Privacy Policy

This Privacy Policy explains what information Starhold Software collects, why, how long we keep it, and the limited circumstances in which anyone else ever sees it. It is the single, umbrella policy for everything we operate.

1. Who we are

Starhold Software is the trade name of Copper Jerky LLC, an Arizona limited liability company ("Starhold", "we", "us"). You can reach us at hello@starhold.dev for any privacy question, data-access request, or deletion request.

2. What this policy covers

This policy applies to all Starhold products and services, including: the JoJo bot and other Custom Discord Bots we build and operate; the QuadstroNot storefront bot; Shushgame / Shushbot; the starhold.dev storefront; the starhold.fyi documentation site; the status.starhold.fyi status page and the gatus.starhold.fyi monitoring dashboard; the starhold.app launcher; Umbermark (umbermark.starhold.app), which is pre-launch and not yet for sale; and Managed Ops and hourly hands-on server work. Some products connect to Discord and Stripe; where they do, those companies' own privacy policies also apply to the parts they handle (see section 4).

3. Our core principle: collect the minimum

We collect only what is required to make a feature function, and we keep it only as long as that function requires. We do not sell your data. We do not run advertising or third-party tracking. We do not build advertising or behavioral profiles. We do not analyze, mine, or train models on your content. Our products run on servers we administer ourselves (a dedicated server and a virtual private server), not on third-party hosting or analytics platforms.

4. The only outside services we rely on

Two third parties are unavoidable because our products are built on them. We share with them only what their function strictly requires:

• Discord — our bots and games run on the Discord platform. Your use of Discord itself is governed by Discord's Privacy Policy and Terms of Service. Messages, accounts, and servers live on Discord's infrastructure under Discord's control.
• Stripe — all payments are processed by Stripe. Card details are entered on Stripe's systems and are governed by Stripe's Privacy Policy. We never see, receive, or store full card numbers.

Umbermark only. Umbermark is pre-launch and has its own product privacy notice at umbermark.starhold.app/privacy. Because it handles sign-in, billing and abuse protection on its own, it is built to use these additional services, and only within Umbermark, each one only once that feature is switched on: Polar.sh (billing and payment, as merchant of record), Cloudflare Turnstile (bot and abuse protection on scan submissions), Postmark (login and notification email), and Backblaze B2 (off-site database backups). No other Starhold site loads or uses any of them.

We use no other advertising, analytics, or data-broker vendors.

5. What each product collects, and why

JoJo bot / Custom Discord Bots (audit & moderation). To do its job — telling a server's moderators what was deleted or edited — the bot uses Discord's Message Content access and caches messages from the channels a server chooses to watch. In full transparency, the cache can include: message text, the author's Discord ID and display name, the channel ID and name, timestamps, before/after edit history, image attachments, and a content hash used to detect duplicates. It is used only to generate deletion and edit reports, power the server-admin search and activity digests, and run opt-in features like the starboard and reaction-roles. This cache is never scanned, analyzed, sold, shared, or used to train anything. Retention is, by default, 30 days, after which a nightly automated purge (04:00 UTC) deletes both the database rows and the stored image files. A server's administrators can shorten or lengthen that window per channel (1–365 days), purge on demand, exclude channels or users from caching entirely, and enable PII redaction that masks card, email, and phone patterns before anything is written.

QuadstroNot (storefront bot). Processes the Discord interactions you initiate, and relays the information you choose to submit through contact, quote, and order forms to our private Discord channels so we can respond. It also keeps the minimal operational records needed to run the server (for example, which self-service role panels exist and an audit log of administrator actions). Submitted form content lives in Discord and is governed by Discord's policy.

