← astroly

privacy

How we handle your details.

This notice explains, in plain language, what personal data we collect, why, how long we keep it, who else processes it, and the rights you have. It is written to meet our obligations under the EU General Data Protection Regulation (GDPR).

Who we are

Astroly is run from Vilnius, Lithuania, by the two people who write the readings. We are the data controller for the personal data described here.

What we collect

To produce and deliver your reading we collect:

  • your birth date, birth time and birth place;
  • your name and, for a gift, the recipient's name and any message you write;
  • the email address you ask us to deliver to;
  • order and payment status (we never receive or store your card details — see Stripe below);
  • basic technical and consent records needed to run the site;
  • if you arrived from one of our ads: the campaign details in the link you clicked, the advertising platform's own click identifier, your IP address and your browser's user-agent string. We keep these so we can tell which advertising actually works — a purchase often happens a week or two after the click, and without them we would be spending blind.

Why we use it, and our lawful basis

  • To deliver your reading — calculating your natal chart, writing and sending the reading, and supporting your order. Lawful basis: performance of our contract with you (GDPR Art. 6(1)(b)).
  • Emails about your reading and the full book — when you request a reading, we tell you on the same screen, before you enter your email, that we will send it to you along with occasional emails about your reading and the full book. Requesting the reading is how you agree to this. Lawful basis: our legitimate interest in telling the people who asked for our product about that product (Art. 6(1)(f)), in the manner of Art. 13(2) of the ePrivacy Directive — you gave us this address in the course of requesting the reading, we told you at that moment what we would send, and every email we ever send carries a one-click unsubscribe. Unsubscribing is permanent and takes effect immediately; we record both the moment you agreed and the moment you withdrew.
  • Analytics — we use Google Analytics and Microsoft Clarity to understand, in aggregate, how the site is used, so we can improve it. Lawful basis: our legitimate interest in improving the site (Art. 6(1)(f)). You can opt out — see our cookie policy.
  • Advertising measurement — when we run ads on Meta (Facebook and Instagram) or Pinterest, their tags run on this site so we can tell which ads brought someone here, and so those platforms can show our ads to similar people. In the EEA, the UK and Switzerland we ask for your consent first and nothing loads until you give it (Art. 6(1)(a)). Elsewhere, including Australia and New Zealand, these tags load on the basis of our legitimate interest in measuring our own advertising (Art. 6(1)(f) where the GDPR applies) — and you can switch them off at any time from our cookie policy. Meta and Pinterest act as their own controllers for what they do with that data.
  • Confirming a sale to an advertising platform — when you buy, we send Meta a record of the purchase from our own server: the amount, the currency, an order reference, and your email address in a one-way hashed form Meta can match but cannot read back. This is the same event your browser reports, sent twice on purpose so it is counted once and correctly.
  • Legal and accounting obligations — keeping records we are required to keep. Lawful basis: legal obligation (Art. 6(1)(c)).

We do not use your details for unrelated purposes, and we never sell them. The advertising tags above share site activity with Meta and Pinterest; they never receive your birth details, your chart or your reading.

How your reading is made

Your natal chart is computed from real astronomy — the actual positions of the planets at the moment and place you were born. The text of your reading is then written by an AI language model (Anthropic's Claude), working from that chart and guided by our own instructions. Every reading is reviewed by one of us before it reaches you. We tell you this plainly because you deserve to know how the words you receive are produced.

Who processes your data for us

We use a small number of trusted providers who act on our instructions as processors. Each is bound by a data-processing agreement:

  • Supabase — database hosting (EU region).
  • Anthropic (United States) — generates the text of your reading from your chart.
  • Stripe — handles payment. Your card details go directly to Stripe; we never see or store them.
  • Resend — delivers your reading and order emails (EU region).
  • Google (United States) — Google Analytics, aggregate site usage.
  • Microsoft (United States) — Clarity, aggregate usage and session insights.
  • OpenStreetMap Foundation — when you type your birth city, that text is sent to their Nominatim service to turn it into coordinates and a time zone. Nothing else about you is sent with it.
  • Sentry — error monitoring, so a failure in the middle of your order reaches us rather than disappearing.
  • Slack (United States) — when you order, your first name and email address are posted to our own private team channel, so the two of us see it and can act on it. Nothing else about you is sent there, and no one outside our team can see that channel.
  • Hostinger — the server this site runs on (EU).

Where your data lives and transfers

Your account, your birth details and your reading are stored on servers in the European Union. Two things necessarily leave it: the text of your reading is written by Anthropic in the United States from your chart, and the providers marked above as US companies process the data described next to them there. Those transfers are covered by appropriate safeguards, such as the EU Standard Contractual Clauses. Meta and Pinterest are US companies and receive the advertising data described above directly, on their own terms.

How long we keep it

We keep your birth details and reading for as long as needed to deliver and re-deliver your reading, and you can ask us to delete them sooner (see your rights below). Order records are kept for ten years as invoice records, because Lithuanian tax law requires it; when you ask for erasure we remove the personal details and keep only what that obligation covers. Marketing consent records are kept until you withdraw consent.

Your rights

Wherever you live, you can ask us to show you what we hold, correct it, delete it, or stop using it — and if you want it back in a portable form, ask and we will send it. Where we rely on your consent you can withdraw it at any time without affecting anything we did before. Write to info@astroly.today and we will answer within one month, and sooner where the law where you live requires it.

These rights come from the GDPR if you are in the EEA or the UK, from the Privacy Act 1988 and the Australian Privacy Principles if you are in Australia, and from the Privacy Act 2020 if you are in New Zealand. Nothing on this page limits them.

If you think we have got it wrong, tell us first — we would rather fix it. You can also complain to a regulator: in Lithuania the State Data Protection Inspectorate, vdai.lrv.lt; in Australia the Office of the Australian Information Commissioner, oaic.gov.au; in New Zealand the Office of the Privacy Commissioner, privacy.org.nz.

Changes

If we change this notice we will update the date below and, for material changes, let you know.

Last updated: 27 July 2026.