Overview
Astral is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and the rights you have regarding your data. Astral stores minimal personal data and anonymizes API and analytics data whenever possible. Where Astral relies on the Winstreak API, certain logged data may be handled under the Winstreak API privacy practices.
1. Information We Collect
- Account & Integration Data: If you register with Astral or link an external account (e.g., Discord), we may store identifiers such as email address, username, or Discord ID for administration, authentication, and support.
- API & Service Logs: For features that use the Winstreak API or that we operate, we log metadata required for debugging, rate-limiting, and abuse prevention (IP addresses, timestamps, endpoints, User-Agent strings, API key IDs where applicable).
- Analytics & Usage Data: Aggregated and, where possible, anonymized analytics to improve performance and features.
- Optional Integrations: Additional data required for optional integrations if you enable them (explicit and opt-in).
We do not sell personal data.
2. How We Use Data
- Security & Abuse Prevention: Enforce rate limits and detect misuse.
- Service Operations: Provide, operate, and maintain Astral features and integrations.
- Analytics & Improvement: Analyze anonymized usage data to enhance features and stability.
- Support & Communication: Respond to inquiries and manage accounts.
3. Data Sharing
We do not sell personal data. Astral may share data with:
- Service Providers: Trusted third-parties who operate hosting, analytics, or communications; bound by contract to follow our instructions and security controls.
- Legal Requirements: Data disclosed when required by law or to respond to lawful requests from authorities.
- Security & Abuse Investigations: Information shared to prevent or mitigate fraud, abuse, or security incidents (may include Winstreak administrators when related to API abuse).
When using the Winstreak API, some request-level logs and identifiers are stored by Winstreak according to their policy.
4. Cookies & Tracking
Astral uses minimal cookies and tracking mechanisms primarily for essential functionality and anonymous analytics. Non-essential cookies (if any) will be disclosed and will require consent where applicable.
5. Data Retention
We retain data only as long as necessary for the purpose collected and to meet legal or operational requirements. Examples:
- Service logs and request metadata: retained for up to 90 days for debugging and abuse prevention, unless retained longer for investigations or legal requirements.
- Account and integration identifiers: retained while active and for a reasonable period after for account recovery and abuse investigations.
Note: Winstreak’s API logging practices (including long-term storage of API keys for auditing) are governed by the Winstreak API policy.
6. User Rights
Depending on applicable law (including the GDPR), you may have the right to access, correct, delete, or obtain a copy of personal data we hold about you, and to restrict or object to processing. To exercise these rights, contact us at [email protected]. If data is jointly controlled or stored by Winstreak, requests may need to be handled by Winstreak as well.
7. Security Measures
We implement reasonable technical and organizational measures to protect data, including access controls and encryption in transit. No system is completely secure; follow best practices for key management and infrastructure security.
8. International Transfers
Astral and its providers may process data in jurisdictions outside your country; we apply appropriate safeguards as required by applicable law.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in practices or legal requirements. Material changes will be posted with an updated "last updated" date.
10. Contact Information
For privacy-related requests or questions, contact: [email protected]