Privacy Policy.

1. Who is responsible

Astra is responsible for information processed through our services and operates from the United States. Independent services such as Discord and ScriptBlox are responsible for information they process under their own policies.

2. Information we process

Website requests may include your IP address, browser and device information, requested URLs, timestamps, and technical error information. Hosting providers process this information to deliver and secure the site.

If account and payment services are enabled, we process the account information you provide, authentication identifiers, order references, payment status, license entitlements, device bindings, and support messages needed for those services. Payment providers process payment credentials directly; do not send card details, passwords, or license secrets in support messages.

The interactive website workspace keeps its scripts, tabs, and account examples in browser memory. Typing into this workspace does not execute code in a game. Account and payment forms do not transmit credentials or collect payment until their integrations are enabled.

Language, operating-system, background, consent, and navigation choices may be stored in your browser as described in our Cookie Policy. Optional persistent preferences are used only when you allow them.

3. Why we process information

We use information to deliver requested pages and features, authenticate accounts when enabled, fulfill confirmed orders, administer licenses, answer support requests, investigate errors, protect the service from abuse, and comply with legal obligations.

We do not sell personal information, use it for cross-context behavioral advertising, or intentionally inspect unrelated files or browser history. We do not use website editor content to train an AI model. If an optional AI or cloud feature sends content to a provider, its interface must identify that processing before you use it.

4. Legal grounds

Where a law requires a legal basis, we rely on performance of a contract for services you request; legitimate interests for proportionate security, maintenance, and support; legal obligations for required records; and consent for optional storage or other processing that requires it. You may withdraw consent without affecting processing already carried out lawfully.

5. Cookies and external content

Our Cookie Policy lists the cookies and browser storage used by the website. Essential storage supports consent and features you request. Optional preference storage remembers language, platform, and background. Astra currently uses no analytics or advertising cookies.

ScriptBlox supplies community script metadata through our server. Script thumbnails are requested from their image hosts by your browser; those hosts receive normal request information, such as your IP address and browser headers. External links do not transmit account credentials to those sites. Their policies govern visits and services you choose to use.

6. Sharing and service providers

We share information only as needed with providers that host, secure, or support Astra; an authentication provider when you choose its sign-in method; a payment provider when you purchase access; and other providers whose features you explicitly use. We limit information to what is needed for the task.

We may disclose information when legally required, to protect people or service security, or as part of a business transfer subject to appropriate confidentiality and notice obligations. No provider is enabled merely because it is mentioned in this policy.

7. Retention

We retain personal information only for the purposes described here and applicable legal requirements. Optional preferences remain until consent expires, you clear them, or you withdraw permission. Consent is remembered for 180 days. Session navigation data expires when the browser session ends.

When account services are enabled, account data remains while the account is active or needed to resolve a request. Order and transaction records may be retained for up to seven years for tax, accounting, and dispute requirements. Ordinary technical logs should be deleted or de-identified within 90 days unless an incident, legal requirement, or documented investigation requires longer retention. Backups expire through their normal retention cycle.

8. Security

We use safeguards proportionate to the information and service, including encrypted transport on the public website and access controls for service records. No system is completely secure. Never share passwords, browser session cookies, or one-time codes. Specific authentication and payment safeguards depend on the integrations enabled at the time.

9. Your choices and rights

Depending on your location, you may have rights to access, correct, delete, or obtain a copy of your information, restrict or object to processing, withdraw consent, and appeal a request decision. Contact the privacy address below. We may ask for proportionate information to verify your identity and will respond within applicable deadlines.

We do not discriminate against you for exercising privacy rights. You may also complain to the relevant privacy regulator. Browser privacy controls, including Global Privacy Control, do not change our no-sale and no-targeted-advertising practices. You can change optional storage through Cookie settings at any time.

10. Children and international processing

Astra is not intended for children under 13. We do not knowingly collect their personal information. If you believe a child under 13 has provided information, contact us so we can investigate and delete it as appropriate.

Information may be processed in the United States and other countries where our providers operate. Where required, international transfers must use legally recognized safeguards.

11. Updates and contact

We will update this policy when our processing changes. Material changes will be communicated on the website or through an available account contact method where required. Use the privacy contact below for questions and requests.