Privacy Policy
Last updated: 15 February 2026
1. Introduction
Star Journey Pty Ltd (ABN 70 670 728 702), trading as MockStar, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
2. Information We Collect
Account Information
- Name and email address
- Year level / grade
- Location (state/region)
- Google account information (if using Google Sign-In)
Usage Data
- Exam attempts, scores, and completion times
- Practice session history and skill mastery data
- Learning progress and analytics
Payment Information
Payment is processed securely by Stripe. We do not store your credit card number, CVV, or full card details on our servers. We only receive confirmation of payment status and subscription details from Stripe.
Technical Data
- Browser type and version
- Device information
- IP address
- Pages visited and time spent on the Service
3. How We Use Your Information
We use the information we collect to:
- Provide and maintain the MockStar service
- Generate personalised exam reports and learning insights
- Track your practice progress and skill mastery
- Process payments and manage subscriptions
- Send transactional emails (verification, password reset, welcome)
- Improve and optimise the Service
- Comply with legal obligations
We do not sell your personal information to third parties. We do not use your data for advertising purposes.
4. Third-Party Service Providers
We share your information with the following third-party service providers, solely for the purposes of operating the Service:
- Stripe — Payment processing (payment data, subscription management)
- Google — OAuth authentication and AI-powered learning analysis
- Resend — Transactional email delivery
- MongoDB Atlas — Database hosting (encrypted at rest)
- Google Cloud — Application hosting infrastructure
- Cloudflare — Content delivery and web security
Each third-party provider is required to protect your data in accordance with their own privacy policies and applicable data protection laws.
5. Children's Privacy
MockStar is an educational service used by students, including children under 16 years of age. We take children's privacy seriously:
- Accounts for children under 16 must be created with parental or guardian consent
- We collect only the minimum information necessary to provide the educational service
- We do not knowingly collect personal information from children without parental consent
- Parents/guardians may request access to, correction of, or deletion of their child's data at any time
6. Data Storage and Security
We take reasonable steps to protect your personal information:
- All data transmitted between your browser and our servers is encrypted using TLS/SSL
- Passwords are hashed using bcrypt and never stored in plain text
- Database data is encrypted at rest
- Access to personal data is restricted to authorised personnel only
While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
7. Your Rights
Under the Australian Privacy Act, you have the right to:
- Access — Request a copy of the personal information we hold about you
- Correction — Request correction of inaccurate or incomplete information
- Deletion — Request deletion of your account and associated data
- Complaint — Lodge a complaint if you believe your privacy has been breached
To exercise any of these rights, contact us at support@mockstar.com.au.
8. Cookies and Analytics
MockStar uses:
- Essential cookies — Required for authentication and session management
- Google Analytics (GA4) — To understand how users interact with the Service and improve user experience. GA4 collects anonymised usage data.
- Cloudflare Analytics — For performance monitoring and security
You can control cookies through your browser settings. Disabling essential cookies may affect the functionality of the Service.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The updated policy will be posted on this page with a revised "Last updated" date.
10. Complaints
If you believe we have breached the Australian Privacy Principles, you may lodge a complaint with us first. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us: