Privacy policy

What we collect

• About you (the grown-up): your email, first name and family name, and your password. We store the password only as a one-way hash, so nobody can read it, us included.
• About your kids, which you enter: a first name or nickname, a picture (one of our animals, never a photo) and a colour, and, if you add it, a birthday (day and month, no year). Also what StarJar records for them: stars, routines, activities and chores, books, learning, events and TV time. Also the ideas you keep for each kid in the Grown-ups' zone: things to do together, with any notes and web links you add. Kids never see them, and StarJar never visits the links.
• Jar rewards: the photo and words a grown-up adds as a reward for a kid's jar, and when the jar filled and the reward was given. We remove a photo's hidden details, like where it was taken, before we keep it.
• Family settings: your time zone, sound and motion choices, and the town you pick for the weather (its name and map position).
• Devices: for each signed-in device, when it signed in and the browser's description of itself (its "user agent": the browser and device type).
• Billing: the email and name for receipts, your plan, charges and tax invoices, and your card's brand, last 4 digits and expiry date. Your full card number goes straight to Stripe; we never see or store it.
• Messages you send us.
• Technical: our server uses your internet (IP) address for a short time to slow down repeated sign-in attempts and to limit repeated requests, and our web server keeps standard logs (IP address, browser, pages asked for) for 14 days to keep StarJar secure.
• How you found StarJar: When you first open one of our public pages, your browser keeps a note of how you got here for up to 30 days: the campaign words in the link (like utm_source), a referral code if it had one, the first page you opened and the name of the website that sent you (never its full address). If you create a family, we keep that note with your family so we can see which ways of finding StarJar work. It holds no name, email, internet address or device details, and no one else gets it. We also count visits to our public pages by day, page and where they came from, and how often their videos start and reach halfway by day and page, with nothing about who visited.

Children's information

A grown-up aged 18 or over creates the family and enters everything about the kids. Kids don't have accounts or emails, and they can't send anything out of StarJar. First names or nicknames are all StarJar needs. It has no place for surnames, and the only photos are the reward photos a grown-up chooses to add; we suggest a photo of the reward, not of people.

Why we use it

To run StarJar for your family; to sign you in and keep your devices signed in; to send the emails you need (sign-in codes, password resets, billing reminders and tax invoices); to take payments and keep tax records; to keep StarJar safe and fix problems; to see which ways of finding StarJar work; and to meet our legal duties. Nothing else.

No selling, no ads, no tracking

We never sell or rent your information. StarJar has no advertising, no third-party analytics or tracking tools and no third-party scripts. The visit counts and the note of how you found StarJar stay with us. Its fonts and pictures come from our own server.

Who we share it with

Only these services, and only what each needs:

• Stripe takes payments. It gets your receipt email, the name on receipts and a reference number we make up, plus the card details you type on its secure page. Stripe's own privacy policy applies.
• Amazon Web Services sends our emails (Amazon SES, Sydney), receives emails to support@lasercloud.com.au (Amazon WorkMail, USA) and keeps our encrypted backups (Sydney).
• Our hosting provider runs the StarJar server in California, USA.
• Weather services: MET Norway gets only the map position of the town you picked; the words you type to find a town go to GeoNames or Open-Meteo. Never your name or email.
• Open Library (Internet Archive, USA): the words you type to find a book go to it to look up titles and covers. Nothing else about you.

We also share information if the law requires it.

Information stored overseas

Your family's StarJar information is kept on our server in the USA, and emails to support are kept in the USA. Stripe may handle payment information in the USA and other countries. Backups are kept on that server for up to 30 days and in Sydney, Australia for 45 days. We choose providers that protect information well, but the laws of those countries may differ from Australia's.

How we keep it safe

Every connection to StarJar is encrypted (HTTPS). Passwords, sign-in codes and device sign-ins are stored only as one-way hashes. Only the LaserCloud people who run StarJar can reach its server and data. Backups are encrypted and locked against changes. If a data breach is likely to cause serious harm, we'll tell you and the Office of the Australian Information Commissioner (OAIC), as the law requires.

How long we keep it, and deleting it

• We keep your family's information while your StarJar exists, also while it's cancelled or resting, so you can pick up where you left off.
• To delete your family's StarJar and its information, email support@lasercloud.com.au from the email you sign in with. We delete it within 30 days and confirm by email. Backup copies are removed as they expire, within 45 days after that.
• Hiding a kid in the Grown-ups' zone keeps their stars. To erase a kid completely, email us.
• Removing a reward, or deleting it from Given, deletes its photo from our server straight away. Backup copies go as they expire.
• We keep tax invoices and payment records for as long as tax law requires (usually 5 years).

Seeing and correcting your information

You can see and change most of it in the Grown-ups' zone: kids, routines, activities, books, learning, events, ideas, jar rewards, settings, your password and receipt details. To get a copy of your information, or to change your email, first name or family name, email us. We reply within 30 days.

Cookies and storage on your device

StarJar uses only the cookies it needs to work: one keeps the device signed in (up to a year), and two short ones hold a sign-up (up to 7 days) or a password reset (up to an hour) in progress. Your browser also keeps small notes for StarJar, like the last email used to sign in and which stars your kids have already celebrated. On our public pages it also keeps the note of how you found StarJar, for up to 30 days or until your family is created. No advertising or tracking cookies.

Questions and complaints

Email support@lasercloud.com.au. We'll reply within 30 days. If you're not happy with our answer, you can complain to the OAIC at oaic.gov.au or on 1300 363 992.

Changes to this policy

If we change this policy, we'll update the date at the top. For important changes we'll email the grown-up of each family before they apply.