This instance of Starring is run by the operator of this instance (the “controller” under the GDPR). Questions or requests: the operator. Starring is open-source software; this notice describes how this site uses it.
The short version
- Your profile is what you choose to publish. Drafts are private until you press Publish.
- Imports from GitHub, LinkedIn exports, JSON Resume and
starring-cli scanare converted in your browser. For LinkedIn, only profile, positions, education, skills, projects and certifications are read — messages and connections are never opened. - No advertising, no selling data, no third-party trackers.
- You can delete your account at any time from Account; it removes your profile and everything stored about you.
What we store
- Account: name, email address, a hashed password (if you use one), whether your email is confirmed, and sign-in sessions (with IP address and browser, to keep you signed in and protect the account).
- Sign-in with GitHub or GitLab: your account id there and the access token it issues, used only to import your public profile and contribution counts when you ask.
- Your profile: the content you enter or import — name, role, clients, projects, timeline, education, skills, links and commit counts — and whether it is published.
- Reports: if you report a profile, the reason and details you give.
Why (legal basis)
- To provide the service you signed up for — your account and your public profile (contract, Art. 6(1)(b) GDPR).
- To keep the service secure and free of abuse — rate limiting, session records, handling reports (legitimate interest, Art. 6(1)(f)).
- To send emails you need — password reset and address confirmation. No newsletters unless you opt in separately.
How long
Account and profile data are kept until you delete your account. Expired sessions and used reset links are removed automatically. Reports are kept as long as needed to handle them.
Public profiles
A published profile is public: anyone can see it, search engines may index it, and others may share or embed it. Only publish what you are allowed to share — Starring shows client names as text and lets you mark work as under NDA, but you are responsible for respecting your contracts.
Statistics chosen by profile owners
A profile owner can connect their own Plausible account to their profile page. When you open such a page, it sends one anonymous page view (the page address and referrer) to the analytics server the owner chose. No script from that server runs on this site and no cookies are set. The owner, not us, is responsible for that analytics account.
Who processes data for us
Hosting of the application and its database, and the email provider used to send account emails. They process data only on our behalf. Profile pages load fonts from Google Fonts, which receives your IP address when the page loads.
Your rights
You can access, correct, export and delete your data — export your profile from the editor (YAML), and delete everything from Account. You can also object to processing, ask us to restrict it, and complain to your data-protection authority. Contact the operator for anything else.