Privacy Policy

Last updated 26 August 2026

This page explains what North Stardust collects when you visit this website or write to us, why, how long we keep it, and what you can ask us to do about it. It covers this website only.

Who we are

North Stardust is an independent creative studio operated by Athanasios Zagkliveris in Greece. We are the data controller for the personal data described here.

For anything about this policy, or to exercise any of the rights below, write to northstardust.studio@gmail.com.

When you use the contact form

The form asks for your first name, last name, email address and your message. It asks for nothing else, and nothing is pre-filled from anywhere.

What you send is checked by our hosting provider and passed straight to an email delivery service, which sends it on to our inbox as an email. It is not saved to a database on this website. We keep the message in our inbox. The delivery service also holds the message and its delivery record for a short period before removing them. Your address is set as the reply-to address so we can answer you. Your message is not published, sold, or used for marketing, and we do not add you to any mailing list.

Please do not send sensitive personal information through the contact form.

Why we may do this: our legitimate interest in reading and replying to people who choose to contact us (Article 6(1)(f) GDPR). Where your message is about possible work together, we may also rely on taking steps at your request before entering a contract (Article 6(1)(b)).

The form carries a hidden field that people never see and never fill in. If it arrives filled in we treat the submission as automated and discard it. Nothing about you is collected by it.

Analytics and session recording

The home page can load two third-party measurement tools. Neither runs unless you agree to it. The first time you visit we ask, and nothing is loaded until you answer.

• Google Analytics 4: how many people visit, which pages they open, roughly where in the world they are (from the IP address), and what device and browser they use.
• Microsoft Clarity: the same kind of usage data, plus session recordings and heatmaps: a replay that reconstructs the pages as they appeared, together with the pointer movements, clicks, scrolling and taps made during the visit. Clarity masks the contents of form fields in every one of its modes, so what you type into the contact form is not captured in a recording.

Both set their own cookies or similar identifiers in your browser, and both send what they collect to Google and Microsoft respectively, who process it as our providers and under their own terms.

Why we may do this: your consent, which you give by choosing Accept when we ask (Article 6(1)(a) GDPR). If you choose Decline, neither tool is loaded and nothing about your visit is sent to Google or Microsoft.

You can change your mind at any time, and it is no harder to withdraw than it was to give. Withdrawing also deletes the Google Analytics and Clarity identifiers this site can reach in your browser: Change your analytics choice

Hosting and security

The site is hosted on Cloudflare Pages. Like any web host, Cloudflare processes the technical details of each request, including your IP address, the time, the page requested and your browser's user agent, to serve the site, keep it available and protect it from attack and abuse. This is our legitimate interest in running a working, secure website (Article 6(1)(f)).

Cookies and similar technologies

The site's own code sets no cookies. It saves one thing in your browser: your answer to the analytics question above, so that we do not ask again on every page. It is never sent anywhere. The site also loads no fonts, images or embedded content from other companies: everything it needs, it serves itself.

If you accept analytics, the two tools above set cookies of their own. Google Analytics sets cookies under this domain. You will see them named _ga and _ga_ followed by a code. Microsoft Clarity sets its own identifiers. If you decline, none of them are set, because neither tool is loaded. No other cookies are intentionally set by the website.

You can block or delete them in your browser settings, and browser tracking protection or an ad blocker will usually stop them loading at all. Google also publishes a browser add-on that opts you out of Google Analytics on every site.

Sending information outside the EEA

Our providers may process personal data outside the European Economic Area, including in the United States. Where that happens, the transfer relies on the European Commission's adequacy decision for the EU–U.S. Data Privacy Framework, where the provider is certified under it, and otherwise on standard contractual clauses approved by the European Commission. For visitors in the United Kingdom, the equivalent UK mechanisms apply.

How long we keep things

• Contact form messages: 12 months from your last contact with us, then deleted.
• With our email delivery provider: the message and its delivery record are held for that provider's own retention window, 30 days under its standard plans, and are then deleted. We do not extend it.
• Analytics and session recordings: Microsoft deletes Clarity recordings after 30 days and its heatmap data after 9 months. Google Analytics keeps event and user level data for the period set on our property, which can be between 2 and 14 months. We do not keep our own copy of either.
• Hosting logs: for as long as our host retains them for security and reliability, which is set by them rather than by us. We do not keep our own copy.

Who else sees your information

Only the providers that make the site work: our hosting provider, our email delivery provider, our email inbox provider, and the two analytics providers named above. We do not sell personal data and we do not share it for anyone else's marketing.

We may disclose information if the law requires it, or to establish or defend a legal claim.

Your rights

You have the following rights over your personal data:

• access it and receive a copy;
• correct it if it is wrong or incomplete;
• ask us to delete it;
• ask us to limit how we use it while a question about it is resolved;
• object to how we use it where we rely on legitimate interests;
• withdraw your consent to analytics at any time, which takes effect immediately and costs you nothing;
• receive it in a portable format, where that right applies.

Write to northstardust.studio@gmail.com and we will respond within one month. There is normally no charge.

We make no automated decisions about you and do no profiling. We do not ask for special category data, and the site is not directed at children.

Complaints

If you think we have handled your personal data badly, please tell us first. We would rather put it right. You can also complain to the Hellenic Data Protection Authority (dpa.gr), or to the supervisory authority where you live or work.

If you are in the United Kingdom, you have the equivalent rights under the UK GDPR and may complain to the Information Commissioner's Office (ico.org.uk).

Links to other sites

This site links to LinkedIn and ArtStation. Once you follow a link you are on someone else's site, under their privacy policy, not this one.

Changes to this policy

If we change what we collect or why, we will update this page and move the date at the top. There is no archive of earlier versions.