Version v1.0 · Effective 2026-09-03
Softstars AS ("we") runs the websites softkiln.com and softstars.no, and the Softkiln platform behind them. This policy explains what we do with personal data about visitors to our websites and holders of a Softkiln account.
It does not cover data inside the applications our customers build and run on the platform. For those, our customer is the controller and we act on their instructions under a separate data processing agreement.
| Controller | Softstars AS |
| Organisation number | 930 075 078 |
| Address | Blusuvoll alle 3, Trondheim, Norway |
| Privacy contact | [email protected] |
We do not use advertising cookies, and we do not embed third-party analytics, advertising or tracking scripts on our websites. No third party receives anything about your visit from us.
We do store one item in your browser's local storage, and this is the whole of it:
| Name | sk.attribution.v1 |
| What it holds | The campaign parameters in the link you arrived on (utm_* and, where present, an advertising click identifier such as gclid), the address of the external site that referred you, and which page of ours you landed on first. |
| Why | So that, if you later create an account, we can tell which channel it came from. It is how we know whether our advertising works. |
| How long | 30 days, after which your browser's copy is ignored and removed. |
| Who sees it | Only us. It is sent once, to our own servers, on your first signed-in request — and deleted from your browser immediately afterwards. |
It contains no identifier for you, is never used to build a profile, is never read across other websites, and never leaves our systems. If you never create an account, it expires in your browser and we never receive it at all.
If you create an account, the campaign information is recorded against that account once, at the moment it is created, and is never updated afterwards.
Your browser can block or clear this storage at any time. Nothing on our websites stops working if you do; only our own view of which channel found you is lost.
When you visit our websites. Our servers record ordinary request information — the address requested, the time, and technical details your browser sends — in operational logs. We use these to keep the service running and secure. We do not build visitor profiles from them.
When you create an account. Sign-in is handled by an identity service we operate. We hold your email address, and your name if your sign-in provider supplies one. We need this to give you an account, to identify you when you return, and to contact you about the service.
When you use the platform. We hold the records needed to operate what you create: your organisations and team members, your applications and their configuration, deployment and job history, and measurements of the resources your applications consume, which is what your usage-based charges are calculated from.
When you pay. Card details are handled by our payment provider and never reach our servers. We keep the customer and subscription identifiers, your billing country, and your invoice history.
When we email you. Service messages — invitations, billing notices, trial reminders — are sent through an email delivery provider.
Our own systems and our customers' applications run in the European Union, and the databases and backups behind them are stored in the European Union. Some of the providers we rely on are established outside the EEA; where that is so, the transfer rests on an adequacy decision or on the Standard Contractual Clauses.
We publish the categories of provider we use, what each processes, and where, in our trust centre. Ask us at [email protected] for the current named list.
Account and platform data is kept for as long as you have an account, and is removed when your account and its organisations are deleted. Invoices and accounting records are kept for as long as accounting law requires. Operational logs are kept for a limited period and then discarded.
You may ask us for a copy of your personal data, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Write to [email protected] and we will respond within one month.
You may also complain to Datatilsynet (the Norwegian Data Protection Authority) if you believe we have handled your personal data wrongly.
We will update this page when what we do changes, and the version and effective date above will change with it. If a change materially affects account holders, we will tell them by email.
Softstars AS Blusuvoll alle 3, Trondheim, Norway [email protected]