Privacy policy

Last updated October 8, 2026

This page explains what Astralink Nexus collects, why, who can see it, and what you can do about it. Astralink Nexus is operated by Koritsuki. It is a chat, voice, email and broadcast service used by games, apps and websites, and many of its users are children, so we collect as little as we can and we do not sell personal information or use it for advertising.

1. What we collect

Who	What
Users	Username, display name, a hashed password (we cannot read your password), the age or birth date you give, a parent's email address if you are under 18, an optional recovery email for adults, your Astralink address (@astralink.nexus), and when you last signed in. Controls a parent has set for a child.
What users do	Messages and direct messages, emails sent and received through your Astralink address, the channels and rooms you are in, who you talk to, and the ids and names a title gives you. Voice is carried live; we do not record or store voice chats.
Parents and developers (website accounts)	Email address, password (hashed), optional name and phone number, whether you registered as a parent or a developer, and for developers the projects, allowed websites and keys you create.
Payments	Handled by Stripe. We keep a Stripe customer reference, the plan, its status and renewal date, and the number of titles paid for. We never see or store your card number.
Technical data	The information a server needs to answer you, such as IP address and device or browser details, and logs used to keep the service secure and working.

2. Why we use it

To create and run accounts, deliver messages, voice and email, and keep people signed in.
To keep users safe: to look for threats, abuse and harm, to alert parents, to let developers moderate their title, and to act on reports.
To give parents the information and controls for their child, and (on a paid plan) summaries and reports.
To take payment, manage subscriptions and send receipts and service messages.
To protect the service from abuse and attacks, and to fix problems.
To follow the law and respond to valid legal requests.

We do not sell personal information, we do not use it to show advertising, and we do not build advertising profiles.

3. Who can see it

The title you play. A game or app that uses Astralink sees its own users: their ids, display names and messages in that title, and what it needs to moderate it. It does not see your account's private details such as your password, your parent's email or your messages in other titles.
Other users see what you choose to send in the places you send it, such as your display name and messages.
A child's parent can see activity and controls for their child, as explained below.
Service providers who work for us, only to run the service:
- Stripe, for payments.
- Resend, to send and receive email.
- LiveKit, to carry live voice.
- Cloudflare, for network protection and bot checks on our forms.
- Our hosting and server providers.
They may only use the information to provide their service to us.
Authorities and others when the law requires it, or when we believe it is needed to protect a child or another person from harm, or to protect our service and rights.

4. Children and parents

Users can be as young as 5. Children's information needs extra care, so:

A parent is involved first. When a user under 18 signs up, we email a code to the parent's address. The child's account is created only when the parent shares that code. The parent gets a free parent account.
What we collect from a child is the list in section 1: a username, display name, age, the parent's email, and what they do on Astralink. We do not ask a child for more than the service needs, and we do not make a child's participation depend on giving us more.
What a parent can do. A parent can see their child's basic activity, set controls (such as friends, quiet hours and reports), and receive email alerts when a threat is detected. A paid plan adds AI summaries of conversations and detailed weekly reports. A parent can ask us to show what we hold about their child, to correct it, to stop collecting more, or to delete the child's account and data. Write to [email protected].
If this is not your child. If a sign-up used your email address but the child is not yours, tell us and we will remove the account.
Safety first. To protect children we may review messages and activity, warn a parent, and tell a developer or the authorities when a child may be in danger.

5. How long we keep it

We keep an account's information while the account is open. Messages are kept for as long as they are needed to run the service and keep users safe; a private room and its messages are deleted when the last member leaves. When an account is deleted, we delete or anonymise its personal information, except what we must keep for legal reasons, for payments and tax records, or to deal with a safety problem. Payment records are kept as long as the law requires.

6. Your choices and rights

You can ask us to show you the information we hold about you, correct it, delete it, or stop using it in a way you object to, and a parent can do this for their child. You can close your account. You can edit your name and phone number on your profile page and change your password at any time. To make a request, write to [email protected]. We may need to check who you are first, and for a child's account we will ask the parent. If you are not happy with our answer, you may complain to the data protection authority where you live.

7. Cookies and similar storage

We use only what the site needs: a sign-in cookie to keep you signed in, a security cookie that protects forms, and a setting stored in your browser to remember dark mode. Our forms use a bot check from Cloudflare that may set its own cookies. We do not use advertising or tracking cookies.

8. Security

Passwords are stored hashed, connections use HTTPS, and keys and tokens are kept secret and can be replaced. No service is perfectly secure. If you find a security problem, please tell us at [email protected].

9. Changes and contact

If we change how we handle information in a way that matters, we will update this page and the date above, and tell account holders by email or on the site, and where the law requires it we will ask for a parent's consent again.

Questions, requests, or concerns: [email protected].