.
• Your MSP2 in-game username, fame score, and gender as reported by the game.
• Cached snapshots of your inventory so the catalog and dressup can work offline.

We query MSP2's public game API to fetch this data. We do not transmit your StarCity account details (email, password, and so on) to MovieStarPlanet ApS.

2.4 Content you create

We store content that you submit on the platform, including forum posts, replies, reactions, direct messages, trade advertisements, reputation entries, uploaded attachments, and saved outfits or favourite colours. Deleted posts and messages are marked as deleted, but may remain in our database for moderation and abuse-prevention purposes.

2.5 Activity and technical data

To operate, secure, and moderate the Service, we also collect:

• Login events: IP address, browser user-agent, and event type (login, logout, token refresh) with timestamps.
• Last-seen timestamp, updated when you interact with the Service. You can hide this from other users with the Private presence setting.
• Push notification subscriptions, only if you opt in.
• Activity logs for calls our service makes to MSP2 on your behalf, for example fetching your inventory. These logs help us investigate failures and may contain your game profile ID.
• Moderation records: warnings, restrictions, mutes, bans, and any reports you file or that are filed against you, together with the reason and the moderator's action.

2.6 Browser storage

StarCity does not use tracking cookies or third-party analytics. We use your browser's local storage to keep you signed in and to remember small preferences such as your language, theme, dismissed announcement banners, draft outfits, and the position of the colour picker. Your authentication tokens are cleared from local storage when you sign out.

3. How we use your data

• To create and secure your account and let you sign in.
• To provide the core features of the Service (forums, trades, messages, dressup, inventory).
• To enforce our Terms of Service, including preventing scams, harassment, ban evasion, and other abuse.
• To respond to your support requests and reports.
• To monitor errors and keep the Service reliable, using a third-party error-tracking service (see Section 4.3).
• To send you service-related emails such as password resets.

We do not sell your personal data, we do not use it for advertising, and we do not train machine-learning models on it.

4. Who can see your data

4.1 Other users

The following information is visible on your public StarCity profile: username, bio, reputation score, post count, linked MSP2 profile (if any), account creation date, and your last-seen timestamp unless you enable Private presence. Your email address, IP address, moderation history, and linked third-party IDs are not shown to other users.

Content that you post in public areas (forums, trade ads, profile bio, and so on) is visible to anyone who visits the site, including logged-out visitors.

4.2 StarCity staff

Authorised moderators and administrators can access the content and account metadata they need to moderate the platform. Administrative actions (bans, warnings, content removals, impersonation checks) are logged in an internal audit log.

4.3 Service providers

We use a small number of third-party service providers to run StarCity. They only receive what is needed to deliver their specific service:

• Email delivery for transactional emails such as password resets.
• File and image storage for uploaded images such as item previews and message attachments.
• Error tracking for anonymised crash reports and performance traces sent at a very low sampling rate, to help us fix bugs.
• MovieStarPlanet 2 public game API, queried to populate linked profiles and inventories.

We do not share your personal data with these providers beyond what is required to deliver the service above.

4.4 Legal disclosures

We may disclose data if we are required to do so by law, or if we believe in good faith that disclosure is necessary to prevent fraud, abuse, or harm to any person.

5. Data retention

We retain account and activity data for as long as your account is active. Login events, moderation records, and admin audit logs are retained so that we can investigate abuse and security incidents. Deleted messages and posts remain in the database in a deleted state.

If you delete your account (see Section 7), your profile becomes inaccessible and we remove or anonymise your personal data where this is technically possible without breaking historical content. For example, posts on public threads may be replaced with a placeholder rather than fully removed.

6. Security

All traffic to and from StarCity is encrypted using HTTPS. Passwords are stored as secure one-way hashes and are never kept in plaintext. Access to the production database and to administrative tools is restricted to a small number of maintainers. No system is perfectly secure, but we take reasonable measures to protect your data, and we will notify affected users in the event of a confirmed breach involving personal data.

7. Your rights

Depending on where you live, you may have the following rights under data-protection laws such as the EU or UK General Data Protection Regulation (GDPR):

• The right to access the personal data we hold about you.
• The right to correct inaccurate data. You can edit most of your profile yourself.
• The right to delete your account and personal data.
• The right to export a copy of your data.
• The right to object to or restrict processing.
• The right to withdraw consent where we process data on the basis of consent.

Self-service account deletion and data export are not yet available in the user interface. To exercise any of these rights, please email us at [email protected] from the address associated with your account, or from an address you can verify you control. We will respond within a reasonable time, and in any case within the period required by law.

8. Children

StarCity is not directed at children under the age of 13. If you are under 13, you may not create an account or use the Service. If we learn that we have collected personal data from a child under 13 without verifiable parental consent, we will delete that data. If you believe a minor has provided us with personal data, please contact us at [email protected].

9. International transfers

StarCity is operated from infrastructure that may be located outside your country. By using the Service, you understand that your personal data may be processed in jurisdictions whose data-protection laws differ from those of your own country. We take reasonable steps to ensure that your data is handled in accordance with this policy wherever it is processed.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you through the Service. Your continued use of StarCity after changes take effect means that you accept the updated policy.

11. Contact us

If you have any questions, concerns, or complaints about this Privacy Policy or our handling of your personal data, please email [email protected]. If you are in the European Economic Area or the United Kingdom and are not satisfied with our response, you have the right to lodge a complaint with your local data-protection authority.