PRIVACY_CONTROLLER and PRIVACY_EMAIL in web/.env.local before making the site public.Privacy
Who is responsible
The data controller is Constantin Breaur. For any question or request about your data, write to —. We answer within one month.
What we use and why
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Date, time and place of birth (with coordinates and time zone), name, name at birth, gender (optional), chosen focus areas | Computing your natal chart, Chinese zodiac, numerology and daily readings | Your consent, art. 6(1)(a). You can withdraw it at any time. |
| Email, password (stored only as a scrypt hash, we can't read it), account creation date, last use | Your account and sign-in | Providing the service you asked for, art. 6(1)(b) |
| Date and notice version of your consent | Proof of consent | Legal obligation, art. 6(1)(c) and art. 7(1) |
| Failed sign-in attempts (in memory, 15 minutes), IP address in the server's technical logs | Security, abuse prevention | Legitimate interest, art. 6(1)(f) |
| Questions typed in the "Ask about a day" box | Producing the answer | Providing the service, art. 6(1)(b). Not saved; kept at most one hour in the memory cache. |
Birth data is not a "special category" under art. 9 GDPR. We make no automated decisions with legal effects on you: readings are for entertainment only. No marketing, no selling, no sharing for advertising.
Without an account
If you use the site without an account, what you enter is sent to the server only to compute the reading; it is not saved, and results stay at most one hour in the server's memory cache. Your form answers stay in this browser (localStorage) so you don't have to type them again. You can clear them here:
Who else receives data
- Hosting: Oracle Cloud Infrastructure (Oracle), server in Frankfurt, Germany (EU). Processes data only to run the site.
- Place search: the text you search for (e.g. "Iași") is sent by our server to Open-Meteo (Switzerland). Nothing that identifies you is sent.
- AI-written texts: for answers to questions we send OpenRouter, Inc. (USA) and the hosting provider it routes the DeepSeek V4 Flash model to, with no storage or training on the data only the question and the computed astrological factors, never your name, email or birth data.
Fonts are served by us, not loaded from Google. Where a provider is outside the EEA, transfers rely on an adequacy decision (e.g. Switzerland, the EU-US Data Privacy Framework) or standard contractual clauses.
How long we keep it
- Until you delete your birth data or your account (immediately).
- Accounts unused for 12 months are deleted automatically.
- As this is a demo, all accounts may be reset at any time.
Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time without affecting earlier processing. On My profile you can do it yourself: edit your data, download all of it (JSON), delete your birth data (withdraw consent) or delete your account. For anything else, write to —.
You can complain to the Romanian supervisory authority (ANSPDCP), dataprotection.ro, or to the authority where you live.
Cookies and local storage
| Name | Role | Duration |
|---|---|---|
astro_session | Keeps you signed in. Strictly necessary. | 30 days or until you sign out |
astro.draftProfile (localStorage) | Keeps your form answers in the browser. | Until saved or cleared |
We use no analytics or advertising cookies, so no cookie banner is needed.
Minimum age
Accounts are for people aged 16 or older. If you are younger, please use the site without an account.
Security
Encrypted connection (HTTPS), passwords stored as scrypt hashes, signed session cookie that scripts can't read, sign-in attempt limits, restricted server access.
Changes
If we change this notice materially, we update the version and ask for your consent again where needed.