Privacy policy
Effective 31 October 2026 · Current web version
This policy describes Starescare, created by Ben Albiston, and the data handling implemented in this web version. It must be reviewed again before a native app or new data-handling features are released.
What stays in your browser
- Your captured selfie or selected photo, used for the face transformation.
- Your settings, including face style, allowance, audio preferences and optional tapped pulse BPM.
- Session timing, a temporary away-time marker and daily visible-app usage totals.
Your selfies and uploaded photos stay only in local storage in your browser on your device. Starescare does not upload them or store them on app servers or in cloud storage.
Your settings and usage totals are also saved in this browser’s local storage, not an app account. They remain until replaced or cleared by you or your browser. There is no app-provided cloud backup or cross-device sync.
The face transformation and six-tap rhythm calculation run on your device. This version’s app code does not upload your saved photo, pulse result or daily log to an app database. Tap timestamps are used in memory to estimate BPM; only the saved rhythm is retained in settings. No face identification or biometric authentication is performed.
Optional automatic photo alignment detects facial feature positions on your device, without identifying you. It downloads detection tools when requested, but does not send your photo to those services. Feature positions are used temporarily and are not saved. Automatic fitting requires those tools to load; manual alignment remains available if they cannot.
Optional parent PIN
Parent mode stores salted verification hashes of your six-digit PIN and memorable recovery word on this device, not the readable PIN or word. Neither is uploaded. Failed attempts cause a temporary local retry delay. There are no parent or child accounts, emails or shared reports.
The memorable word can reset the PIN. If both are forgotten, there is no recovery service; clearing app data removes the lock along with local settings, photos and history. This PIN is a local deterrent, not tamper-proof parental control: it cannot prevent uninstalling, clearing data, disabling permissions or changing device volume.
Parent-mode alarms work while Starescare is open. This web version cannot sound a reliable alarm while another app is being used or block device use.
Camera and photo permission
Camera access is requested when you choose to take a selfie. The app requests video, not microphone audio, and saves a still image locally. The capture action stops the camera stream.
You can decline camera access and choose a photo instead. A file selection reads the photo you choose, not your entire photo library. Revoke camera permission in your browser or device settings whenever you wish.
Services and technical information
Lovable Cloud is connected to prepare an optional online avatar feature. That feature is currently disabled: no generation selfie is collected or sent, and no photo storage or account feature has been added. Its processing and deletion disclosures must be verified before activation. Existing photos, local alignment and usage logs continue to stay on-device.
The app contacts its hosting and asset-delivery services to load pages, face artwork and pre-generated sounds. Fonts load from Google Fonts. Such requests can expose technical details such as your IP address, browser information and request time to those providers.
All music and sound effects were generated using ElevenLabs during development and stored as audio files. The app plays those saved files; it never generates or streams live audio from ElevenLabs. Your photo and tapped pulse are not sent to ElevenLabs.
The app includes optional platform error-reporting hooks. Where enabled, these may report an error message, stack and page location. Hosting services may also process request and error logs. Provider retention, access and processing locations depend on their service policies; this local-data policy is not a promise that all technical requests are unlogged.
No advertising integration or app-specific tracking SDK is added in this version. Its feature storage uses local storage rather than advertising cookies. Hosting behavior and any future native SDKs must be included in the final store privacy disclosures.
Remove your local data
Open your browser’s settings, find this website under site data or storage, and clear its site data. This removes the saved face, preferences, pulse rhythm and usage history in that browser. Do this on each browser or device where you used the app.
“Reset decay” resets session progress; it does not delete your photo, saved pulse or daily history. Clearing local data does not erase technical logs held independently by hosting providers.
There are no accounts in this version, so there is no account-deletion process. Contact us about privacy questions or requests; applicable data-protection rights may include access, correction and deletion of personal information we actually hold.
Health, children and external links
Starescare is for entertainment and awareness, not healthcare. Tapped BPM is not a medical reading. General health notes do not create a personal health assessment or medical record.
No child accounts or child-specific data collection are implemented. Skulls and dissolving faces may be unsuitable for some younger users. A store release’s age rating and target-audience settings must reflect its actual content.
External links open other websites governed by their own privacy policies. If you email support, your email address and the information you send are used to respond; avoid sending photos or sensitive health details.
Privacy contact and updates
For privacy questions, contact: bubblearrowgames@outlook.com.
Changes will be posted here with an updated effective date. For practical help, visit Support.