Privacy Policy & Data Rights
Stellar Star is designed with a privacy-first, non-custodial architecture. We clearly distinguish permanent, immutable blockchain records from mutable, deletable off-chain application records.
Immutable Blockchain RecordsPermanent
Transactions executed on the Stellar ledger are decentralized, immutable, and permanent by network design.
- • Public key addresses (G...)
- • Soroban contract IDs & transactions
- • Payment amounts, assets & ledger sequence numbers
- • Cryptographic Ed25519 signatures
* Note: Blockchain records cannot be modified, deleted, or rolled back by Stellar Star or any third party.
Mutable Application DataDeletable
Personal application context is stored off-chain in encrypted storage and protected by Row-Level Security (RLS).
- • Profile display names & contact books
- • Trip titles, notes & expense descriptions
- • Uploaded receipt scans & PDF attachments
- • Capability invite links & session tokens
* Fully under your control: you can export or delete this data at any time via authenticated request.
Official Retention Schedule
| Data Category | Storage Layer | Retention Period | Deletion Mechanism |
|---|---|---|---|
| User Profile | Database (`users`) | Retained while active | Purged on account deletion |
| Receipt Attachments | Private Storage | Up to 730 days | Automated sweep or user delete |
| Trip Invitations | Database (`trip_invites`) | 7 days default | Immediate revoke; 30d cleanup |
| Audit & Export Logs | Database (`audit_events`) | 90 days | Rolling automated purge |
| Auth Challenges | Database (`auth_challenges`) | 5 minutes | Purged upon verification |
| Database Backups | Encrypted Storage | 30 days | Rolling backup cycle rotation |
Manage Your Data & Account
Exercise your right to data portability and right to erasure. Actions below require a verified session from your connected wallet.
Download a structured JSON archive of your personal profile, trips, expense participations, and contacts.
Permanently deletes your profile, contact books, and receipts, while anonymizing group participation. Stale sessions are immediately invalidated.