Draft published 2026-09-04. Covers the guest-checkout Report purchase only.
This Privacy Policy explains what personal data Zodary ("we," "us," "our") collects when you buy a Zodary personalized astrology report ("Report"), why we collect it, who we share it with, how long we keep it, and the rights you have. It applies to the one-time, guest-checkout Report product only, not any separate account-based application.
Contact for any privacy question or rights request: Contact Support.
This Report product is guest checkout only. You do not create an account, choose a password, or log in. We do not build a cross-order profile of who you are as a person. We do, however, keep a device-level fraud-prevention signal across orders (Section 2.2 below), so "no account" does not mean orders are entirely unlinkable to one another at the device level.
Because there is no login, access to your finished Report is controlled by a secret, high-entropy access token embedded only in your private status-page link, not by any username or password. Keep that link private, anyone with it can view and download that Report. Your order number (shown on the status page and in your email, e.g. ZOD-XXXXXXXX) is safe to share and does not, by itself, grant access to your Report.
We collect only what we need to take your order, generate your Report, deliver it, support it, and meet legal obligations.
We do not collect government ID numbers, full payment-card numbers (Stripe handles those), precise/real-time location, biometric data, or health records.
We do not sell your personal data, and we do not use it for third-party advertising or cross-context behavioral advertising.
Where the EU GDPR or UK GDPR applies to you, we rely on:
Once data has been genuinely anonymized (Section 8), it is no longer personal data and GDPR no longer applies to it.
We do not share your data with any third party for that third party's own independent marketing, and we do not sell it.
This Site uses Google Analytics 4, gated behind an opt-in consent banner using Google Consent Mode v2, analytics identifiers and the device fingerprint described in Section 2.2 are only set for visitors who actively accept. Our payment provider, Stripe, may set its own cookies or similar technologies within its secure payment fields for fraud prevention and to make payment work; those are necessary to process your order and are not gated by the consent banner.
If you are in the EEA, the UK, or another jurisdiction with cross-border transfer restrictions, your data may be processed in a country without an adequacy decision, most likely the United States, since Stripe, our content-generation provider, and our hosting provider are US-based or US-processing. The specific transfer safeguard we rely on for each vendor is still being confirmed and will be stated here once locked.
Phase 1, identifiable, for 30 days from purchase. For 30 days after you buy, your order keeps your full name(s), email, exact birth details, and the generated Report, so our support team can look up your exact order and reissue a corrected Report if you contact us. A support request can only be opened within these 30 days. If a support case is still open at day 30, we do not touch your data while it is open; we re-check every 15 days and run Phase 2 only once the case is closed.
Phase 2, automatic de-identification. We delete the full name(s) and buyer email from the order, and copy the remaining data (date of birth, birth time, birthplace city, and the computed chart data) into a separate dataset with no link back to the original order. For Relationship and Family Reports, each person becomes their own independent record, we deliberately break the family/couple grouping so it is not possible to tell that several records came from the same order. We keep this de-identified dataset for longer-term, pattern-level analysis to improve our Reports, and we do not attempt to re-identify it.
An honest caveat. Whether the retained combination of exact date of birth, birth time, and city is truly anonymous under GDPR, meaning a person could not still be singled out from it, is a genuine, unresolved question we are not going to paper over. Removing the family-graph link is a real improvement, but by itself it does not prove the remaining combination is non-identifying. We keep tax and transaction records for as long as required by law regardless of the above.
This Site is intended for adults and is not directed to children. But for Relationship and Family Reports, the buyer enters other people's birth details, which can include a child's, for example a parent buying a Family Report that includes their kids. We want to be plain here rather than reassuring, because this is a genuinely unresolved area of law for a product like this, not a settled one.
This Site does not verify the buyer's age. The Terms of Service require the buyer to be 18 or older, but that is an unverified representation, not a technical control. If a child under 13 is themselves the buyer entering their own birth details, we would have no way to currently catch that. Separately, entering any child's date of birth can give us knowledge that we hold a child's data, and whether that triggers additional obligations under children's-privacy law depends on questions that are genuinely unsettled for a service like this.
What we do to reduce this risk: our automatic de-identification (Section 8) deletes a child's name after the 30-day window, unlinks the remaining data from the order and any identifiable buyer, and, for a Family Report, stores each person as an independent record with no family grouping, removing the "this child belongs to this specific family" signal. This meaningfully limits how long, and how identifiably, any child's data is held, but it does not resolve the underlying questions above about collection in the first place. If you have concerns about a child's data submitted through this Site, contact support and we will work with you directly.
Because there is no login, you exercise your rights by contacting support and including your order number, and, if you have it, your status-page link. We will take reasonable steps to verify a request before acting on it. If you are the person whose details were entered by someone else (not the buyer) and you do not have an order number, contact us anyway and we will work with you to locate and address your request.
You can ask us to access, correct, or delete the personal data associated with your order, within the limits above.
You have the right to access your data, rectify inaccurate data, erase your data, restrict or object to processing, and data portability, and the right to lodge a complaint with your local data-protection authority. An erasure or objection request received during the 30-day identifiable window will be honored subject to narrow legal exceptions (e.g. tax-record requirements); after de-identification, there is no longer identifiable data tied to you to act on.
The rectification right applies to the birth details you gave us (name, date, time, birthplace), those are factual, and correcting them is straightforward: contact support and we will regenerate and reissue your report with the corrected details, at no additional charge. It does not extend to the interpretive content of a generated report, that content is an inference and a reading, not a statement of fact, so disagreeing with what it says is not the same as it being inaccurate. If you believe a report was generated from the wrong birth details, that is a correction request under this section; if you simply disagree with its interpretive content, that is not something a rights request can change.
California residents have the right to know what personal information we collect, use, and disclose; to delete it; to correct it; and to not be discriminated against for exercising these rights. As stated in Section 3, we do not sell your personal information. Residents of other US states with privacy laws may have similar rights; contact support.
We use technical and organizational measures appropriate to the sensitivity of the data, including encryption in transit (HTTPS) and access controls, and we keep card data out of our systems by using Stripe's secure fields. Encryption of stored birth data at rest is a security control we are still finalizing; we will update this section once it is confirmed in place. No system is completely secure, and we cannot guarantee absolute security.
We may update this Policy from time to time. Material changes will be posted on the Site with an updated date before they take effect.
Privacy questions, or to exercise a right: Contact Support.