Privacy policy

1. Who is responsible

Stellar Byte Technology Corp. (British Columbia, Canada) is responsible for the personal information collected on this site. Contact: Stellar Byte Technology Corp., email: support@moveset.io. Our designated privacy officer handles privacy matters at the same address. On card orders Stripe, as merchant of record, is independently responsible for the information it collects to take payment and calculate tax, under Stripe's own privacy policy.

2. What we collect

Account: email and language preference; when you sign in with Google or GitHub, the email, name and avatar link they share. We never see or store passwords for those services.

Orders: what you bought, amount, currency, tax, payment method type, payment, refund and dispute status, the country and customer id Stripe returns, and any referral code (see mv_ref in section 7). Card numbers and other payment credentials go straight to Stripe; we never see or store them.

Sign-in and use: sign-in sessions (browser user agent and a hash of the IP address), CLI token names and last-used times, download and install records (time, version, client user agent, a hash of the IP address).

What you send us: skill requests, refund requests (description and environment), launch-notice emails, and emails you send to support.

When you submit or claim a community skill: your GitHub username, the repository and description you submit, and, when claiming, your access level to that repository read through the GitHub API (read-only; no write access requested). Used for review, to contact you and to show "Claimed by author".

We use no third-party analytics, advertising or cross-site tracking tools.

3. How we use it, and on what basis

To perform our contract with you: sign-in, delivering products and updates, sending sign-in codes, receipts, refund notices and other transactional emails, handling support and refunds.

Legal obligations: keeping transaction records as tax and accounting rules require.

Legitimate interests: preventing fraud and abuse of the service, keeping it secure, attributing orders to referral channels and settling their shares.

Consent: launch notices go only to addresses that asked for them, and you can unsubscribe at any time. We do not sell or rent personal information or use it for advertising.

4. Service providers and where they are

Stripe (United States and its global network): processes every payment. On card orders Stripe is merchant of record (see section 2 of the terms) and processes your email, billing address, payment details, IP address and device information to take payment, calculate tax and prevent fraud.

Cloudflare (US company, global edge network): runs the site and API (Workers), stores skill files (R2), runs the email and download-record queues (Queues), verifies that sign-in and checkout forms are used by a person (Turnstile, which collects browser and device signals), and protects internal admin tools (Access). Every request passes through Cloudflare, which processes the raw IP address and request details.

Neon (United States, AWS us-west-2, Oregon): hosts the database holding the data in section 2.

Email: our own Stalwart mail server (hosted by Contabo in an EU data centre) sends and receives email, and outgoing mail is delivered through Amazon SES (Canada, ca-central-1). They process recipient addresses and message content; support email is stored on that server.

Google and GitHub: only if you choose to sign in with them, they share your email, name and avatar link with us.

GitHub Actions (United States): runs the daily database backup job; backups are encrypted within the job and stored in Cloudflare R2.

Discord (United States): receives system alerts for our operators only. Alerts carry no full email address (shown like a***@example.com), payment details, message bodies or codes; they may include order numbers and internal ids.

These providers process data only on our instructions and for the purposes above (except Stripe acting as merchant of record, see section 1).

5. International transfers

We are a Canadian company. Data is stored mainly in the United States (the database) and processed by the providers above in Canada, the United States, the EU and Cloudflare's global network, where data protection laws may differ from yours. Where providers offer them, we rely on safeguards such as standard contractual clauses.

Users in mainland China: this site is operated from outside mainland China and its servers and data are outside it. When you sign up, order or send us information, your personal information is transferred abroad and handled under this policy; by continuing you acknowledge and consent to that transfer. You can view, export or delete your data at any time as described in section 9.

6. How long we keep it

Account details, download and install records, requests: while your account exists. They are deleted or de-identified when you delete the account (see section 9).

Order, payment, refund and revenue-share records: 7 years from the end of the financial year of the transaction, as Canadian tax and accounting rules require. When you delete your account, the email on these records is replaced with a random placeholder so they no longer point to you.

Sign-in sessions: up to 30 days, deleted at once when you sign out or delete the account. Sign-in codes and CLI authorisation codes: valid for 10 minutes. Rate-limit counters: hold only hashes of IP addresses or email addresses (sign-in counters use a keyed hash that cannot be reversed with a list of addresses), plus counts by account and session id for staff second-factor checks; windows are at most 1 hour. Records of issued download links (for the daily download limit and abuse investigation): 30 days. Payment webhook events: kept only to de-duplicate and investigate. Expired records of these kinds are purged periodically.

Launch-notice emails: until you unsubscribe, ask us to delete them or delete your account. Support emails: as long as needed to handle the matter; you can ask us to delete them.

Community submissions are kept for 24 months after a decision; a claim is deleted when you release it or delete your account.

Audit records of staff actions: kept for security and reconciliation for up to 7 years; the record of an account deletion holds no email address.

Backups: daily encrypted backups are deleted automatically after 30 days; monthly encrypted backups are kept for up to 7 years; the database provider's point-in-time recovery data rolls over within 7 days. Deleted data may remain in backups until they expire; if we ever restore from a backup, we apply deletions again.

7. Cookies and local storage

Sign-in cookies (names starting with commerce): keep you signed in, for up to 30 days; the site cannot work without them.

NEXT_LOCALE: set only when you switch language, to remember your choice, for 1 year.

mv_ref: set when you arrive through a referral link with ?ref=. It holds only the referral code (nothing that identifies you), for 30 days; if you order in that time, the code is saved with the order to measure the channel and settle its share.

Browser storage: your cart (SKUs only) is kept in localStorage; the email you enter at guest checkout is held in sessionStorage to prefill sign-in when you return from payment, and is cleared when you close the tab. Neither is sent to third parties.

The Turnstile check and Stripe's checkout page may use cookies or similar technologies on their own domains, under Cloudflare's and Stripe's policies. We use no analytics or advertising cookies. Blocking cookies prevents sign-in.

8. IP addresses and security

Our database stores only hashes of IP addresses (for sessions, download records and rate limits), never the raw address. Cloudflare and Stripe, as providers, do process raw IP addresses; see section 4.

The whole site uses HTTPS; the application uses a least-privilege database role; backups are stored encrypted with the key held offline; the admin console requires two-factor verification.

9. Your rights

You can access, export, correct or delete your personal information, object to or restrict certain processing, and withdraw consent. Export: after signing in, download a JSON file under "Your data" in account settings. Delete: confirm with your email in the same place, or write to us.

When you delete your account we remove your sign-in methods, sessions, tokens, launch notices and refund request descriptions, revoke all licences, and replace the email on order records with a random placeholder; financial records such as order amounts are kept as described in section 6. Pending orders, open disputes or refund requests in progress must be settled first. Records held by Stripe are requested from Stripe separately.

We reply within 30 days. You can also complain to the Office of the Privacy Commissioner of Canada or the data protection authority where you live.

10. Children

This site is not directed at anyone under 16. If you believe we hold a child's information, tell us and we will delete it.

11. Changes

Changes are posted on this page with a new date; material changes are announced in advance by email or on the site.

12. Contact

Privacy requests and complaints: Stellar Byte Technology Corp., email: support@moveset.io. We reply within 30 days.