Privacy Policy

Last updated: October 30, 2026

Star Labs L.L.C. ("Star Labs", "we", "us", or "our"), headquartered in Prishtina, Kosovo, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit starlabs.dev or interact with our services, in accordance with the General Data Protection Regulation (GDPR) and applicable Kosovo data protection law.

1. Data Controller

Star Labs L.L.C.
Prishtina, Kosovo
Email: [email protected]
Website: https://starlabs.dev

For any privacy-related inquiries or to exercise your data rights, contact us at [email protected].

2. What Personal Data We Collect

Data you provide directly:

• Contact form submissions: Name, email address, phone number, company name, and message content.
• Job and internship applications: Name, email, phone number, CV/resume, cover letter, and professional qualifications.
• Newsletter subscriptions: Email address and communication preferences.

Data collected automatically:

• External media: If you allow external media and play a YouTube video, the provider receives connection and device information, including your IP address. The player may use cookies or similar identifiers.
• Cookie data: See Section 7 (Cookies) below for full details.

3. Legal Basis for Processing

We process your personal data under the following legal bases (GDPR Article 6):

• Responding to your inquiries: Legitimate interest / Contract performance
• Processing job applications: Pre-contractual measures at your request
• Optional external video players: Your consent, managed through Cookie settings
• Sending marketing emails: Your explicit consent
• Website security and fraud prevention: Legitimate interest

4. How We Use Your Data

• Service delivery: To evaluate applications, respond to inquiries, and provide requested services.
• Communication: To send updates about your application, respond to contact form submissions, and (with your consent) send marketing communications.
• External media: With your consent, to display requested third-party videos.
• Legal compliance: To comply with applicable laws, regulations, and legal processes.

5. Data Sharing and Third Parties

We share your data only when necessary and with appropriate safeguards:

• Google / YouTube: Optional video players, loaded only after external media consent and a Play click. We use the privacy-enhanced youtube-nocookie.com player. See Google’s Privacy Policy.
• Cloudflare Inc.: CDN, security, and DDoS protection — IP address, request headers
• Hetzner Online GmbH: Web hosting — all data stored on our servers

We do not sell your personal data to any third party.

6. International Data Transfers

When you choose to load a YouTube player, Google may process information outside your country, including in the United States. Its privacy policy explains its processing and transfer practices. You may keep external media disabled and continue using this site.

7. Cookies and Browser Storage

This website does not install Google Analytics, Meta/Facebook Pixel, or other advertising or analytics tags. Fonts, images and the background video are hosted by StarLabs. The optional purpose currently offered is external media (YouTube video players).

• sl_cookie_consent (necessary, localStorage): Records your explicit acceptance or refusal, the consent policy version and an expiry timestamp. Both acceptance and refusal expire after six calendar months. A changed consent version requires a fresh choice. If browser storage is unavailable, the choice applies only on the current page.
• sl-theme (necessary, localStorage): Remembers a light or dark display theme when you select one, until you change it, choose the system theme or clear site data.
• External media (optional, off by default): YouTube receives your IP address and device information when you load a player and may use its own cookies or similar identifiers. No player, thumbnail request to YouTube, or connection to its domains is made before consent; video thumbnails are local. Consent alone does not start a video: press Play after allowing external media.

Managing your choice: Open Cookie settings in the footer or here to accept all, reject all, or save your external media preference. Rejecting is as easy as accepting. You may close preferences or continue browsing without a choice; optional media remains blocked. Withdrawing removes active players and blocks future loads. It cannot undo information already sent to a provider or delete cookies on that provider’s domains; manage those in your browser. Your choice synchronizes with other open tabs when browser storage is available.

Forms and locally hosted content remain available regardless of your optional media choice. Without JavaScript, optional players remain blocked. Following an external link such as Vimeo or YouTube leaves this website and is subject to that provider’s privacy practices.

8. Data Retention

• Contact form submissions: 12 months after last interaction
• Job applications: 6 months after position is filled (or with consent, up to 24 months)
• Browser privacy choice: Six calendar months, or until site data is cleared

9. Your Rights Under GDPR

As a data subject, you have the following rights under GDPR:

• Right of access (Article 15): Request a copy of the personal data we hold about you.
• Right to rectification (Article 16): Request correction of inaccurate or incomplete data.
• Right to erasure (Article 17): Request deletion of your personal data ("right to be forgotten").
• Right to restrict processing (Article 18): Request that we limit how we use your data.
• Right to data portability (Article 20): Receive your data in a structured, machine-readable format.
• Right to object (Article 21): Object to processing based on legitimate interest or for direct marketing.
• Right to withdraw consent (Article 7): Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at [email protected]. We will respond within 30 days.

10. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority. For Kosovo residents, this is the Information and Privacy Agency of Kosovo (https://aip.rks-gov.net). EU residents may contact their local data protection authority.

11. Children's Privacy

Our website and services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us at [email protected] and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. Material changes will be communicated via a notice on our website. The "Last updated" date at the top indicates when the policy was last revised.

13. Contact Us

For any questions about this Privacy Policy or your personal data:

Star Labs L.L.C.
Prishtina, Kosovo
Email: [email protected]
Website: https://starlabs.dev/contact/