Legal Updated
Demo privacy notice
What the public Starterdough demo stores, why it stores it, and how to contact its operator.
Subash Chandra operates the public demo at demo.starterdough.dev and app.demo.starterdough.dev. For privacy questions or requests, email hello@starterdough.dev.
This notice covers the demo and messages you send about it. Buying the Starterdough source kit is a separate transaction on starterdough.dev; Polar provides that checkout.
Use sample data
The demo is a temporary evaluation environment. Use a test address you control, a unique password, and fictional workspace content. Do not enter customer records, confidential work, payment details, or sensitive personal information. Email verification is disabled, so an account’s displayed email is not proof of someone’s identity.
Information we process
- Accounts and security: the name and email you enter, a password hash, session records, IP addresses and user-agent information. If you enable two-factor authentication or a passkey, we also store the information needed to verify it, including the two-factor secret or passkey public key and backup-code records.
- Workspace activity: organizations, workspaces, memberships, invitations, settings and other text you enter, together with audit records of supported actions. People you add to a workspace may see its content according to their role.
- Operational records: request metadata, errors and security logs. Requests for account email can put the destination address and message subject in server logs even though no email is sent.
- “Enter the demo”: it creates a private sample organization for you, with fictional members,
documents and finished jobs, and signs you in as its owner. The members’ addresses use a reserved
.exampledomain that reaches no inbox. Using it records the same session information (IP address, user agent) as a sign-in, and your network address is held in the server’s memory to limit how many sample organizations one network can create per hour. What you change in that organization is workspace activity, as above. - Messages to us: your address and the content you send to the support mailbox. Do not send passwords, recovery codes or payment-card details.
Uploads, document search, AI processing and checkout are disabled in this demo. It does not send verification, password-reset, invitation or account-deletion emails. Those email-dependent flows cannot be completed here; contact us for help or a privacy request.
Purposes and storage on your device
We use this information to provide the evaluation environment, enforce permissions, prevent abuse, diagnose problems and respond to requests. Where data-protection law requires a lawful basis, our interests are operating and securing the demo and answering requests; we also process information when needed to meet a legal obligation. We do not sell demo personal information or use it for advertising profiles.
The app uses cookies for sign-in and language preferences, and browser storage for preferences such as theme. Its service worker caches application files and an offline fallback. This does not make your workspace data available offline. You can clear these through your browser, which may sign you out or reset preferences. The demo does not enable the kit’s optional PostHog analytics or Sentry error-reporting integrations.
Service providers and access
Netcup hosts the demo server and database. Cloudflare provides domain DNS and routes mail sent to our support address; the mailbox provider also processes correspondence you send us. These providers process the information needed for those services. Provider processing may take place outside your country, under their applicable data-protection arrangements. We may also disclose information when required by law or necessary to investigate abuse and protect the service or others.
Retention and deletion
The demo database is scheduled to reset daily at 04:00 UTC, clearing demo accounts and workspace content, including every “Enter the demo” sample organization and its stored sample files, and signing users out. Resets can be delayed by an outage or maintenance, and data can be cleared earlier. Do not rely on the demo to keep your work.
The reset is not an immediate purge of every copy. Server logs and deployment recovery snapshots can remain afterward. They are used for security, troubleshooting and recovery, rather than normal demo access. Retention depends on an active incident, the recovery copies still needed for a deployment, and any applicable legal obligation. Support correspondence is retained to resolve the request and any related dispute or obligation. Contact us if you need deletion reviewed across these records; do not assume the daily reset handles a privacy request.
Your choices and requests
Depending on the law that applies to you, you may have rights to access, correct, delete, export, restrict or object to processing of your personal information, and to complain to your local data-protection authority. Email hello@starterdough.dev with the demo account address and your request. We may ask for proportionate verification before disclosing or changing account information. Never send us your password or authentication codes.
You can stop using the demo at any time. Providing account information is necessary to try signed-in features; you can browse the public pages without creating an account. We do not use demo data to make automated decisions with legal or similarly significant effects on you.
Changes
We publish changes here and update the date above. Material changes to the demo’s data handling will be highlighted on its website; the demo cannot send email announcements.