Privacy Policy

1. Data Controller

The data controller is Starlyware di Gianluca Grasso, independent developer, Chieti (CH), Italy.

For any privacy question or to exercise your rights, write to info@starlyware.com.

2. At a Glance

• You don't need an account to use the site, and we don't ask for your data unless you write to us through the forms.
• We don't sell your data or use it for advertising.
• Google Analytics statistics are turned on only if you press “Accept” in the cookie banner.
• Karen and the Quasar console run in your browser: what you type, the things you ask Karen to remember and the console sequences stay on your device and never reach our servers.
• The site's fonts and icons are served from our own server: browsing the pages doesn't contact Google Fonts or other external services.
• The forms are protected from spam by Google reCAPTCHA.

3. Data We Process

3.1 Browsing data

Like every website, the server hosting starlyware.com (Aruba S.p.A., in Italy) automatically records some technical data for each request: IP address, page or file requested, date and time, browser and operating system, referring page and server response code. We need them to run the site, protect it from abuse and fix errors. We don't use them to identify you.

3.2 Contact form

If you write to us through the form on the home page, we process your name (or company name), email address, type of service, subject and message. We automatically send you an email confirming that we received it.

3.3 Bug report form

If you report a problem with one of our programs, we process your email address, the product, the platform, the impact, how often the problem happens, the subject, the description and the language of the page. We automatically send you an email with the reference number of your report.

3.4 Email and WhatsApp

If you write to us by email or on WhatsApp (the site's button opens WhatsApp, a Meta service that processes data under its own privacy policy), we receive your email address or phone number and what you write. We use them only to reply and to handle your request.

3.5 Karen

Karen is a program that runs entirely in your browser: what you write to her is processed on your device and is not sent to us.

• Memory: the name you tell her, the things you ask her to remember (for example your birthday or the things you like) and the settings (voice, agent mode, pirate mode, night theme) are saved in your browser's storage (localStorage). You can delete them at any time by telling her “Forget everything” or by clearing the site's data in your browser.
• Voice input: if you press the microphone, speech recognition is done by your browser. Some browsers send the audio to their provider to transcribe it (for example Google for Chrome, Microsoft for Edge, Apple for Safari), under their own policies. We receive neither the audio nor the text.
• Karen's voice: uses the voices installed in your browser. Some “online” voices (for example Chrome's Google voices) send the text to be read to their provider.
• Location: only if you ask her where you are, and only after you allow it in the browser. Your position is shown on screen, is not saved and is not sent to us. The map link opens Google Maps only if you press it.
• Reminders and timers work only while the page is open and are not saved on our servers.

3.6 Quasar web console

• The USB or Bluetooth connection to the board happens directly between your browser and the board (Web Serial), only after you choose the port. No data from the board reaches our servers.
• The example programs and the console firmware are downloaded from our server like any other file of the site. The .hex files you pick from your computer are read by the browser and are not uploaded to the internet.
• In your browser's storage we save the last command sequence and whether you have already uploaded the console firmware, so that the page reopens where you left it.
• Voice commands work like Karen's (see above).

3.7 Statistics (only with your consent)

If you press “Accept” in the cookie banner, we use Google Analytics 4 to understand, in aggregate, how the site is used: pages visited, length of visits, device and browser type, language and approximate area derived from the IP address. Google Analytics uses the _ga cookies with a random browser identifier; according to Google, Google Analytics 4 does not log or store the IP addresses of users in the European Union. Without your consent the Google Analytics script is not even downloaded. You can change your mind at any time from the Cookie Policy.

3.8 Form protection: Google reCAPTCHA

On the pages with a form (the home page and the bug report page) we use Google reCAPTCHA to tell people from automated programs and block spam. reCAPTCHA collects information about your browser and device, your IP address, Google cookies and your interaction with the page, and sends it to Google. Google's Privacy Policy and Terms of Service apply.

3.9 Links to other sites

The site contains links to external services (for example Google Play, GitHub, Wikipedia, social networks and WhatsApp). When you open them you move to sites that process data under their own policies.

4. Purposes and Legal Bases

• Replying to messages and quote requests and carrying out any resulting work: pre-contractual steps and contract (Art. 6(1)(b) GDPR).
• Handling bug reports and improving our software: legitimate interest (Art. 6(1)(f)).
• Site security and spam prevention (browsing data, reCAPTCHA, list of blocked addresses): legitimate interest (Art. 6(1)(f)).
• Google Analytics statistics: consent (Art. 6(1)(a)), which you can withdraw at any time.
• Karen and console features: the data stay in your browser; saving them in the browser's storage is strictly necessary for a feature you request and does not require consent.
• Legal obligations (for example tax records of a job, or requests from authorities): Art. 6(1)(c).
• Defending our rights in case of disputes: legitimate interest (Art. 6(1)(f)).

