Privacy Policy
Last updated: June 11, 2026
This Privacy Policy explains how [LEGAL ENTITY NAME] ([ENTITY TYPE — e.g. limited liability company], "Astra Lunaria", "we", "us" or "our") collects, uses, and shares personal information when you use Astra Lunaria (the "Service"). Please read it together with our Terms of Service, Cookie Policy, and Disclaimer.
1. Who we are
The data controller for your personal information is [LEGAL ENTITY NAME], [REGISTERED BUSINESS ADDRESS]. For any privacy question or to exercise your rights, contact us at [PRIVACY CONTACT EMAIL ADDRESS].
2. Information we collect
Information you provide
- Birth details. The name (optional), birth date, birth time, and birth place (city, latitude, longitude, and timezone) you enter to generate natal and synastry charts.
- Account information. Your email address and display name, managed through our authentication provider when you create an account.
- Order and shipping information. When you buy a premium plan or order a physical print, the shipping address and order details needed to fulfil and deliver it. Payment card details are entered directly with our payment processor and are not stored by us.
- Content you submit. Messages and prompts you send to the in-app AI chat, and people/charts you save.
Information collected automatically
- Usage and device data. With your consent where required, we use analytics (via Google Tag Manager) to collect pages viewed, approximate region, device/browser type, and similar diagnostic data. See our Cookie Policy.
- Local storage. We store certain items in your browser's local storage so the Service works and your work isn't lost — including a natal chart you generate before sign-up (
cosmic-empire:pending-chart:v1), compatibility details entered before sign-up (cosmic-empire:pending-synastry:v1), your cookie consent choice (astra-lunaria:cookie-consent:v1), and which daily card you've revealed (astra:starlight-revealed:*). These stay on your device until you clear them. See our Cookie Policy for details.
3. How we use your information
- To generate and display your astrological charts and readings.
- To create and manage your account and authenticate you.
- To process payments, fulfil print orders, and arrange shipping.
- To send transactional and account-related emails.
- To operate, secure, debug, and improve the Service (analytics, with consent where required).
- To comply with legal obligations and enforce our Terms.
4. Legal bases (EEA/UK)
Where the EU/UK GDPR applies, we rely on: performance of a contract (providing the Service you request); consent (optional analytics/marketing cookies and processing of any special-category data — see below); legitimate interests (securing and improving the Service); and legal obligation (e.g. tax and accounting).
Special-category data. Birth details are used to produce astrological content and are not used to infer or process sensitive characteristics. Where any information you provide could be considered special-category data under applicable law, we process it only on the basis of your explicit consent, which you give by entering it to generate a reading.
5. AI processing
Readings and chat responses are generated using a third-party AI provider (xAI). The birth details and prompts needed to generate a response are sent to that provider to return your reading. Readings are produced by an automated system for entertainment and self-reflection and are not a substitute for professional advice.
6. Sharing your information
We do not sell your personal information. We share it with service providers ("processors") who act on our behalf, including:
- Clerk — Account creation, authentication and session management.
- Stripe — Payment processing for premium plans and print orders.
- Gelato — On-demand printing and fulfilment of physical chart prints.
- Resend — Transactional and account-related email delivery.
- xAI — AI generation of astrological readings and chat responses.
- Google (Tag Manager / Analytics) — Website analytics and tag management (consent-gated).
- Replit — Application hosting and infrastructure.
We may also disclose information to comply with law, enforce our Terms, or protect our rights, and in connection with a merger, acquisition, or sale of assets.
7. International transfers
Our providers may process data in countries other than yours, including the United States. Where required, such transfers are protected by appropriate safeguards (for example, the European Commission's Standard Contractual Clauses).
8. Data retention
We keep personal information for as long as your account is active or as needed to provide the Service, then for as long as necessary to comply with legal obligations, resolve disputes, and enforce agreements. You can ask us to delete your account at any time (see your rights below).
9. Your rights
Depending on where you live, you may have the right to access, correct, delete, or port your personal information; to object to or restrict certain processing; and to withdraw consent. To exercise any right, email [PRIVACY CONTACT EMAIL ADDRESS]. We will respond as required by applicable law. You also have the right to lodge a complaint with your local data protection authority.
10. US state privacy rights
If you are a US resident in a state with a comprehensive privacy law (such as California, Virginia, Colorado, or Connecticut), you may have rights to access, delete, and correct your information and to opt out of "sale" or "sharing" and targeted advertising. We do not sell your personal information for money. To opt out of optional analytics, use the "Your Privacy Choices" link in the footer; we also honor Global Privacy Control (GPC) browser signals.
11. Children
The Service is not directed to children. You must be at least 16 years old (or have parental/guardian permission where a lower age applies) to use it. We do not knowingly collect personal information from children below the applicable age.
12. Security
We use reasonable technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date above.
14. Contact
Privacy questions: [PRIVACY CONTACT EMAIL ADDRESS]. General support: [SUPPORT EMAIL ADDRESS]. Governing law: [GOVERNING LAW / JURISDICTION].