Privacy Policy & RGPD

1. Introduction & Overview

This Privacy Policy explains how Celestify Hub ("we", "our", or "the Platform"), accessible via yorgo.kabkab.com, collects, processes, and protects your personal data in strict compliance with the General Data Protection Regulation (GDPR / RGPD – Regulation (EU) 2016/679) and applicable European data privacy legislation.

We believe in radical data minimization. We do not sell your personal data, we do not employ third-party tracking advertisers, and we only collect the minimum telemetry necessary to authenticate your profile and ensure simulation integrity.

2. Data Controller

The data controller responsible for the processing of your personal information is:

• Service: Celestify Hub & Celestify Audio Engine
• Architect / Administrator: Yorgo Kabkab
• Domain: https://yorgo.kabkab.com
• Direct Contact: yorgokabkab@gmail.com
• Social Channel: @yorgo_kb

3. Data We Collect

We collect only the essential information required to operate your member profile and secure platform sessions:

• Account Credentials: Username and salted one-way hashed passwords (using PBKDF2 / SHA-256 cryptographic routines). Plaintext passwords are never stored or accessible by administrators.
• Contact Information (Optional): Email address if provided during registration for account recovery protocols.
• Simulation Progression & Gaming Telemetry: In-game experience points (XP), player level, and wager/betting stats.
• Technical Connection Logs: Client IP addresses and user agents recorded temporarily in security audit logs to enforce rate limits, detect bot attacks, and protect against abusive unauthorized access.
• Session Artifacts: Client-side sessionStorage tokens (e.g. user_token, authorized) to maintain your login state throughout single-page navigation without tracking you across external websites.

4. Legal Bases for Processing (Article 6 GDPR)

We process your personal information strictly under the following lawful bases:

• Performance of a Contract (Art. 6.1.b): Creating your account, managing your simulation profile, and delivering games and Celestify application downloads.
• Legitimate Interests (Art. 6.1.f): Maintaining server infrastructure security, preventing denial-of-service (DDoS) and brute-force attacks, and enforcing platform anti-cheat rules.
• Consent (Art. 6.1.a): Where you explicitly choose to provide optional profile parameters or accept non-essential features.

5. Cookies & Local Storage

Celestify Hub uses minimal local browser storage mechanisms:

• Strictly Necessary Storage: sessionStorage keys are utilized strictly for keeping you logged into the application during your browsing session. These are wiped automatically when you close your browser or log out.
• Consent Preferences: localStorage is used to remember your cookie consent preferences so you are not prompted on every page refresh.
• No Tracking / Ad Cookies: We do not deploy third-party advertising cookies, ad beacons, or cross-site fingerprinting scripts.

6. Third-Party Services & Subprocessors

To deliver specific features, we interact with limited reputable services:

• Cloudflare / CDN Providers: Distributed delivery of UI assets and protection against network-layer vulnerabilities.
• AI Chat Assistant: User queries typed into the Celestify Hub AI drawer are processed via the Pollinations AI interface strictly to generate on-demand responses. No personal profile data or credentials are transmitted to the AI engine.
• GitHub Release CDN: Direct downloads for Celestify software packages are synced and hosted securely on our primary web server.

7. Your Rights Under GDPR (RGPD)

As an individual in the European Union or European Economic Area, you hold the following fundamental rights:

• Right to Access (Art. 15): You have the right to request a copy of the personal data held about you.
• Right to Rectification (Art. 16): You can update your username, password, or email at any time directly through the in-hub Settings modal.
• Right to Erasure / "Right to be Forgotten" (Art. 17): You can permanently and immediately delete your account, credentials, and progression score at any time using the Delete Account button in your settings menu, which executes an instant database purge.
• Right to Data Portability (Art. 20): You may request an export of your profile statistics in a structured format.
• Right to Object & Lodge a Complaint (Art. 77): You have the right to lodge a complaint with your national supervisory authority (such as the CNIL in France – www.cnil.fr).

8. Data Retention

Personal account records are retained only for as long as your account remains active. If you initiate account deletion via the Settings protocol, all associated records in the database are purged in real-time. Transient server connection logs are kept for a maximum of 30 days for forensic security purposes before automated rolling truncation.

9. Contact & Inquiries

If you have questions regarding this Privacy Policy or wish to exercise any of your statutory GDPR rights, please contact the administrator: