Privacy Policy

Last updated: 12 August 2026

1. What we store, and why

Account data — email, display name, and a hashed password (bcrypt; we never see or store the password itself). Used to sign you in.
Birth data and profiles — the dates, times and places you save. This is the input the charts are computed from. Birth data can reveal little on its own, but treat it as personal: we do, and it is never shared or sold.
Readings, chats, journal entries and notes — stored so you can come back to them. AI readings are generated by sending the astrological context (chart positions and events, plus any note you attach) to an AI provider; the provider processes it to generate the text and is contractually restricted from using it to train models.
First-party analytics — which pages are viewed, self-hosted on our own server, only after you allow it in the cookie banner. No third-party trackers, no ad networks, ever.
Payment data — handled entirely by our merchant of record. Card numbers never touch our servers.

2. Cookies

Two first-party cookies keep you signed in (access + refresh). They are strictly necessary and HttpOnly. Analytics only runs if you choose “Allow analytics” in the consent banner, and you can change your mind by clearing site data.

3. Where data lives

Data is stored on our own infrastructure in the European Union. Transfers to AI providers happen only to generate the reading you asked for.

4. Your rights (GDPR)

You can access, correct, export, or delete your data. Deleting your account removes your profiles, readings, journal and analytics events tied to your user id. Write to [email protected] and we will act within 30 days. You may also complain to your data protection authority (in Portugal, the CNPD).

5. Retention

Account content is kept while the account exists. Payment records are kept as long as tax law requires. Backups roll off within 90 days.

6. Contact

Data controller: Moon Studio. Questions and requests: [email protected]. See also the terms of service and refund policy.