Legal
Privacy Policy
This Privacy Policy explains how Star Digest (“we”, “us”) collects, uses, and shares information when you use our digital SaaS weekly GitHub-stars digest email and related website. We design the product to use read-only GitHub access and to avoid collecting more than we need to deliver digests and billing.
Contact / privacy requests: hello@stardigest.dev
1. Who we are
Star Digest operates the site https://stardigest.dev and related APIs hosted on Vercel. For questions about this policy or your data, email hello@stardigest.dev.
2. Data we collect
2.1 Information you give us
- Email address — when you join the waitlist, request a preview email, or we use the address returned by GitHub OAuth (
user:email). - Support messages — content you send to hello@stardigest.dev.
2.2 GitHub OAuth
When you connect GitHub, we request scopes such as read:user and user:email.
Depending on what GitHub returns and what you authorize, we may process:
- GitHub user id, login/username, avatar URL, and public profile fields needed for the account.
- Primary or selected email address for delivering digests.
- Public starred repositories (names, URLs, descriptions, topics, star timing, and similar metadata) so we can rank and email weekly picks. We do not request private repository contents for the core digest product.
- OAuth tokens / session cookies we need to keep you signed in and call GitHub on your behalf within the granted scopes.
2.3 Payments (Waffo)
Subscriptions are billed through Waffo. Waffo processes payment details. We may receive subscription status, plan, merchant/order identifiers, and limited billing metadata (for example email or customer id associated with the payment) needed to unlock paid features. We do not store full payment card numbers on Star Digest servers.
2.4 Email delivery (Resend)
We use Resend to send waitlist, preview, and weekly digest emails. Resend processes recipient addresses, message content, and delivery events (sent, bounced, complained) as needed to deliver mail.
2.5 Technical and usage data
- Server logs from hosting (Vercel): IP address, user agent, request path/time, error traces.
- Basic operational metrics to keep the Service reliable and secure.
3. Cookies and similar technologies
We use a session cookie (or equivalent) after GitHub OAuth so we can recognize your signed-in browser and serve your digest preview. We do not run third-party advertising pixels on the marketing site as of the date above. Essential cookies required for login and security may be set without additional consent where allowed by law. You can clear cookies in your browser; doing so will sign you out.
4. How we use data
- Provide, personalize, and improve the weekly digest and web preview.
- Authenticate you via GitHub and maintain your subscription state.
- Send transactional and product emails (digests, waitlist Issue #0, billing-related notices).
- Process payments and prevent fraud / abuse.
- Comply with law and respond to support requests.
We do not sell your personal information.
5. Sharing with processors
We share data with service providers only as needed to operate Star Digest:
- GitHub — identity and Stars API (you authorize this connection).
- Resend — email delivery.
- Waffo — payments and subscriptions.
- Vercel — hosting, edge/network, and serverless functions.
These providers act under their own privacy terms. We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or transfer of the Service (with notice where appropriate).
6. Retention
We keep account, subscription, and email records while your account is active and for a reasonable period afterward for billing disputes, security, and legal obligations. You may ask us to delete account data; we will do so where feasible, except for records we must retain (for example payment records) or backups that rotate on a normal schedule.
7. Security
We use HTTPS, scoped OAuth tokens, and access controls appropriate for a small SaaS. No method of transmission or storage is perfectly secure. Protect your GitHub account and notify us of suspected unauthorized access.
8. International transfers
Our processors (including Vercel, Resend, Waffo, and GitHub) may process data in the United States and other countries. By using the Service you understand that your information may be transferred to jurisdictions with different data-protection laws than your own.
9. Your choices and rights
- Disconnect GitHub OAuth from your GitHub settings and/or ask us to delete your Star Digest account.
- Unsubscribe from marketing-style mail where offered; transactional digests for paid/active accounts are part of the Service.
- Request access, correction, or deletion by emailing hello@stardigest.dev.
Depending on where you live, you may have additional rights under local law. We will respond to verifiable requests within a reasonable time.
10. Children
Star Digest is aimed at developers and professionals. We do not knowingly collect personal information from children under 16 (or the higher age required in your region). Contact us if you believe a child has provided data so we can delete it.
11. Changes
We may update this Privacy Policy. The “Last updated” date at the top will change when we do. Continued use of the Service after an update means you acknowledge the revised policy.
12. Contact
Privacy questions: hello@stardigest.dev
Also see our Terms of Service.