Summary
GStars.dev is a free, ad-supported site. You can read everything on it without an account. We use Google Analytics to understand traffic and Google AdSense to show ads; both set cookies. If you choose to sign in, we store your email address and the repositories you watch, and you can delete that data yourself at any time. We do not sell personal data.
Data we collect
Analytics
We use Google Analytics 4 to measure page views, approximate location (country or city level, derived from IP address), device and browser type, and how visitors move between pages. Google Analytics sets cookies (_ga and _ga_*) to distinguish returning visitors. We do not send account identifiers or email addresses to Google Analytics.
Advertising
This site uses Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website and to other websites. Google’s use of advertising cookies, including the DoubleClick cookie, enables it and its partners to serve ads based on your visits to this site and other sites on the internet.
You can opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of some third-party vendors’ cookies at aboutads.info/choices. For details on how Google uses information from sites that use its services, see How Google uses data when you use our partners’ sites or apps.
Accounts
Signing in is optional and is used only for the watchlist. Authentication is handled by Supabase Auth. When you create an account we store your email address, an internal user id, and the list of repositories you choose to watch. Passwords are hashed by Supabase and are never visible to us. Supabase stores a session token in your browser’s local storage (not a cookie) to keep you signed in. We send only transactional email — sign-up confirmation and password reset — and no marketing email.
Server logs
The site is hosted on Vercel, which records standard request logs (IP address, user agent, requested URL, timestamp) for security and reliability. These logs are retained for a short period under Vercel’s policies and are not joined to account data.
Cookies and consent
Cookies and similar browser storage on this site fall into three categories:
- Strictly necessary — the Supabase session token stored in local storage, set only after you sign in.
- Analytics — Google Analytics 4 cookies described above.
- Advertising — Google AdSense and its partners’ cookies, used to serve and measure ads and, where permitted, to personalize them.
For visitors in the European Economic Area, the United Kingdom and Switzerland, advertising and analytics storage is denied by default (Google Consent Mode) and is only enabled after you give consent through the consent message provided by Google’s certified consent management platform. You can also block or delete cookies in your browser settings; the site continues to work without them, although you will need to sign in again if you clear site data.
How we use data
- To operate the site and keep signed-in users signed in.
- To show the watchlist you have built.
- To understand which pages and features are used, so we can improve them.
- To show ads that fund the site.
- To detect abuse and keep the service reliable.
We do not use your data for any purpose beyond these.
Sharing
We share data only with the service providers that run the site, acting as processors on our behalf: Google (Analytics and AdSense), Supabase (authentication and database) and Vercel (hosting and logs). Each processes data under its own privacy policy. We do not sell personal data and do not share it with anyone else, except where required by law.
Legal basis and processing location
- Consent — advertising and analytics cookies.
- Performance of a contract — accounts and watchlists.
- Legitimate interest — server logs and abuse prevention.
Our processors (Google, Supabase and Vercel) may process data in the United States under their standard contractual terms.
Retention
Account data (email, user id, watchlist) is kept until you delete your account. Supabase keeps authentication audit logs (email, IP address, timestamp) for a limited period; deleting your account removes your profile and watchlist but not those logs. Google Analytics event data is retained according to our Google Analytics data-retention setting, at most 14 months. Advertising cookies expire on the schedule set by Google and its partners. Vercel request logs are kept briefly and rotated automatically.
Your rights and account deletion
You can access, correct or delete your personal data at any time. Signed-in users can delete their account from the Account page; this permanently removes the profile and watchlist. If you cannot sign in, or want to exercise another right under GDPR, UK GDPR, CCPA or similar law, email [email protected] or use the contact details on the About page and we will respond within 30 days.
Children
GStars.dev is not directed at children under 13 and we do not knowingly collect personal data from them. If you believe a child has created an account, contact us and we will delete it.
Changes to this policy
We will update this page when our data practices change and revise the “Last updated” date above. Material changes will also be noted on the About page.
Contact
Questions about this policy or your data: email [email protected] or see the About page.