1. Who operates this service?

Blue Star Dreams is the working name of this social media and Store platform. Before public launch, the operator must add their registered legal name, postal contact address and privacy contact email here: [OPERATOR DETAILS TO BE ADDED].

2. What the current demo stores

This browser-only prototype can save your chosen platform name, display name, theme colour, likes, follows, comments, cart selections and demo chat messages in your browser's local storage. A selected video can be previewed on your device; the prototype does not upload it to a Blue Star Dreams server. The demo does not operate real accounts, orders, direct messages or payments.

3. What a future live service may process

If these features are launched, data could include account details, date of birth or age-assurance results, profile information, posted videos, comments, messages, reports, purchase and delivery details, device information and security logs. This is a proposed list, not a statement that the demo currently collects all of this data.

4. Why information is used and legal bases

Before launching, the operator must document the purposes and lawful basis for each type of processing under UK GDPR. Possible purposes include providing requested accounts and Store services (contract), securing the service and preventing abuse (potentially legitimate interests), complying with legal duties (legal obligation), and optional marketing (consent where required). These bases must be checked against actual processing.

5. Sharing and international transfers

The current demo does not send local demo chats to other users. Before launch, identify hosting, analytics, moderation, payment, delivery and other service providers, what information they receive, and whether any data is transferred internationally. Document appropriate safeguards for any restricted transfers.

6. Retention and security

Demo preferences remain in this browser until cleared by the user or browser. The live platform will need a defined retention schedule for each data category, security controls, breach procedures, and a process for deleting accounts and content.

7. Your data protection rights

Depending on the circumstances, UK users may have rights to access, correct, erase, restrict or transfer personal data, object to certain processing, and withdraw consent. A live service must provide a working contact route and respond according to applicable law. You can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Children and safety

If children under 18 are likely to access the live platform, the UK Children's Code may apply. High privacy by default, appropriate age assurance, safeguards for messaging and profiling, and geolocation off by default should be addressed during development. A privacy notice alone is not enough.

9. Cookies and local storage

This demonstration uses local storage for interactive preferences and sample content. A public website must assess cookies and similar technologies, explain their purposes, and obtain consent where required for non-essential technologies. Do not enable optional tracking before appropriate controls are implemented.

10. Store and payments

Store checkout is simulated. Before accepting orders, publish seller and customer terms, refund and delivery information, payment provider details, and relevant consumer information. Avoid collecting payment card details directly in this prototype.

11. Changes and contact

Review this notice whenever features or data practices change. Before publishing, replace all placeholders and verify the notice against the service's actual implementation.