What we keep, and what we never had.

Who runs this

Starvling is run by Luca Capone, sole trader, Luxembourg. Postal address on request. Everything below is a question away at hello@starvling.com.

If you feed a creature

You do not have an account and we never ask for one. Your browser gets one random number, stored in a cookie called starvling_fk, which lasts a year and means only one thing: this browser has already fed this product today. If the cookie cannot be set, we use a one-way fingerprint of your IP address and browser instead, salted so it cannot be reversed.

That number is never joined to a name, an email, or anything else about you. We do not know who you are, and the design makes sure we cannot find out.

Two other things are kept in your browser and never sent anywhere: which theme you picked, and a list of the creatures you have already watched die, so the death animation does not play twice for the same one. The second is a list of product names, not of you. Clearing your browser data removes both, and nothing breaks.

If you list a product

We store what you typed and nothing more:

• The product name, tagline and link, because they are the listing.
• Your X handle, if you gave one, because it credits you.
• Your email address, used for the receipt and to reach you if something goes wrong with your listing.

Payment happens on Stripe. Card numbers never touch our servers and we never see them. Stripe keeps its own record of the payment, under its own privacy policy.

What we do not do

• No accounts, no passwords, no sessions.
• No advertising, no ad trackers, no data sold. The two analytics tools below are the only third parties that see traffic, and they see counts, not people.
• No marketing email. We will not add you to a list.
• Analytics counts pages and a few actions, never people. The next section says exactly how.

Analytics

Analytics counts pages and a few actions (a feed, a listing started, a share) in two tools: Vercel Web Analytics and PostHog, on PostHog's EU servers in Frankfurt. Neither sets a cookie or keeps anything in your browser.

PostHog tells one day's visits apart with a hash of your IP address and browser made with a salt it deletes the next day, so nobody can be followed across days or sites, and no profile is built. If your browser sends Do Not Track or Global Privacy Control, neither tool receives anything at all. The feed cookie is never sent to PostHog. Vercel hosts Starvling, so it handles every request to the site, cookie included, whether or not analytics is on; its analytics does not use cookies.

How long it stays

A listing and its feed history are kept for as long as Starvling exists, including after the creature dies. The graveyard is a public record, and a record with holes in it is worthless.

You can still ask us to remove your listing. Email hello@starvling.com from the address you listed with and we will take it down, usually within a day. Feed counts belong to the people who fed, so they stay, detached from your listing.

Your rights

You can ask what we hold about you, ask for it to be corrected, ask for it to be deleted, or complain to your local data protection authority. One email is enough. For feeders there is usually nothing to send back, because a random number is all there is.