AstroSitusSky almanac
Back to homeLegal

Privacy policy

Last updated: 27 October 2026

This notice explains how AstroSitus (astrositus.com) processes your personal data. It is drafted with the EU General Data Protection Regulation (GDPR) and, for users in Türkiye, Law No. 6698 on the Protection of Personal Data (KVKK) in mind.

Data controller

Controller: [FULL NAME or COMPANY NAME] Address: [ADDRESS] Contact: support@astrositus.com

Data we collect

We may process:

  • Account data: email address, display name, language preference
  • Birth / event records you save: name, date, time (if known), place name, latitude, longitude, time zone, notes
  • Tarot readings you save: spread type, the cards drawn and their orientation (upright/reversed), date and, if you wrote one, your intention / question
  • Technical / essential cookies: session (signed-in state) and language preference
  • Advertising and measurement data (only with your consent where required): Google AdSense and Google Analytics 4 cookies / identifiers, pages visited, browser and device information, approximate location (country / city)

The free service is funded by advertising; see "Advertising and analytics (Google)" below. Your birth data, tarot intention and the cards you draw are never sent to advertising or analytics providers.

Purposes

We process data to:

  • Create and manage your account
  • Calculate astrology charts and store the records you save
  • Apply your language and chart settings
  • Protect security, prevent abuse, and meet legal obligations
  • Keep anonymous page statistics and fix technical errors
  • Show the ads that fund the free service and measure site usage (Google AdSense, Google Analytics 4)

Depending on the processing:

  • Performance of a contract (providing the account and chart service) — GDPR Art. 6(1)(b)
  • Legitimate interests (security and technical operation of the service) — GDPR Art. 6(1)(f)
  • Consent (in particular processing on infrastructure outside your country of residence) — GDPR Art. 6(1)(a); you may withdraw consent at any time (including by deleting your account)
  • Consent (advertising and analytics cookies; collected through a consent message in the EU/EEA, the UK and Switzerland) — GDPR Art. 6(1)(a)

Service providers and locations

Your data may be processed by:

  • Supabase — authentication and database (region: `eu-central-1`, Frankfurt, Germany)
  • Render — astrology calculation API (hosting)
  • Netlify — website hosting
  • Purelymail — email delivery (verification, password reset, etc.)
  • Umami — anonymous page statistics. It runs on our own server, uses no cookies, and does not store IP addresses. Query parameters and URL hashes are not sent.
  • Sentry — error records (region: EU, Germany, `de.sentry.io`). Email is not sent; for a signed-in user only the account id may be included.
  • Google AdSense (Google Ireland Ltd. / Google LLC) — ad serving and ad measurement
  • Google Analytics 4 (Google Ireland Ltd. / Google LLC) — site usage statistics
  • Grow by Mediavine (Mediavine, Inc., USA) — content saving, follow and recommendation tool; uses its own cookies / local storage and may process your email address if you use it

These providers process data only as needed to run the service.

International transfers

Supabase stores data in the EU (Germany). Umami statistics stay on our own server. Sentry error records are processed in the EU (Germany). Render, Netlify, Purelymail, Google and Mediavine may involve transfers outside your country (e.g. to the USA); for Google, the EU–US Data Privacy Framework and standard contractual clauses apply. Where GDPR applies, we rely on appropriate safeguards (such as standard contractual clauses) and, where required, your explicit consent. The consent checkbox shown at registration covers this overseas processing.

Advertising and analytics (Google)

  • Google AdSense: Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads based on your visits to this site and/or other sites on the Internet. You can opt out of personalised advertising in Google Ads Settings; for other third-party vendors' cookies see aboutads.info.
  • Google Analytics 4: Measures which pages are visited, visit duration, browser / device type and approximate location. Only the page path is sent to Google; query parameters in the address bar (such as birth details in a quick chart) are not. Analytics data is retained for 14 months.
  • Consent: Advertising and analytics cookies are off by default (Google Consent Mode v2). Visitors in the EU/EEA, the UK and Switzerland are asked for permission through Google's certified consent management tool; you can change your choice at any time through the privacy / cookie settings link on the page. Without consent, Google may show non-personalised ads without using cookies.
  • How Google uses this data: How Google uses information from sites that use its services.

