Starling v0.1.0

First release. Starling lets you share your location with the people you trust and no one else. It has the parts of Life360 people actually use, a live map of your circle, SOS, check-ins, battery, invite links, minus the part where a company gets everyone's location.

Try it at https://starlingmap.app. On a phone, add it to your home screen and it behaves like an app.

The whole point is that your location is encrypted on your device with a key the server never gets. The relay only ever holds ciphertext, and it deletes it after a day. There are no accounts, no phone numbers, and no analytics. An invite link carries the secret in the part of the URL that never leaves your browser, so you send it over something you already trust and whoever has it is in the circle.

A few things worth calling out. You can lock the app with a passcode (and a fingerprint or Face ID where the browser supports it), which encrypts your circle secret so a lost phone gives up nothing. Sharing stays off until you turn it on. And there's an off-grid map that draws locally and makes no network requests at all.

If you want the details, the repo has the exact protocol and an honest threat model that says what this does not do as clearly as what it does. It ships with 153 unit tests and two real-browser tests, one of which reads the relay's database back and checks there's no name or coordinate anywhere in it.

Fair warning on the limits: it shares while the app is open, not in the background, the relay can still see your IP and timing, and there's no forward-secrecy ratchet yet. All of that is in the threat model.