Privacy Policy
What we collect
To create your reading we collect your birth date, your birth time if you give it, your birth place, and your email address (when you purchase the full blueprint so we can deliver it to you). These birth details are personal data.
Why we collect it
We use your birth details to compute and deliver your reading, and your email to send you the blueprint you paid for. That is all we use them for.
Lawful basis
We process your data to perform the contract you asked for (computing and delivering the reading), and on the basis of your consent when you submit your details. Our audience includes the EU, so the GDPR applies.
Recipients and third-country transfer
We do not sell your data. To run the service we use the following processors: Anthropic PBC (USA) writes the reading from your data; Stripe Payments Europe, Ltd. (Ireland), with onward transfer to Stripe, Inc. (USA), handles your one-time payment; Resend, Inc. (USA) sends the delivery email with the PDF; Render, Inc. (USA) runs the server where the data is stored (server location Frankfurt/EU). We have data-processing agreements with these providers. Where personal data is transferred to the USA, this relies on the EU-US Data Privacy Framework where the provider is certified, otherwise on Standard Contractual Clauses under Art. 46 GDPR.
Server logs, rate limiting and bot protection
To prevent abuse of the free mini reading and unnecessary cost, we briefly process your IP address and browser identifier (User-Agent) when you submit the form. This serves solely to fend off automated requests and abuse (legitimate interest, Art. 6(1)(f) GDPR); the counters are held only transiently in memory and continuously discarded. You may object to this processing under Art. 21 GDPR. There is no tracking and no profiling.
A second person's data (couples reading)
For the couples reading you enter a second person's birth details (birth date, optionally birth time and place, and an optional first name). This processing rests on our legitimate interest in providing the reading you ordered (Art. 6(1)(f) GDPR). At purchase you confirm that the other person is aware of this and does not object. We cannot inform the second person directly, as we collect no contact data for them (Art. 14(5)(b) GDPR); this notice therefore also serves as their information. Either person can request deletion at any time via hello@velacosmos.com.
Cookies and local storage
We use no tracking cookies and no analytics services. We set only a strictly necessary cookie that remembers your language choice, and we store your mini reading locally in your browser (localStorage) at your request so you can find it again. Both are necessary for the service you asked for (§ 25(2) TDDDG) and require no consent. No external fonts are loaded and no third-party scripts are embedded.
Retention
We keep your paid reading and birth details indefinitely at your personal link so you can access them at any time, until you request deletion. Free mini readings are held only transiently in memory and are not stored permanently. Payment-related data is retained by Stripe for the applicable commercial and tax-law periods.
Your rights
You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21); you can withdraw any consent at any time with future effect. To exercise these, email hello@velacosmos.com. You also have the right to lodge a complaint with a data-protection supervisory authority.
Who is responsible
The data controller is [Name — im Impressum eintragen]. Contact for privacy matters: hello@velacosmos.com.