Terms of Service

1. Who we are

This service is operated as "Astrina" at https://astrina.io. In these terms, "Astrina.io", "we" and "us" mean the operator of that service, and "you" means the person or organisation using it.

We do not currently publish a legal entity name, company registration number or postal address. If you need those details — for example to conclude a contract or to raise a formal claim — please ask us in writing and we will provide them.

All contact, for every purpose covered by these terms, goes to one address: support@astrina.io

2. What the service does

Astrina.io provides website analytics with a live dashboard, an optional session recorder, a public site catalog, reputation reviews, SEO and page monitoring, a developer API, "Login with Astrina" (a social login broker) and support desks. Not every feature is available on every plan.

The service is under active development. Features may be added, changed or withdrawn. We describe what the platform actually does — and what it does not do — on these pages:

• Privacy Policy — what data we collect and why.
• Security — the protections that are actually in place.
• Data retention — how long we keep each kind of data.
• Subprocessors — the third parties involved in running the service.
• Acceptable Use Policy — what you may not do with the service.
• Cookies — what we store in the browser.

3. Your account

• You must give accurate account information and keep it up to date. We use your email address to reach you, so it must be an address you control.
• You are responsible for your credentials and for everything done through your account. Choose a password you do not use anywhere else.
• We store your password only as a hash (bcrypt, via password_hash()). We never store or log it in plaintext, which also means we cannot recover it for you — we can only help you reset it.
• Optional two-step verification and supported social sign-in are available for Astrina accounts.
• If you think your account has been accessed by someone else, email us immediately at support@astrina.io.

4. Acceptable use

Your use of the service is subject to our Acceptable Use Policy, which forms part of these terms. Read the Acceptable Use Policy.

The service includes automated abuse controls: bot filtering, per-IP submission limits on reviews, moderation of guest reviews, and per-plan daily API quotas that return an error once exceeded.

5. Tracking your sites — your responsibility

When you add a site to Astrina and install our script, you decide what is collected and you remain responsible for it. By adding a site you confirm that:

• you have the right to collect analytics on that site — you own it, or the owner has authorised you;
• you will inform your own visitors that their data is collected, and obtain any consent your own law requires. We do not do this for you, and we do not display a consent notice on your behalf;
• you accept that our analytics stores the visitor's IP address in raw form. It is not anonymised and it is not truncated. We use it to derive a fallback visitor id and to detect probable bots by classifying datacenter and hosting IPs via reverse DNS. The IP is kept for as long as the raw hit row exists, which depends on your plan.

Our analytics uses only a first-party visitor id ("_astr"), set on your own domain. We set no third-party cookies, run no cross-site tracking and no advertising pixels. We never sell your data and never share it with advertisers.

If you enable the session recorder, masking is on by default and is enforced in the browser: password, email and telephone fields never transmit a value — not even its length — payment-card fields are treated the same way, all other input text is masked to bullets, and anything you mark with [data-astr-mask] is redacted before it leaves the page. You are responsible for marking any additional sensitive areas of your own site.

You can delete an individual tracked site from your panel at any time, which removes its data.

6. Plans, balance and billing

Current plans:

Website plans can be paid from your account balance or through a Payora service invoice. You top the balance up through Payora, our payment processor. A paid website plan runs for 30 days and has an expiry date shown in your panel.

Mobile store purchases are handled by Apple App Store or Google Play as described at checkout.

These prices are current "early adopter" pricing and may change. We will not silently change the price of a period you have already paid for, but the price of future periods may be different.

Aggregated daily statistics are kept indefinitely and are not affected by your plan. Session recordings are kept 30 days by default, and SEO page history 180 days by default. See Data retention.

7. Payment and refunds

For website service invoices, you pay in GRAM through Payora, our payment gateway.

The price is set in EUR. Payora converts it to coin at its own rate at the moment the invoice is issued.

A service invoice is issued for a specific service, and its payment goes to that service rather than to your balance. A balance top-up is credited to your account balance.

Once the service is delivered, the payment is not returned. An invoice you have not paid simply expires and costs you nothing.

Money on your balance stays yours and can pay for plans, reports and metered services. Website balance top-ups are available through Payora.

If something went wrong with a payment, write to support@astrina.io.

8. No service level agreement

We do not offer a public SLA. We do not guarantee any uptime figure, any response time or any support turnaround. An SLA exists only where it has been agreed in a separately concluded individual contract with us.