Retention

We keep your personal data until you delete your account. When you delete your account, related records (profile, charts and tarot readings) are deleted. Limited exceptions (legal retention or security logs) may apply for only as long as necessary.

Tarot readings

  • Readings you do not save are never sent to our servers; they live only in your browser's session storage and disappear when you close the tab.
  • When you choose "Save", the reading (cards, spread type, date and, if you wrote one, your intention / question) is stored in your account and is visible only to you. You can delete it at any time on the My readings page.
  • When you choose "Share", the reading becomes visible to anyone with the link: the spread type, cards and date are public. Your intention / question is never shown on the shared page and cannot be read through the share link. Deleting a shared reading closes the link (because of caching, the page disappears within one hour at the latest).
  • If you press "Save" or "Share" while signed out, the reading waits in your browser (local storage) until you sign in and confirm; if you decline, it is deleted.
  • Your deck preference and the guest identifier used for the "Card of the day" are kept only in your browser.
  • Anonymous statistics receive only the spread type (e.g. "three card"); your intention and the cards drawn are never sent to statistics or error logs.

Birth data about other people

If you save birth or event data about someone else, you are responsible for ensuring that person has been informed and, where required, has consented. Do not store third-party personal data without a proper basis.

Cookies

Essential cookies:

  • Session / authentication cookies
  • Language preference

Advertising and analytics cookies (only with consent, or in regions where consent is not required): Google AdSense (e.g. `__gads`, `__gpi`) and Google Analytics 4 (`_ga`, `_ga_*`). See "Advertising and analytics (Google)". You can restrict cookies in your browser; disabling session cookies may break signed-in features.

Your GDPR rights

Where applicable, you have the right to:

  • Access
  • Rectification
  • Erasure
  • Restriction of processing
  • Data portability
  • Object to processing
  • Withdraw consent (where processing is based on consent)
  • Lodge a complaint with a supervisory authority

In Settings you can download your data as JSON and delete your account. For other requests, email support@astrositus.com.

Contact

Privacy requests: support@astrositus.com

For users in Türkiye (KVKK)

Information under Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK):

Data controller: [FULL NAME or COMPANY NAME], address: [ADDRESS], contact: support@astrositus.com.

Purposes: Account management; calculating and storing astrology charts; language and chart preferences; security and legal obligations.

Categories of personal data: Identity / contact (email, display name); user transaction data (language, chart settings); birth / event records (date, time, place coordinates and related fields); technical data (essential cookies; with your consent, advertising and analytics cookies and device / browser information).

Collection method: Directly from you (registration, settings, chart forms) and automatically (essential cookies / session).

Legal grounds (KVKK Art. 5): Formation or performance of a contract; the controller’s legitimate interests; explicit consent (especially for overseas transfer / processing abroad).

Transfers: Data may be transferred to the providers listed above (Supabase — Germany / EU; Render; Netlify; Purelymail; Umami — our own server; Sentry — Germany / EU; Google AdSense and Google Analytics — EU / USA; Mediavine Grow — USA). Overseas transfers rely on the procedures in the KVKK and, where required, your explicit consent.

Your rights under KVKK Art. 11: To learn whether your personal data are processed; to request information if they are; to learn the purpose of processing and whether it is used accordingly; to know the third parties to whom data are transferred domestically or abroad; to request correction of incomplete or inaccurate data; to request deletion or destruction under Art. 7; to request that these operations be notified to third parties to whom data were transferred; to object to a result against you arising solely from automated analysis; to claim compensation if you suffer damage due to unlawful processing.

How to apply: Email support@astrositus.com. If you are not satisfied with the response, you may complain to the Personal Data Protection Authority (Kişisel Verileri Koruma Kurulu) in Türkiye.