Privacy notice
How Constella handles your data
Version 2026-11-10.1 · updated 2026-11-10
Prepared with Personal Data Protection Act, No. 9 of 2022 (Sri Lanka), as amended — prepared for Part I duties from 1 January 2027 in mind. This notice describes the product's design; it is not legal advice and does not claim certification or full compliance.
Your answers belong to you. Nothing is shared with a team lead unless you switch it on, section by section — and you can switch it off or delete everything at any time.
Who is responsible
The organisation running this Constella instance is the controller of your data.
- Controller
- [Controller name — the organisation running this Constella instance]
- Contact
- [privacy contact email]
- Address
- [registered address]
- Data Protection Officer
- [Data Protection Officer name and contact, if appointed]
Why we process data
- To store your answers and draw your private Star Card (your consent).
- To show your team lead only the sections you choose to share, and only once at least three teammates share the same section (your consent, per section).
- To include your self-reported energy and workload in anonymous team averages, if you opt in (your explicit consent; treated as possible health data).
- To keep the service secure: sign-in records, rate limits and an audit log of consent, export and deletion events.
What we store
- The nickname you choose (no real name, email or phone needed).
- Your character's look.
- The choices you make in the chapter.
- Your self-reported energy and workload sliders and roadblock tags.
- Optional journal and support notes you write.
- Each consent you give or withdraw, with a UTC timestamp and the notice version you saw.
- Security events (for example sign-ins and deletions). For team leads: login and a password hash.
What we never do
We never infer emotions, mood, burnout or intent from behaviour, timing, movement, webcam, microphone or biometrics. We do not rank people, generate fit scores, or sell data.
Where your data lives (cross-border)
Data is stored on a Contabo GmbH (virtual private server) in Germany, European Union. That is outside Sri Lanka, so we ask for your explicit consent to this transfer before storing anything.
Optional AI processor
This instance has no AI service configured. Your summary is written by a built-in template on our own server, and your text never leaves it.
How long we keep it
- Your data is kept until you delete it.
- If your team lead deletes the Party, all players' data in it is deleted too.
- Security logs that do not identify players are kept for up to 12 months.
Your rights and how to use them
- Access and export: download everything as JSON from My data.
- Erasure: delete everything from My data — rows are removed, not hidden.
- Withdraw consent: switch any sharing off at any time from My data.
- Correction: replay any moment to change your answer, or change your look in the wardrobe.
- Complaints: contact the controller above, or the Data Protection Authority of Sri Lanka.
Age
Constella is for working adults aged 18 or over. It is not for children.