Privacy Policy

In effect since June 26, 2026

This Policy explains, in clear terms, what personal data Astarojna processes on the astarojna.com website and in the Astarojna Telemetrydesktop application, for what purpose, on what basis, and what your rights are. It reflects our current practices and seeks compliance with Brazil's General Data Protection Law (LGPD, Law 13.709/2018) and, for users in the European Economic Area, with the General Data Protection Regulation (GDPR).

1. Who the controller is

The controller of the personal data processed here is Gilberto Ehlke, an individual, who operates the Service under the Astarojna Studios brand (company in formation), Araucária–PR, Brazil. For any privacy matter, contact us at contato@astarojna.com.

2. Who this policy applies to

It applies to the website (hosted on Vercel) and to the Windows desktop application. We serve users in several countries; this is the English version and we may provide versions in other languages. Where there are versions in other languages, the Portuguese version prevails.

3. Data protection officer

The point of contact for data protection matters (the officer, under art. 41 of the LGPD) is Gilberto Ehlke, at contato@astarojna.com.

4. What data we collect

• Account: email, password (stored only as a hash, never in plain text), display name, and the two-step verification setting (2FA/TOTP). If you choose social login via Discord, we receive the identifier and email that Discord provides to us.
• License and app usage: device identifier/label, application name and version, and session data (a rotating token and periodic activity checks) to ensure a single active session per license. IP address and browser/client identification may be logged in requests to our servers.
• Payments: the order/subscription status and the transaction identifiers returned by the processors. We do not store your card data — the card is processed directly by Mercado Pago or Lemon Squeezy.
• Support and email: the content of the messages you exchange with us and the transactional emails we send.

5. What we do NOT collect

This point is central to our project. The War Thunder telemetry that the application reads through the game's official interface on your own machine stays on your computer and is not sent to Astarojna. The application does notcapture the screen, does not read the game's memory, does not inject code into the game, and does not intercept its network traffic. Today the website also does not use third-party analytics, tracking, or advertising tools.

6. Purposes and legal bases

We process each piece of data for a specific purpose, with the corresponding legal basis:

The legitimate interest above is specific: preventing piracy and unauthorized use and ensuring a single active session per license, always weighing the impact on you.

7. Who we share with

We do not sell your data. We share the minimum necessary with operators that provide services to us, under contract and following our instructions:

• Supabase — authentication and database.
• Vercel — website hosting.
• Mercado Pago — payments in Brazil.
• Lemon Squeezy — international payments.
• Resend — email delivery.
• Discord — optional social login.
• Cloudflare — email-system infrastructure.
• GitHub— hosting of the installers and the app's update manifest.

We may also share data when required by law or by order of a competent authority. To reiterate: we do not share card data, because we do not store it.

8. International transfer

Some of the operators above process data outside Brazil (typically in the United States). These transfers occur for the performance of the contract at your request and/or are supported by contractual clauses and adequate safeguards under the LGPD — including the standard contractual clauses of ANPD Resolution CD/ANPD No. 19/2024 — and, where applicable, GDPR mechanisms (such as the Standard Contractual Clauses).

9. How long we keep data

• Account and usage data: while your account is active.
• Backups: up to 60 days after account closure.
• Session and security logs: about 90 days.
• Payment data: for the period required by applicable tax law.
• Support: as long as needed for the service and the defense of rights.

When you close your account, we delete or anonymize your data, except for what we must keep due to a legal obligation.

10. Security

We adopt technical and organizational measures to protect your data: hashed passwords, two-step verification (TOTP), encryption in transit (HTTPS/TLS), row-level access control in the database (RLS), and the principle of least privilege. No system is 100% impenetrable, but we work to reduce risks.

11. Cookies

Today the website uses only essential session cookies (to keep you authenticated). We do not use analytics, marketing, or third-party tracking cookies. If this changes in the future, we will ask for your consent where required.

12. Your rights

You may, at any time: confirm whether we process your data and access it; correct incomplete or outdated data; request the anonymization, blocking, or deletion of unnecessary data or data processed in non-compliance; request portability; withdraw consent; obtain information about whom we share with; and object to processing based on legitimate interest. To exercise any of these, write to contato@astarojna.com.

13. Children and adolescents

The Service is not intended for those under 18. If a minor uses it, they must do so with the authorization and supervision of a legal guardian. We do not intentionally collect data from children and adolescents; if a guardian identifies that this has occurred, they may contact us for deletion.

14. Complaint to the authority

If you believe your rights have not been met, you may file a complaint with the National Data Protection Authority (ANPD) in Brazil and, if you are in the European Economic Area, with the data protection authority of your country.

15. Changes to this policy

We may update this Policy. When there is a relevant change, we will notify you through our channels (website, app, or email) and update the effective date at the top of this page.

16. Contact us

Questions about privacy or your data: contato@astarojna.com.