Lodestar — Privacy Policy

Last updated: July 21, 2026

1. What This Document Covers

This Privacy Policy covers your shared Lodestar account — the single login used across all seven Lodestar products (Sadr, Rigel, Mirach, Deneb, Capella, Altair, and Pollux) — and everything common to all seven. Each product also has a short addendum, appended below when you view that product's own Privacy Policy, covering what that specific product collects beyond your account (e.g. an uploaded manuscript or worksheet entries) and how long it's retained.

2. What We Collect

Account information you provide:

Your email address (required to create an account).
Your password — this is handled entirely by Supabase Auth and stored in hashed form; we never see or store your actual password.
No name is collected at the account level — only your email address.

Payment information:

Collected and processed directly by Stripe, our payment processor, for each Lodestar product you purchase. We never see, receive, or store your full card number or other sensitive payment details — Stripe handles that entirely on its own secure systems.
We do store a Stripe customer reference ID and your purchase tier/access status per product, so the app knows what you've bought.

Your content:

Everything you create, upload, or type inside a Lodestar product — project details, characters, chapters, manuscripts, worksheets, source records, or any other content — is stored in our database (hosted by Supabase) or, for uploaded files, our file storage, so it's available to you across sessions. What each product specifically collects, and how long it's kept, is covered in that product's own addendum.

Technical information, collected automatically:

Standard technical data such as IP address, browser type, and access timestamps, collected by our hosting infrastructure (Vercel and Supabase) for security and operational purposes — this is standard for any web application, not something we actively track beyond what's needed to keep the service running securely.

3. How We Use This Information

To create and maintain your Lodestar account.
To process your purchase and verify your access tier for any Lodestar product you buy (via Stripe).
To store and display your content back to you, and only you.
To provide support if you contact us.
To send essential service communications (e.g., purchase confirmation).
Creating a Lodestar account does not automatically subscribe your email to the Christopher Ray Writes newsletter. At signup, an unchecked checkbox lets you opt in — check it if you'd like to receive the newsletter. If you do subscribe, you can unsubscribe at any time using the link in any newsletter email — doing so only removes you from the newsletter and does not affect your account or access to any Lodestar product.

4. Third-Party Service Providers

We use the following providers to operate Lodestar and the shared account system, each of whom processes data on our behalf under their own privacy and security practices:

Supabase — database hosting, authentication, and file storage, shared across every Lodestar product.
Stripe — payment processing.
Vercel — application hosting.
beehiiv — newsletter delivery (your email address is shared with beehiiv solely if you opt in to the Christopher Ray Writes newsletter).

None of these providers use your data for their own purposes — they act as processors for us, not independent owners of your data. No third-party AI provider is involved anywhere in Lodestar — several products (Rigel, Mirach, Deneb) are entirely rule-based, non-AI systems, and none of your content is ever used to train any AI model.

5. Data Retention

Your account information is retained for as long as your account is active. How long product-specific content (an uploaded manuscript, a generated report, worksheet entries) is retained varies by product — see that product's addendum below for specifics. If you request account deletion, we will delete your account and associated content within 30 days of your request, across every Lodestar product on that account.

6. Your Rights

You can access and export your own content at any time via the app itself — each product's own download/export feature doubles as a self-service way to get a complete copy of your content whenever you want it.
You can request account access, correction, or deletion by contacting us at christopherraywrites26@gmail.com.
California residents have rights under the CCPA — access, deletion, and opting out of the sale of personal information. We do not sell your personal information to anyone, for any purpose.

Lodestar is currently offered to users in the United States and U.S. territories only.

7. Security

We use reasonable technical measures (including Supabase's Row Level Security, which ensures your content is only accessible to your own account) to protect your data. No system is 100% secure, and we can't guarantee absolute security.

8. Children's Privacy

Lodestar is not directed at children, and we don't knowingly collect information from anyone under 13.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via a notice shown in the app before they take effect.

10. Contact

Questions about this Privacy Policy: christopherraywrites26@gmail.com.

Pollux Addendum

The following is specific to Pollux, in addition to the Lodestar Privacy Policy above.

What We Collect

Your worksheet content — everything you type into Pollux's worksheets: story angles, source entries (including any contact information and attribution status you choose to record), fact-check entries, pitch records, and any drafted section text.

Our Access to Source Data

This includes source names, contact information, and attribution status you log in the Source Tracker. We do not read, review, or browse the substance of this data out of curiosity or for any purpose of our own. This policy is not a legal privilege and does not create source-confidentiality protections beyond what applicable law separately provides — see the Pollux Terms of Service addendum.

Data Retention

Your worksheet content and account information are retained for as long as your account is active, including stories you've marked finished — a finished story is not deleted, only excluded from your active-story count. There is no upload/analysis retention window to state, since Pollux never involves uploading a document.