The fine print, enlarged
Privacy
Last updated November 9, 2026. The short version: we would rather compute in your browser than custody your data.
What we collect
When you draw a free chart: nothing, by design. Chart calculation runs in your browser. Your birth data does not leave your device unless you explicitly ask us to save a reading.
When you buy or save a report: the minimum needed to serve you — your chart data, the report, and a contact address. Birth data is treated as personal data under this policy.
Newsletter: your email address only, on a double opt-in basis. Every email carries an unsubscribe link that works immediately.
Analytics: privacy-respecting, cookieless aggregate statistics (Plausible or an equivalent). No cross-site tracking, no advertising pixels, no sale of data — ever.
Your controls
- Export. Anything we hold about you can be exported on request.
- Deletion. Delete your saved charts, reports, and account by request — processed without argument or dark patterns.
- Correction. Write to the desk and a person answers.
Legal basis and scope
We apply one standard everywhere: the GDPR's principles of data minimization, purpose limitation, and storage limitation — which also satisfies the Southeast Asian PDPA regimes and the California CCPA. Where the law requires a legal basis, ours is performance of a contract (your report), consent (newsletter, saved charts), or legitimate interest (aggregate security logs).
Processors
We use a small set of subprocessors for hosting, email delivery, and payment processing (a Merchant of Record handles card data — your card number never touches our servers). Each is bound by data-processing terms consistent with this policy.
Retention
Saved charts and reports persist until you delete them. Newsletter addresses persist until you unsubscribe. Server logs rotate within 30 days. We do not keep what we cannot justify.
Contact
For any request under this policy — export, deletion, correction, or complaint — write to the editorial desk via the newsletter contact in the footer of any dispatch, and we will respond within the GDPR's 30-day clock.