LEGAL
Privacy Policy.
Last updated: 19 October 2026
This policy explains what personal data we collect on getstardo.com, why, who we share it with, how long we keep it, and the rights you have. It covers this website and the Stardo waitlist. The Stardo app will have its own privacy policy when it launches.
1. Who we are
Stardo is run by Nexora, a company registered in Kuwait (“Nexora”, “we”, “us”). We are the controller of the personal data described here.
Nexora · Sharq, Ahmed Al Jaber Street, Al Jazar Tower, Mezzanine 1, Office 11, Kuwait
Email: support@getstardo.com
2. What we collect, and why
Joining the waitlist
When you join the waitlist we ask for:
- Your first name, if you choose to give it, so the emails we send can greet you by name.
- Your email address, so we can confirm it and send you Stardo launch news and early-access invites.
- Your consent: the box you tick to agree to receive these emails.
Legal basis: your consent (GDPR Article 6(1)(a)). You can withdraw it at any time (see section 7). Your first name is optional. You do not have to give us your email, and no law or contract requires it, but without it we cannot add you to the waitlist.
Double opt-in. After you submit the form we send one email asking you to confirm your address. Until you click that link, we do not add you to the waitlist. Your name and email travel inside the signed link, which expires after about a week. Our providers keep short-lived technical records of it: Resend keeps the sent email for up to 30 days, and Cloudflare’s request logs, which may include the link, are kept for up to 7 days. If you never confirm, you are never added.
After you confirm, we save your email, and your first name if you gave it, as a contact with our email provider, Resend (section 4). We use them only to send you news about the Stardo app’s launch and invitations to early access, as the consent box says. We do not send unrelated newsletters or other marketing, and we never sell or rent your data.
Visiting the website
- Technical data. Like every website, ours receives your IP address, browser type, the page requested and the time, because your device needs them to load the site. Our host, Cloudflare, processes this to deliver the site, protect it against abuse and keep short-lived error logs. Legal basis: our legitimate interest in running a secure, working website (GDPR Article 6(1)(f)).
- Visitor counting. We use Cloudflare Web Analytics to count visits and see which pages are read. It sets no cookies, does not track you across other websites, and does not build a profile of you; we see only totals (for example page views per day and country). Legal basis: legitimate interest in understanding how the site is used.
- Your theme choice. If you pick light or dark mode, your browser remembers that choice on your own device (in its local storage). It is never sent to us.
We use no cookies, no advertising trackers and no social-media pixels. Our fonts are served from our own domain, so loading the site sends nothing to Google or other font services.
3. Age
The waitlist is for people aged 16 or older. If you are under 16, please do not join. If we learn that someone under 16 has joined, we will delete their details.
4. Who we share data with
We share personal data only with the service providers that run the site for us, under contracts that require them to protect it and use it only on our instructions:
Cloudflare, Inc.
What they do: Hosts the website, processes sign-up requests, protects against abuse, counts visits (Web Analytics)
Data: IP address and technical request data; your name and email while a sign-up is processed
Where: Global network, company in the USA
Resend (Plus Five Five, Inc.)
What they do: Sends the confirmation and launch emails and stores waitlist contacts
Data: First name, email address, and records of the emails sent to you
Where: USA
We may also disclose data if the law requires it, or to protect our rights or the safety of others.
5. International transfers
Our providers are based in the United States and may process data outside Kuwait and outside the European Economic Area. Cloudflare and Resend are certified under the EU–US Data Privacy Framework (and its UK Extension), and their data processing agreements also include the European Commission’s Standard Contractual Clauses. Email us for a copy of these safeguards.
6. How long we keep it
- Unconfirmed sign-ups: not added to the waitlist. The confirmation email stays in Resend’s records for up to 30 days.
- Waitlist contacts: until you unsubscribe, or 12 months after we send the launch email, whichever comes first. After that we delete them.
- If you unsubscribe: we delete your first name and keep only your email address, marked as unsubscribed, so we never email you again.
- Technical logs at Cloudflare: kept briefly (days, not months) for security and troubleshooting.
- Visitor statistics: totals only, with no personal identifiers.
7. Your rights
Depending on where you live, you have the right to:
- access the personal data we hold about you;
- correct it if it is wrong;
- delete it;
- restrict or object to how we use it;
- receive it in a portable format;
- withdraw your consent at any time, without affecting what we did before you withdrew it.
The easiest way to stop all emails is the unsubscribe link at the bottom of every email we send. For anything else, email support@getstardo.com. We will reply within one month (up to two months more for complex requests, as GDPR Article 12(3) allows), and we may ask you to confirm your identity first.
If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to a data protection authority: in Kuwait, the competent authorities; in the EU or UK, the authority in the country where you live.
8. Security
Sign-up requests travel over encrypted connections (HTTPS). Confirmation and unsubscribe links are signed so they cannot be forged. Access to the waitlist is limited to the people who run Stardo. No system is perfectly secure, but we take reasonable measures to protect your data, and we will notify you and the authorities of a breach where the law requires it.
9. Automated decisions
We make no decisions about you based solely on automated processing, and we do not profile you.
10. Changes to this policy
If we change this policy, we will update the date at the top. If a change would let us use your data in a new way, we will ask for your consent first; we will not simply assume it.
11. Contact
Questions about this policy or your data: support@getstardo.com, or write to Nexora at the address in section 1.