1. What we collect

We only collect what you type directly into the birth chart and numerology forms:

• · Birth date and birth time — entered on the birth chart form.
• · Birth city — the text you type is sent to a city-search lookup (see Third parties) to resolve it to coordinates and a timezone.
• · Full birth name — only if you use the numerology calculator, to compute your Expression, Soul Urge, and Personality numbers.

For the birth chart and numerology tools, we don't ask for an account, an email address, a payment method, or anything beyond the birth details above — there's no login and no way for us to identify you across visits.

If you create a Journal account, we additionally collect:

• · Your email address — used only to log you in and, if you request it, to send a password reset link.
• · Journal entry text — the free-text you write about signs and synchronicities you noticed.
• · Confirmed symbol tags — the symbols (and their element/planet) you confirm or add against an entry, after our automatic keyword scan suggests matches.
• · Mood — an optional short text field you can attach to an entry.

2. Why we collect it

Birth chart and numerology data: solely to calculate and display your natal chart or numerology profile back to you, in your browser, in the same request.

Journal data: solely so you can keep a private record of what you notice, get suggested symbol matches for what you write, and see a weekly tally of which elements keep showing up. Your email is used only for authentication. Nothing you enter — in either case — is used for any other purpose: no marketing, no profiling, no resale, no sharing with third parties.

3. Where it's stored

For the birth chart and numerology tools, there is no server-side database.Your birth data is processed in memory for the duration of a single request to generate your chart or profile, and the result is sent back to your browser — nothing is written to a database, and we have no way to look up “your” data after the fact, because we never kept it.

Our server does log limited technical debug output while it talks to NASA JPL Horizons (see below) to look up the Nemesis asteroid position — which asteroid, and whether the lookup succeeded or failed — but not your birth date, time, name, city, or coordinates.

What is stored, and where: once your chart is generated, it's saved to your own browser's localStorage (not a cookie, not sent to us) under the key astroshadow:lastChart, so pages like Body Map can reference your most recent chart without asking again. This never leaves your device. Numerology results aren't stored anywhere at all, not even locally — they exist only in the page while it's open and disappear the moment you refresh or navigate away.

The Journal is the one exception.Your account email, journal entries, confirmed symbol tags, and mood are stored server-side in a Postgres database hosted by Supabase, in the EU region. Every one of those tables has Row Level Security enabled, and the database itself — not just our application code — enforces that your account can only ever read, write, or delete your own rows. No user, including us through the ordinary app, can query another user's journal entries.

Our server logs never include your journal entry text or mood. When something goes wrong saving, loading, or exporting an entry, we log a generic outcome (e.g. “failed to save journal entry”) and the database's own error message — never the content you wrote.

4. Third parties

We rely on exactly two external services, and both are called from our server, not your browser:

• · OpenStreetMap Nominatim— resolves the birth city you type into coordinates. It receives the search text you enter, nothing else about you. The request is proxied through our server, so Nominatim sees our server's IP address, never yours.
• · NASA JPL Horizons— looks up the Nemesis asteroid's position for your chart. It receives only the UTC-converted birth date and time (to the minute); it never receives your latitude/longitude, name, or city. Also proxied through our server, so JPL never sees your IP.

We don't use any other third-party service. No analytics, no advertising networks, no data brokers.

5. Cookies & tracking

AstroShadow does not use tracking or analytics cookies.We don't run tracking pixels, analytics scripts, or any third-party tracking technology. Journal accounts use one essential, strictly-necessary sign-in cookie to keep you logged in — this does not require consent under GDPR's ePrivacy exemption for functional cookies. The browser localStorage described above is separate from this and isn't used to track you either — it only stores your own most recent chart, on your own device, for your own convenience, and nothing is transmitted from it to us.

If that changes — if we ever add analytics or any tracking script — we'll update this policy first and add a proper cookie consent banner at that time. We're deliberately not building a consent banner today for a feature that doesn't exist yet.

6. Legal basis (GDPR)

For users in the EU/EEA/UK, our legal basis for processing the birth data you submit is your consent — given by voluntarily entering your details into the form and choosing to generate a chart or profile. You may withdraw consent at any time simply by not using the tool, or by clearing your browser storage as described below.

The same applies to the Journal: creating an account and writing entries is voluntary, consent-based processing. You can withdraw consent at any time by deleting your account (see below), which removes your email and every journal entry permanently.

7. Your rights

Under GDPR and similar laws, you have rights over your data. Here's how each applies, concretely — birth chart/numerology data first, then the Journal.

• · Access— since we retain nothing server-side for the chart and numerology tools, there's nothing for us to send you beyond what's already in your own browser. Your chart data is visible in your browser's developer tools under localStorage.
• · Deletion— clear your browser's site data/localStorage for this site (or use private/incognito browsing) to remove all stored chart data instantly. No request to us is needed, because we hold nothing to delete on our end.
• · Portability— export your data yourself at any time: it's stored as plain JSON in localStorage under the key astroshadow:lastChart, copyable via your browser's developer tools.
• · Rectification / objection — also self-serve: re-enter different details and generate a new chart, or simply stop using the tool.

For the Journal, both of these are self-serve, built into the product, and available from the bottom of your Journal page:

• · Access & portability— the “Export my entries” button downloads every entry you've written, with its confirmed symbols and mood, as a JSON file.
• · Deletion— the “Delete my account” button permanently removes your account and every journal entry tied to it. This is immediate and irreversible; we don't hold a backup copy to restore from.

8. Wellbeing disclaimer

AstroShadow's content — archetypes, shadow work, numerology, body-map correspondences — is offered for entertainment, self-reflection, and personal growth. It is notmedical, psychological, or professional advice of any kind, and it is not a substitute for therapy, counseling, or professional mental health care. If you're struggling or in crisis, please reach out to a licensed professional or a crisis line in your region.

9. Changes to this policy

We may update this policy as the product changes. If we add cookies, analytics, or any tracking technology, we'll update this page and add a consent mechanism before doing so, not after.

10. Contact

Questions about this policy or your data can be sent to [email protected].