Shushgame / Shushbot. The game runs inside Discord, so the platform layer is governed by Discord's policy. Purchases are handled by Stripe, so payment data is governed by Stripe's policy. From a purchase, we retain only the transaction record (that a purchase occurred) and the entitlement fact (that a purchased role was applied to your account in the server). We do not store payment-card data.

starhold.dev storefront. Checkout uses Stripe; card data goes only to Stripe and never to us. Contact, quote, and intake forms relay what you submit to our private Discord channels so we can reply. The site uses no advertising, analytics, or cross-site tracking. starhold.dev sets no cookies of its own: rate-limiting happens on our server and sets no cookie. Your cart is stored in your own browser (localStorage) only and is never sent to us until you submit an order. Stripe's checkout pages are a separate site, governed by Stripe's Privacy Policy.

starhold.fyi, status.starhold.fyi and starhold.app. These sites have no accounts, no forms, no cookies, no analytics and no advertising, and every file they load comes from the site you are on. The documentation search runs entirely in your browser. The status page reads our own monitoring data from the same host; that data is about our services, not about you. The starhold.app launcher fetches the same status data through its own server, which removes your IP address and browser details before passing the request on, so our monitoring server never learns who you are. These three sites keep no access logs. If a request fails, a server error log can record the requesting IP address; we use it only to fix the problem, never to track or profile you.

Managed Ops and hourly server work. To maintain a server you put in scope, we need root access to it, which you grant and can revoke at any time. We use that access only to do the work you engaged us for. In doing it we touch: the server's access and system logs, as needed to diagnose and report; the Umbermark scan reports of that server, which feed your monthly report; and the status of your backup jobs and restore points. We never open, read, query, or export database contents. Starhold does not access databases.

gatus.starhold.fyi (monitoring). Our monitoring tool checks that our own sites and services are reachable. It collects nothing about visitors.

6. How long we keep things

• JoJo bot audit cache — 30 days by default (server-admin adjustable 1–365 days), then automatically deleted.
• Order / purchase records — kept while your subscription or entitlement is active and as long afterward as the law requires (e.g., tax and accounting records).
• Contact / quote / intake submissions — kept in our private Discord channels for as long as needed to handle your request and our ongoing relationship.
• Server error logs — kept for troubleshooting and security, never used to track or profile anyone.
• Everything else — only as long as the relevant feature needs it.

7. When anyone else sees your data

We share data only: (a) with Discord and Stripe (and, for Umbermark only, the services listed in section 4), strictly to deliver the service, as described above; or (b) when we are legally required to (a valid legal process), or must do so to protect our rights, users, or the public. We never sell or rent data, and we do not share it for advertising.

8. Your choices and rights

You may request access to, correction of, or deletion of the personal data we hold about you by emailing hello@starhold.dev. Two notes on how the bots work: for data the JoJo bot caches inside a community, the server's administrators are the controllers of that content — they can purge it, shorten retention, or exclude you at any time, and we will assist on request. Some records (such as payment and tax records held via Stripe) may need to be retained to meet legal obligations even after a deletion request.

9. Children

You must be at least 13 years old to use our services (matching Discord's minimum age). To make a purchase you must be 18 or older, or otherwise old enough to make a valid purchase under the laws where you live — some places permit minors to make certain purchases (for example, with their own debit card), and where your local law allows it, that is acceptable. We do not knowingly collect data from children under 13; if you believe a child under 13 has provided us data, contact us and we will delete it.

10. Security

Our services run on servers we administer ourselves, behind access controls, with data encrypted in transit (HTTPS). Payments are isolated to Stripe, a PCI-DSS-certified processor. No system is perfectly secure, but we apply reasonable, layered safeguards and practice data minimization so there is little to expose.

11. Where we operate

We are based in Arizona, United States, and process data there. By using our services you understand your information is handled in the United States.

12. Changes to this policy

We may update this policy as our products evolve. We will revise the effective date above and, for material changes, give reasonable notice. Continued use after a change means you accept the updated policy.

13. Contact

Copper Jerky LLC, doing business as Starhold Software — hello@starhold.dev.

Last updated 10 October 2026.