Exactly what we collect.
And what we don't.
This is our open audit — line by line, what StardomFans.com stores about you, and every mainstream tracker or data broker we've deliberately kept off the platform.
Last audited: February 2026 · Self-audited monthly · Updated whenever anything changes.
0 Trackers
No PostHog, GA, Meta Pixel, TikTok/Instagram embed scripts, or session recorders.
No 3rd-Party Sign-In
Your account never touches Google, Meta, or any OAuth broker. Email + password only.
No Outbound Email
All correspondence flows through the in-app Admin Inbox. No marketing email, no newsletters, no receipts by email.
What we do collect
Only what's needed to run your account and process payments.
Email address
Used exclusively for sign-in and account-recovery lookups. Never emailed marketing content.
Password (as a bcrypt hash)
Salted + hashed with bcrypt. Not readable by anyone — including our engineers.
Display name & profile picture
If you set one. Shown on posts and your profile.
Content you upload
Posts, music, videos, product listings, event details — you own them, and you can delete them at any time.
Payment tokens (not card numbers)
Actual card data is handled 100% by our PCI-DSS Level 1 payment processor. We store only opaque IDs.
Session token (first-party cookie)
A random opaque string that logs you in. Rotates automatically. Not shared with anyone.
Server logs (IP + user-agent, security only)
Kept short-term for abuse prevention (brute-force lockouts, DDoS). Never joined to a marketing profile.
What we deliberately DO NOT collect
These are on-by-default on most modern web apps — and off here.
Behavioural analytics
No PostHog, Google Analytics, Amplitude, Mixpanel, Segment, Heap. No session recordings. No heatmaps.
Ad-tech pixels
No Meta / Facebook Pixel, no TikTok Pixel, no Snap Pixel, no LinkedIn Insight Tag, no Twitter/X pixel.
3rd-party embed trackers
TikTok & Instagram videos render as static preview cards. Twitter/X renders via react-tweet (no widgets.js). YouTube uses youtube-nocookie.com.
3rd-party sign-in / social login
No Google, Meta, Apple, or Emergent OAuth. Your identity never leaves our own auth stack.
Outbound marketing email
No newsletters, no promo blasts, no lifecycle drips, no receipts by email. Everything happens inside your Admin Inbox.
Data-broker enrichment
We never buy or enrich your record from Clearbit, ZoomInfo, Apollo, etc.
Phone numbers, addresses, ID docs
Not required to create an account, browse, or transact (our processor collects billing details directly at checkout).
Cross-site cookies / fingerprints
No canvas / audio / font fingerprinting, no third-party cookies, no supercookies.
Location / precise GPS
Never requested. Never stored.
Where your data lives
Encrypted at rest and in transit — with independent, well-known providers.
- Application & database — hosted on our managed cloud infrastructure with daily backups. Data in transit is TLS 1.2+ end-to-end.
- Payment data — held and encrypted by our PCI-DSS Level 1 payment processor. We only ever see opaque customer / payment intent IDs.
- Media uploads — stored in a cloud object store, served via HTTPS.
- No overseas processors — no data is sold or forwarded to advertising or data-broker networks in any jurisdiction.
Your data, your call
You are in charge — always.
- Export — request a full copy of your account data from your Dashboard → Security page.
- Delete — one-click account deletion. All non-legally-retained data is purged.
- Correct — edit anything on your profile at any time.
- Reach us — message the team via the in-app Admin Inbox. We do not maintain a public support email address.
Verify it yourself.
Open your browser's DevTools → Network tab → browse StardomFans.com. You'll see requests to stardomfans.com and our secure payment processor. Nothing else. No googletagmanager, no posthog, no facebook.net.
Last audited: February 2026 · Living document — updated whenever we ship a change that affects data collection.