Last updated: October 28, 2026
This policy covers the Stardust Daily Android app and its supporting web/API services, operated by Angel Victorio (KrazyStack). Contact support@krazystack.com for privacy questions or requests.
Guest mode and optional Google sign-in
You can start using the app without Google sign-in. Guest gameplay progress and preferences are stored on your device. Our daily-fact service also stores a hashed random guest identifier, your time zone and fact-delivery history to avoid repeating facts. Guest mode is therefore not completely offline or free of server-side data. After you link an installation to Google, signing out requires signing in again to access that installation's account features.
If you choose Google sign-in, Google and Supabase process authentication. We receive an account identifier, email address and basic profile information made available through sign-in, such as a name or profile image. We use this information to identify your app account, display account details and associate your profile and saved progress with you. We do not receive your Google password or request access to Gmail, contacts or Drive files.
App data we store and why
- Profiles and social features: app display name, bio, avatar, numeric player ID, friend requests and friendships support your profile and interactions. Other players can see profile details used by the friends feature; your Google email is not your public player name.
- Cloud progress: when signed in, Supabase stores progress backups and account records such as XP, balances, owned/equipped items, achievements, quiz and expedition progress, game sessions and rewards. This enables restore, sync and validation of game actions.
- Daily facts: account or guest identifiers, time zone, fact assignments and seen-history prevent repeated daily deliveries. Binding guest progress can associate guest history with the linked account.
- Device preferences: settings, cached content and reminder schedules stay on your device unless included in a progress backup. Reminders use your device's notification permission.
- Service requests: hosting and content providers receive network information such as IP addresses and request details when delivering content, images, ads and API responses. Security and operational logs may record request metadata.
Advertising and service providers
Stardust Daily uses Google AdMob for native, banner and rewarded advertising. The Google Mobile Ads SDK may process advertising/device identifiers, IP address, approximate location derived from IP, ad interactions and diagnostic information for ad delivery, measurement and fraud prevention. Ad personalization depends on your consent, region and device settings. Where required, the app offers Google's consent form and an “Ad privacy choices” control. Verified reward callbacks may associate an ad reward transaction with an app account.
Supabase provides authentication and database storage. Our hosting provider and Cloudflare R2 deliver the API and images. External astronomy services may receive network information when the app requests their content. Providers process information under their own applicable terms and privacy policies, including Google's Privacy Policy, Supabase's Privacy Policy and Cloudflare's Privacy Policy. Processing may occur outside your country.
We do not sell your Google account information or use it to personalize ads. We share data as needed to run the app with these service providers, when you choose social/sharing features, or when required by law. Content you share through other apps is handled by the recipients and those apps.
Retention, security and deletion
We retain account records and cloud saves while your account remains active, until you request deletion. Daily fact history is retained to prevent repeats; clearing app data may lose the guest identifier without removing its server history. We use HTTPS, access controls and protected session storage; no system can guarantee absolute security.
You can request deletion of your Stardust Daily account and associated data by emailing support@krazystack.com. We verify ownership before deleting data and aim to complete verified requests within 30 days. This includes your app profile, cloud saves, friends relationships, account game/reward records, and linked daily-fact history. Your Google account is not deleted. Signing out alone does not delete cloud data.
Local copies on your devices are removed by clearing the app's storage or uninstalling it. Do this on every device after requesting deletion to prevent old local progress being uploaded if you create an account again. Restricted provider backups can persist until their configured rotation expires. Data that must be retained for legal or security reasons is limited to that purpose; if an exception affects your request, we will explain its scope and retention period.
Your choices and contact
You can choose guest mode on a new installation, manage notification permissions in device settings, use available ad privacy choices and contact us to request access, correction or deletion of your information. You can also remove the app's Google connection in your Google Account settings; revoking that connection does not itself delete app data. For requests, email support@krazystack.com. Depending on where you live, additional privacy rights may apply.
Changes
We update this page when our data practices change and revise the date above. Material changes will be communicated through the app or another appropriate channel.