Privacy Notice 星线软件技术（四川）有限责任公司 Effective October 19, 2026 Learn what information Starline’s websites and accounts involve, and how you can manage your privacy. 01 Services covered by this notice The entity responsible for processing personal information is 星线软件技术（四川）有限责任公司. This notice covers the company’s official website, its legal and privacy information websites, and Starline accounts. Services involving different processing activities should provide their own notices. Contact details are available on this privacy website’s contact page. This notice was updated on October 19, 2026. The entity responsible for processing personal information is 星线软件技术（四川）有限责任公司. Privacy requests, account deletion requests, account appeals, and infringement complaints can be submitted through the WeCom channel shown on this website’s contact page. See Starline App Privacy Notice for processing related to chats, calls, location, and local memories in the Starline app. 02 Information we process and why Browsing the official, legal, and privacy websites Providing website access and security protection may involve IP addresses, request times, access paths, and browser-related information. The legal and privacy pages themselves use no advertising tracking or analytics scripts and set no sign-in cookies. Registration and verification The account service uses email addresses, mobile numbers, verification status, and passwords in a form that cannot be directly reversed for registration, sign-in, and identity verification. Verification codes are for the relevant verification process. Do not share them with staff or anyone else. Sign-in and risk protection Account identifiers, session information, IP addresses, hashes of browser characteristics and device identifiers, and security events are used to maintain sign-in status, identify abnormal requests, and protect accounts. Passkeys When you enable a passkey, the service stores the credential identifier, public key, counter, and necessary device-related metadata to verify sign-ins. Fingerprint or facial verification is performed by your device and its operating system. The Starline account service does not receive the raw biometric data. Inquiries, complaints, and rights requests Contact details, descriptions of requests, and necessary supporting evidence that you choose to provide are used to communicate with you and handle your request. Provide only materials relevant to the matter. Do not submit complete payment credentials, passwords, or other unrelated sensitive information. 03 Cookies and local storage The account service uses session cookies, security verification cookies, device identifiers, and temporary third-party sign-in state to support sign-in and security checks. Refusing or clearing necessary cookies may prevent you from staying signed in or completing verification. Account pages may store language preferences locally in your browser. The legal and privacy pages can be read without cookies. Account sign-in sessions are valid for no more than 8 hours and cannot be used to sign in after expiration or revocation. Security verification cookies and device identifiers may have different validity periods. See below for the retention periods of session records. 04 Third-party sign-in and information sharing Starline accounts currently support email, mobile number, passkey, WeChat, and Alipay sign-in. Only a third-party sign-in service you actively choose and authorize participates in that process. Starline receives the authorized identifier used to recognize that platform account and the information expressly permitted on the authorization page. WeChat is provided by Shenzhen Tencent Computer Systems Company Limited; see WeChat Privacy Protection Guidelines. Alipay is provided by Alipay (China) Network Technology Co., Ltd. and its relevant service entities; see Alipay Privacy Policy portal. A service you have not selected does not receive authorization through this process. When you authorize a connected app, the permissions you choose determine what information may be shared, including account identifiers, verified email addresses, and basic profile information. Check the receiving app and requested permissions on the authorization page. You may refuse or revoke authorization. To send verification codes, we use Alibaba Cloud SMS to process the recipient’s mobile number and code, and Tencent Cloud Email to process the recipient’s email address and code. The websites and account service are hosted on Tencent Cloud servers in China. Providers process information only as needed for their respective services. If we introduce a new provider or processing method, we will update this notice and complete any necessary procedures required by law. 05 Retention and security Personal information is stored on Tencent Cloud servers in Shanghai, China. Account information is retained while your account exists. After an account deletion request has been verified and necessary processing completed, the information will, in principle, be deleted or anonymized within 30 days. Sign-in sessions remain valid for no more than 8 hours. Expired or revoked session records and account security audit records are retained for no more than 180 days. Authentication challenges, such as verification codes, are cleared within 1 day after they expire. Website access logs currently have no automatic deletion schedule and may be retained indefinitely. You can request deletion through the contact page; we will verify and handle the request in accordance with the law. Complaint materials and personal information rights request materials are retained for no more than 1 year after the matter is closed, and backups for no more than 1 year. Where laws or administrative regulations require a different retention period, those requirements apply. Information retained beyond what is needed to provide the service will be restricted to statutory purposes. We protect account passwords in a form that cannot be directly reversed and use security measures such as session controls and passkey verification. When processing is no longer needed, or you lawfully request deletion of information or your account, we will verify the circumstances and take appropriate action. Information that must still be retained by law will have its use restricted and will be deleted or anonymized when the retention period ends. If a personal information security incident occurs, remedial action and the required notifications and reports must be carried out in accordance with the law. Cross-border transfers of personal information must meet applicable legal conditions and notification and other procedural requirements. General terms cannot replace those procedures. 06 Your personal information rights You may request, in accordance with the law, access to, copies of, correction of, supplementation of, or deletion of personal information; withdraw consent-based authorization; request account deletion; and ask for explanations of personal information processing rules. We will handle requests in accordance with applicable law and the circumstances of each request. The account security page lets you manage sessions and revoke app authorizations. For other rights requests, use the contact page, describe the type of request, and provide a way to contact you. Reasonable identity verification may be needed to prevent impersonation. Withdrawing consent does not affect the validity of processing based on consent before withdrawal. If processing is necessary to provide a service, withdrawing or deleting the relevant information may affect that feature. Such effects should be explained and limited to the feature concerned. If you disagree with the outcome, you may request a further explanation or, in accordance with the law, complain or report to authorities responsible for personal information protection and seek judicial remedies. 07 Minors’ information Personal information about minors under fourteen is sensitive personal information. Processing it requires guardian consent and special rules. Such information should not be collected until the relevant rules and mechanisms are in place. If a guardian discovers an unauthorized submission, they may contact us to request that it be addressed. 08 Changes to this notice If processing purposes, methods, information types, or other important matters change, we will update this notice and fulfill our notification obligations. Where the law requires renewed or separate consent, we will complete the corresponding procedures. The page displays the effective date so you can consult and save it. WeChat Privacy Protection Guidelines: https://weixin.qq.com/cgi-bin/readtemplate?t=weixin_agreement&s=privacy Alipay Privacy Policy portal: https://render.alipay.com/p/c/17qjvbnlkcw0 https://privacy.thestarline.cn/en-US/contact.html 蜀ICP备2026057076号-1