You should also know how our backups actually work, because it affects what we could restore:

• The server takes a daily backup of files and database at approximately 05:12 UTC, using the Hestia control panel.
• Those backups are stored in /backup on the same server. There is no off-site or geo-redundant replication. If the server itself is lost, the backups on it are lost with it.
• Restoration means restoring from the latest daily backup. We do not guarantee a recovery time (RTO) or a recovery point (RPO), and data written since the last daily backup may not be recoverable.

If your use of Astrina is business-critical, keep your own copy of anything you cannot afford to lose.

9. Reviews and other user-generated content

Reviews on Astrina are written by users. They are opinions of their authors and are not statements by us. We do not verify that a review is true.

• Reviews submitted by guests are published after moderation. Reviews by signed-in members are published immediately and may be moderated afterwards.
• We store the submitter's IP address with a review and use it only for abuse rate-limiting.
• Evidence images and video attached to some review types are stored outside the web root and served only through a gated endpoint: the request is refused unless the review is approved, or you are its author or an administrator.
• You keep ownership of what you post, and you grant us the right to host, display and distribute it as part of the service. You are responsible for having the right to post it.
• We may edit, refuse, unpublish or remove user content that breaks the Acceptable Use Policy or the law.

10. API keys

Each member gets one API key (prefix ak_). Keys are accepted only in a request header (X-Api-Key, or Authorization: Bearer) — deliberately never in the URL query string, so they cannot leak into server logs, proxy logs, browser history or Referer headers. Send yours the same way.

Treat your key as a credential: anything done with it counts as done by you. You can regenerate it at any time from /my/api.php, which revokes the old key instantly. Each plan has a daily call quota; once it is exceeded the API returns HTTP 429 until the next day.

11. Suspension and termination

We may suspend or terminate an account that abuses the service, breaks the Acceptable Use Policy, breaks the law, or puts the platform or other users at risk. Where it is reasonable to do so, we will tell you why and give you a chance to put it right first.

You may stop using the service at any time.

Open My data in the app or My data & consents on the website to export data or request deletion. The screen shows the scheduled date and any available cancellation period. You can cancel only before that period ends; a scheduled request is not a confirmation that deletion has already finished.

Open account data and deletion controls.

Deleting your Astrina account does not cancel an App Store or Google Play subscription. Manage or cancel that subscription in the store that bills you. You can still contact support@astrina.io if you cannot access your account or need help with a data request.

You can delete an individual tracked site yourself from your panel, and that removes its data.

12. Disclaimer of warranties

The service is provided "as is" and "as available", without warranties of any kind, whether express or implied, to the fullest extent permitted by law. We do not warrant that the service will be uninterrupted, error-free, or that any data, report, rating or bot classification it produces is accurate or complete.

We do not claim a published penetration test report, ISO or SOC 2 certification, a bug bounty programme or off-site backups. Nothing on this site should be read as claiming otherwise.

Analytics figures, SEO reports and bot detection are best-effort measurements. Do not rely on them as the sole basis for a decision that matters.

13. Limitation of liability

To the fullest extent permitted by law, we are not liable for indirect, incidental, special or consequential damages, for lost profits or revenue, or for lost or corrupted data — including data lost because a backup could not be restored.

To the fullest extent permitted by law, our total liability for any claim relating to the service is limited to the amount you actually paid us for the service in the 12 months before the event giving rise to the claim. If you use a Free plan, you have paid us nothing, and our liability is limited accordingly.

Nothing in these terms excludes liability that cannot be excluded under the law that applies to you.

14. Your own compliance

You are responsible for complying with the law that applies to you, including data protection law, when you use Astrina to collect data about your visitors. If you need a data processing agreement, see the DPA.

Our infrastructure is hosted with OVH in the EU. Cloudflare provides DNS, CDN, TLS termination and WAF, and therefore processes request metadata and IP addresses. Payora processes balance top-ups, service invoices and approved reward payouts. The providers and mobile services described here are listed on the Subprocessors page.

15. Changes to these terms

We may update these terms as the service changes. When we do, we will change the "Last updated" date at the top of this page. For changes that materially affect you, we will make a reasonable effort to notify you by email at the address on your account.

If you keep using the service after a change takes effect, that means you accept the updated terms. If you do not accept them, stop using the service and ask us to delete your account.

16. Contact

Questions about these terms, refund requests, deletion requests, privacy requests and security vulnerability reports all go to the same address: support@astrina.io

Mail from us is sent from noreply@astrina.io. That address does not accept replies — always write to support@astrina.io instead.