Privacy Policy
Last updated: 26 October 2026
This policy explains what personal information Oshi Astra collects, how it is used, which service providers receive it, how long it is kept, and what you can do about it.
1. What we collect
When you register
- Username and password (stored only as a salted scrypt hash, never in plain text);
- Email address (optional) and whether it is verified;
- If you sign in with GitHub or Google: your account ID on that platform, your verified email, and your display name there (used only to suggest a username). We do not fetch or store your avatar or other profile data, or your login token for that platform;
- Sign-up time, last visit time, invite code and who invited you, your avatar (chosen from our presets) and site preferences.
When you use the site without an account
- A random ID generated in your browser and kept in its local storage, used to recognise the same guest across comments, chats and similar features (shown as "Guest N"). If you register, records under that ID are moved to your new account.
When you use features
- AI chat: your messages, the AI's replies, and summaries generated from them;
- Voice: a record of each playback (character, length, Starwish cost, success), without the text;
- Comments, replies, reports, submissions (images, video links, music), feedback, direct messages, guardian notes, quiz questions, votes, track suggestions and leaderboard profiles;
- Games, quizzes, check-ins, achievements, experience points and Starwish history;
- Payments: see section 4.
IP addresses
- We do not store IP addresses in plain form. For comments, reports, submissions, guest chats and visit statistics we store only a salted hash of the IP address, which is used against abuse and for de-duplication and cannot be turned back into the address;
- Hashes used for de-duplication and allowances are kept for 7 days. Visit statistics keep only daily totals with no identifiers.
2. How we use it
- To provide accounts, AI chat, voice, comments, submissions, games and other features;
- To calculate daily allowances and Starwish, and to process payments;
- To moderate content and prevent abuse;
- To send verification and password-reset emails (the only emails we send);
- To count visitors and page views (totals only).
We do not sell personal information, use it for advertising, or use third-party analytics or ad tracking.
3. AI chat
- Your messages, chat history and chat summaries are sent to an AI provider to generate replies: DeepSeek for the site's own models, or the provider you choose when you bring your own key (DeepSeek, OpenAI or Google Gemini). Your username is not included.
- Your own API key is stored only in your browser. It is passed through our server to that provider with each request and is never stored or logged by us.
- Chats are stored in our database, including guests' chats. The operator can view chats to moderate and resolve problems. "Clear chat" hides them from you but keeps them in the database; they are deleted when the account is closed.
- For voice, only the character's lines are sent to our text-to-speech provider, Fish Audio; your messages are not. Generated audio is cached by line and contains no user information.
4. Payments
- Afdian: we receive the order number, your Afdian user ID, the plan and the amount, and we store the link between your account and your Afdian account.
- Stripe: the payment page is hosted by Stripe. Card, Alipay and WeChat Pay details are handled by Stripe and those providers; we never see or store them. We send Stripe only your account number, the option and the amount, and we store the payment ID, amount, and delivery and refund status.
- In guardian notes, the amount you enter is shown publicly; the contact details you enter are visible only to the operator.
5. What other visitors can see
Your username or "Guest N", avatar, account number (shown with comments and similar; hidden on leaderboards unless you turn it on in settings), comments and replies, approved submissions and quiz questions (with your name), guardian notes (with the amount), and leaderboard results and profiles.
After a submitted image is approved, its original file can be downloaded publicly. Image submissions accept images from the web only; do not upload photos you took yourself or images containing personal information.
6. Service providers and where data goes
The website runs on a Tencent Cloud server in Hong Kong. To provide the service, information is processed by these providers, some of which are outside Hong Kong:
| Provider | Purpose | Information |
|---|---|---|
| DeepSeek (and OpenAI or Google Gemini if you choose them) | AI chat | Chat content |
| Fish Audio | Text-to-speech | Character lines |
| Resend | Email delivery | Email address and email content |
| GitHub, Google | Sign-in | See section 1 |
| Afdian, Stripe | Payments | See section 4 |
| Cloudflare (R2 storage) | Backups of the database and submitted files | Everything in the backups |
| Bilibili | Video cover images | Your browser loads cover images directly from Bilibili, without sending the referring page |
7. Cookies and local storage
- Cookies: sign-in (180 days), language choice (1 year), whether you have seen the landing page (1 year), and a temporary check during third-party sign-in (10 minutes). We use no advertising or analytics cookies.
- Local storage: your guest ID, chat history and chat settings (including your own API key), theme, like de-duplication, quiz record caches and similar. These stay on your device and are removed when you clear your browser data.
8. How long we keep it
- Account details, Starwish history, payment records, comments and submissions: while the account exists;
- Chats: while the account exists; deleted when the account is closed;
- IP hashes used against abuse and for de-duplication: 7 days;
- Server logs: no access logs are kept; error logs rotate by size;
- Backups: daily; older backups are deleted automatically on a fixed schedule.
9. Your choices and rights
- In settings you can change your username, avatar, email and password, delete comments you posted while signed in, withdraw votes and clear chats.
- You can email us to access, correct or delete your personal information, or to close your account. We act on requests within 30 days.
- When an account is closed, we delete its email, password, third-party sign-in links, AI chats, direct messages, notifications, leaderboard profiles, feedback and the comments it posted while signed in, take down its guardian notes, and replace its username with a closed-account label and its number. Payment records and Starwish history are kept because we need them for our records; game and quiz results and submitted quiz questions are kept under the new label. Closing an account cannot be undone.
- If you have a concern or complaint, please contact us first. If you are not satisfied with our response, you can complain to your local privacy regulator (in Australia, the OAIC).
10. Children
The website is open to users of all ages. Users under 18 should get a parent or guardian's permission before buying Starwish.
11. Security
Passwords and session tokens are stored only as salted hashes, the whole site uses HTTPS, and the database is reachable only inside the server. No transmission or storage is completely secure.
12. Contact and updates
Contact: kurumiku0611@gmail.com. When this policy changes, the new version is posted here with a new "Last updated" date.