Skip to content
StarBite← Back to the site

Privacy

Updated 12 October 2026

This notice explains what personal data starbite.co collects, why, who receives it, how long we keep it and what your rights are.

01Who we are

StarBite is a small, independent games studio run from Romania and the United Kingdom. We are the controller of the personal data collected on this site. You can reach us at contact@starbite.co.

02What we collect and why

When you use the contact form, we collect your name, email address, subject and message, your Discord tag and the role you’re applying for if you add them, and your age confirmation. We use them to reply to you and, if you’re applying, to consider your application. Our legal basis is our legitimate interest in answering messages and, for applications, taking the steps you asked for before a possible contract. You don’t have to send us anything, but we can’t reply without a way to reach you.

When you start filling in the form, Cloudflare Turnstile checks that you’re a person, using signals such as your IP address and your browser and device characteristics, and may store small items in your browser for challenges.cloudflare.com. When you send the form, we store a one-way hash of your IP address so that one connection can’t send more than three messages in ten minutes. Our legal basis is our legitimate interest in protecting the form from spam and abuse. If the check blocks you, email us instead. A person reads every message.

When you visit, Cloudflare (our host) receives your IP address and basic details of each request to deliver pages and protect the site from attacks. Some partner logos load from the partner’s own website, which then sees your IP address. Our legal basis is our legitimate interest in running a secure website.

We don’t use cookies, analytics, advertising or tracking, so nothing changes when your browser sends a Do Not Track signal.

03Who receives it

We don’t sell your data or share it for advertising. It is handled by:

  • — Discord Inc. (United States): form messages arrive in a private channel on our Discord server. Discord also processes them under its own privacy policy.
  • — Cloudflare, Inc. (United States): hosting, security, the Turnstile check and forwarding email sent to starbite.co. For Turnstile, Cloudflare also uses the signals to improve its bot detection, as a separate controller.
  • — Supabase, Inc. (database hosted in Ireland): the IP hashes.
  • — The provider of the inbox our email is forwarded to, if you email us.
  • — Transfers outside the UK and the European Economic Area are protected by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

04How long we keep it

  • — Messages: until the conversation is over, and no longer than 12 months.
  • — Applications we don’t take forward: up to 6 months after we tell you, unless you ask us to keep yours for future roles.
  • — IP hashes: at least a day. Older ones are deleted the next time anyone sends the form.
  • — Cloudflare request logs: up to 7 days.

05Your rights

You can ask for a copy of your data, or ask us to correct it, delete it, limit how we use it or send it to you in a portable format. Email contact@starbite.co and we’ll reply within a month.

You can object at any time to us using your data on the basis of our legitimate interests.

You can also complain to a data protection authority: the ANSPDCP in Romania, the Information Commissioner’s Office in the UK, or the authority where you live or work.

06Children

This site isn’t meant for children under 13, and we don’t knowingly collect their data. By sending the form, you confirm that you’re 18 or older, or 13 or older with a parent or guardian’s agreement. If you think a child under 13 has sent us something, tell us and we’ll delete it.

07Changes

If we change this notice, we’ll update this page and the date at the top.