You can object at any time to processing based on legitimate interest by writing to us.

5. Do You Have to Provide Your Data?

In the forms, the required fields are needed to reply to you: without them we cannot handle your request. Consent to statistics is optional and the site works the same way if you decline. Karen and the console can be used without giving us any data.

6. Who We Share Data With

We don't sell or transfer your data. Only for the purposes described, your data may be processed by:

• Aruba S.p.A. (Italy): website hosting, form database and email delivery, as a processor.
• Google (Google Ireland Ltd and Google LLC): Google Analytics, only with your consent, and Google reCAPTCHA.
• Your browser's speech recognition provider, only if you use the microphone with Karen or the console, under its own terms.
• Public authorities, only when required by law.

7. Transfers Outside the European Union

The site and the form data are hosted in Italy. Google may also process some data in the United States: these transfers are based on the EU-U.S. Data Privacy Framework, in which Google LLC participates, and on the Standard Contractual Clauses approved by the European Commission.

8. How Long We Keep Data

• Contact requests and email or message exchanges: up to 24 months after the last message. If a job follows, accounting and tax records are kept for 10 years, as required by Italian law (Art. 2220 of the Civil Code).
• Bug reports: until the problem is solved, and in any case no longer than 24 months.
• Log of automatic emails (recipient, date and result of delivery): 12 months. Emails waiting to be sent are deleted as soon as they are sent.
• Server browsing data: for as long as needed for the site's security, at most 12 months, unless they are needed to investigate an abuse.
• List of blocked addresses: contains only the email address of people who sent spam or abusive content, and is kept as long as needed to prevent further abuse. You can ask us to review it.
• Google Analytics: for the period set in Google Analytics, at most 14 months.
• Browser storage (Karen, console, cookie choice): on your device, until you delete it.

9. Security

All communication with the site is encrypted (HTTPS). Form data are stored in a database that only the controller can access, and we take technical and organizational measures to protect them from loss, unauthorized access and misuse.

10. Your Rights

Under Articles 15-22 of the GDPR you have the right to:

• know whether we process data about you and receive a copy;
• ask for its rectification or erasure;
• ask for the restriction of processing or object to it, in particular to processing based on legitimate interest;
• receive the data you provided in a structured format (portability);
• withdraw your consent at any time, without affecting processing already carried out;
• lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it) or with the supervisory authority of your country.

To exercise your rights, write to info@starlyware.com. We reply within one month, free of charge.

11. Automated Decisions

We don't make decisions based solely on automated processing that produce legal effects or similarly significantly affect you (Art. 22 GDPR). reCAPTCHA is used only to recognize automated programs that send spam.

12. Children

The site is meant for a general audience and its content, including Karen and the articles, can also be used by students. If you are under 14, ask a parent to write to us for you. If you believe a child has sent us data without a parent's consent, write to info@starlyware.com and we will delete it.

13. People in Canada

Starlyware is based in Italy and the GDPR applies to the processing described in this policy. If you are in Canada, we also follow the principles of the federal Personal Information Protection and Electronic Documents Act (PIPEDA) and, where it applies, of Quebec's Act respecting the protection of personal information in the private sector.

• Accountability: Gianluca Grasso, owner of Starlyware, is responsible for our compliance with privacy rules and can be reached at info@starlyware.com.
• Consent: we collect and use your personal information for the purposes described in this policy, with your consent or as the law permits. You can withdraw your consent at any time, subject to legal requirements.
• Your rights: you can ask us for access to your personal information, to know how it is used and shared, and to correct or delete it. We reply within 30 days and do not charge a fee.
• Transfers outside Canada: your information is stored in Italy and, for Google, may also be processed in the United States, where it can be accessed by the authorities of those countries under their laws.
• Questions and complaints: write to us first at info@starlyware.com. You can also complain to the Office of the Privacy Commissioner of Canada (www.priv.gc.ca) or, if you live in Quebec, to the Commission d'accès à l'information du Québec (www.cai.gouv.qc.ca).

14. Changes

We may update this policy when we add features to the site or the law changes. The date of the last update is shown at the top.

Contact

Controller: Starlyware di Gianluca Grasso, independent developer, Chieti (CH), Italy
Email: info@starlyware.com