Privacy Policy

Who is responsible

Astronote is operated by Dnote, a business registered in the Republic of Korea (registration number 747-02-03361). We decide what data this service collects and why. Write to godelay2@gmail.com with any question about this policy or to exercise any right described here.

What we collect

If you create a chart

• your email address;
• your password, stored only as a one-way hash — we never see it;
• your display name;
• your date of birth — this is the input the astrological model runs on, so the Service does not work without it;
• an invite code we generate for you.

If you leave a star on someone’s chart

• the name you type;
• the date of birth you type;
• the note you write, if you write one.

You do not need an account to leave a star, and we do not ask for your email when you do.

Automatically

• your IP address, used only to rate-limit abuse. We store a counter keyed to it, not a browsing history, and the record expires by itself.

We do not use advertising cookies, analytics trackers, or third-party pixels. We do not build profiles for advertising and we do not sell or share personal information for advertising.

A note about other people’s data

This Service is unusual in one respect: a person can enter someone else’s name and birth date. If you do that, you are asking us to hold information about a third party, and you confirm you have their permission.

If someone entered your details without your agreement, write to us and we will remove them. You do not need an account to make that request, and we will not ask you to prove who you are beyond what is needed to find the record.

Cookies

We set two cookies, both strictly necessary:

• universe_session — a signed token that keeps you logged in. It is HTTP-only, so scripts on the page cannot read it.
• universe_signed_in — a marker with no value in it, which only tells the page whether to send you to your chart. It carries no identity and is not used for authentication.

Both last 30 days and are removed when you log out.

Who we share it with

We use a small number of processors. We do not sell personal information to anyone.

• Paddle.com Market Ltd — payments. Paddle is the Merchant of Record and collects your billing details directly. We never see your card number. Paddle receives the identifier of what you bought.
• Vercel Inc. — hosting and delivery of the site.
• Neon Inc. — the database, hosted in the United States (AWS, Ohio).
• Anthropic PBC — writing the paid readings. When a reading is unlocked, we send both people’s display names, their star signs, the astrological angle between them, and the note left on that star to Anthropic’s API so a model can write the text. We do not send email addresses, passwords, or exact dates of birth. Anthropic processes this to return the reading and does not use API content to train its models.

If you never unlock a paid reading, nothing you enter is sent to Anthropic.

Where your data is held

Our database and servers are in the United States. If you are outside the United States, using this Service means your data is transferred there and handled under that country’s law.

Why we are allowed to hold it

• To provide the Service you asked for — your account, your chart, the readings, and the purchases you make.
• Our legitimate interest in keeping it working — rate limiting, preventing abuse, and security.
• Legal obligation — Paddle retains transaction records for tax purposes.

How long we keep it

• Account and chart data: until you ask us to delete it. Deleting your account also deletes every star on your chart.
• Rate-limit counters: they expire on their own, within a day at most.
• Purchase records: held by Paddle for as long as tax law requires.

Your rights

Wherever you live, you can ask us to show you what we hold about you, correct it, delete it, or send you a copy. If you are in the EU or UK you also have the right to object to processing and to complain to your data protection authority. If you are in California, you have the right to know, delete, correct, and to not be discriminated against for exercising those rights — and, as above, we do not sell or share personal information.

Write to godelay2@gmail.com. We answer within 30 days.

Children

This Service is not for people under 16. We do not knowingly collect data from anyone under 16. If you believe a child’s data is here, write to us and we will remove it.

Security

Traffic is encrypted in transit. Passwords are stored only as bcrypt hashes. Paid readings are held server-side and are only sent to a browser after the purchase that unlocked them. No system is perfect; if we discover a breach affecting you, we will tell you.

Changes

If we change this policy we will update the date at the top. If a change is material and you have an account, we will email you.