Privacy policy
A draft for the prototype. Before the public launch a lawyer will review it, and the service operator, the country where data are stored and a contact address will appear here.
1. In short
We keep only what is needed to build your maps and run your account. We do not sell data, show ads or use analytics. Birth data are seen by you and the service administrators; share links do not contain them. You can download all your data in one file and delete it in the account.
2. What we store
- Account: e-mail, name, interface language, password as a hash (salted PBKDF2 — we never know the password itself).
- People you add: name, date, time and place of birth, where the time comes from, where the person lives now (if given), relation (“who is this”), notes.
- Photos of people (optional, since v0.17): a small square picture (up to 320×320) you upload for a person; your browser reduces it before upload and the server removes metadata, including the location of the shot. Only you see it; you can remove it at any time, and it is deleted together with the person or the account.
- City lists: cities, your notes, tags and favourites.
- Plan and partner programme: payment dates and amounts, plan term, who invited you, commissions and payouts, the payout method from your request.
- Share links: caption, a snapshot of the breakdown (indexes, lines, timing windows — no birth data), expiry, view count.
- The Astra assistant (since v0.19): the text of your questions to the assistant, their language and time, your rating of the answer; if you are signed in, the questions are linked to your account. Messages to the team on the “Messages” tab and the replies to them. The history of the open conversation is kept by your browser until you close the tab.
- Technical: the sign-in cookie
aag_session; settings in your browser (language, theme, panel width — stored only on your device); server logs (IP address, time and path of a request) — for security and debugging.
3. Why, and on what basis
- To build maps, city breakdowns, reports and shared maps — at your request (performance of a contract).
- To run the account, plan and payment records — contract and accounting obligations.
- To accrue and pay partner commissions — contract.
- To protect the service from abuse — legitimate interest.
Birth data are not a special category by themselves, but conclusions about a person’s life are drawn from them, so we treat them as sensitive.
4. Other people’s data
By adding a person you confirm these are your own data or that the person agrees. Children’s data are entered by a parent or legal guardian. If a person whose data someone else entered asks us to delete them, we will.
5. Who sees the data
- You — all your people, their maps, lists and reports. Map files are served only to the owner and administrators.
- Service administrators — for support and fixing errors.
- Anyone with your share link — only the snapshot on that page, without date, time or place of birth and without your lists. An experienced astrologer can roughly reconstruct the birth date from map lines — keep that in mind when sharing a map. You can revoke a link in the account.
- The Whitfield demo family is fictional and visible to everyone.
6. Third-party services
- Basemap OpenFreeMap (OpenStreetMap data): your browser loads map tiles from their server, which sees your IP address and the area shown, not birth data.
- Font Manrope has been served from our own server since version 0.20: pages no longer contact Google Fonts.
- Payment provider will appear with online payments and will be named here. For now, payments are recorded by an administrator.
- AI services: for now the Astra assistant answers from the help pages and does not pass questions to third parties. If we connect an external AI service, it will be named here before it is switched on; names and birth data are not passed to it.
- No analytics, ad networks or trackers.
7. Cookies
One cookie is used — aag_session: it keeps you signed in (HttpOnly, 90 days or until you sign out). Signing in is impossible without it, so no consent banner is shown. There are no other cookies.
8. Retention
- As long as the account exists.
- When the account is deleted, people, maps, lists and links are deleted at once. Payment and commission records stay anonymised as long as accounting requires; unpaid commissions are cancelled.
- A deleted person disappears together with their map, reports and links.
- Questions to the Astra assistant are kept for 90 days. Messages to the team are kept as long as the account exists; when the account is deleted, both the questions and the messages are deleted.
9. Your rights
- Access and portability: “Account → Your data → Download all my data (JSON)”.
- Rectification: profile — in the account, people — on the People page.
- Erasure: a person — on the People page, everything — “Account → Delete account”.
- Withdraw consent for another person’s data — by deleting them.
- Complain to the data protection authority of your country.
10. Security
Passwords are stored only as hashes, the sign-in cookie is not readable by page scripts, map files are closed to outsiders. At launch the service will run over HTTPS only, with backups and sign-in rate limits.
11. Changes
We will announce material changes by e-mail or at sign-in. The version date is at the top of this page.