NATAL SKY ← Back to app

Privacy Policy

Last updated: 4 November 2026 · Effective from launch

Contents

  1. Who we are
  2. Data we collect
  3. How we use your data
  4. Legal basis (GDPR)
  5. Third-party processors
  6. International transfers
  7. Data retention
  8. Your rights
  9. California (CCPA/CPRA)
  10. Cookies
  11. Children's privacy
  12. Security
  13. Changes
  14. Contact

1. Who we are

Natal Sky (the "Service") is an astrology web app operated by the team behind astrologyomaha.com ("we", "us", "our"). We provide personalized natal charts, daily horoscopes, compatibility readings and lunar rituals for entertainment and self-reflection purposes.

This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR, EU/EEA/UK), the California Consumer Privacy Act as amended by CPRA (CCPA/CPRA, USA), and other applicable laws worldwide.

By using Natal Sky you accept the practices described here. If you do not agree, please do not use the Service.

2. Data we collect

Information you provide directly

  • Account data: email address (used as login identifier).
  • Astrological profile: name (any display name you choose), date of birth, time of birth, place of birth (city or city + country). We use this data to compute your natal chart. You can use the Service without providing time or place, with reduced accuracy.
  • Preferences: selected interest areas (love, career, etc.), notification preferences, language.
  • Compatibility partners: name and birth data of partners you add for compatibility readings — only if you choose to add them.
  • Communication: if you email us, we keep your message for support purposes.

Information collected automatically

  • Technical: IP address (truncated for privacy), user agent string, screen resolution, timezone, language preference.
  • Usage: pages visited, features used, approximate session duration. We use this aggregated only — never tied to your identity for advertising.
  • Cookies and local storage: see section 10.

Payment information

We do not collect or store your payment card details. All payments are processed by Stripe, Inc. ("Stripe"), a PCI-DSS Level 1 certified payment processor. When you subscribe, you enter card details directly on Stripe's payment page. We receive only a tokenized customer ID, your country, and the last 4 digits of your card for receipts. See Stripe's Privacy Policy.

3. How we use your data

  • To compute and display your natal chart, horoscope and compatibility readings.
  • To create and manage your account.
  • To process subscription payments and send receipts.
  • To send transactional emails (welcome, trial-expiring reminder, receipt).
  • To send optional product updates (with separate opt-in; unsubscribe anytime).
  • To improve the Service through aggregated, anonymized analytics.
  • To prevent fraud, abuse and to ensure security.
  • To comply with legal obligations.
We never sell your personal data. We do not share your birth data with advertisers, data brokers or any third party except the operational service providers listed in section 5.

4. Legal basis for processing (GDPR / UK GDPR)

PurposeLegal basis
Computing natal chart, providing serviceContract performance (Art. 6(1)(b))
Processing paymentsContract performance (Art. 6(1)(b))
Security, fraud preventionLegitimate interest (Art. 6(1)(f))
Aggregated analyticsLegitimate interest (Art. 6(1)(f))
Marketing emailsConsent (Art. 6(1)(a)) — opt-in
Legal complianceLegal obligation (Art. 6(1)(c))

Special category data: Birth date/time/place can in some jurisdictions be considered as identifying information. We treat it with elevated care: stored encrypted at rest, accessible only to you, never shared with third parties for purposes other than chart computation.

5. Third-party processors

We use the following data processors, each bound by Data Processing Agreements:

ProcessorPurposeLocation
Stripe, Inc.Payment processing, subscription managementUSA, Ireland
Supabase, Inc.Database, authenticationEU (Frankfurt)
Vercel, Inc.Hosting, edge functionsUSA, EU
Resend, Inc.Transactional email deliveryUSA
Cloudflare, Inc.DNS, CDN, DDoS protectionGlobal edge
PostHog, Inc.Product analytics: pages visited and steps of the reading flow, sent through our own domainEU (Frankfurt)

We may add or change processors as the Service evolves. Material changes will be reflected here with notice.

6. International data transfers

Some of our processors are based outside the EU/EEA/UK. When transferring personal data outside these regions, we rely on:

  • Standard Contractual Clauses (SCCs) approved by the European Commission;
  • UK International Data Transfer Agreement / UK Addendum to SCCs;
  • Adequacy decisions where available (e.g., EU-U.S. Data Privacy Framework for Stripe, Inc. and Vercel, Inc., as certified).

7. Data retention

  • Account and chart data: retained while your account is active. Deleted within 30 days of account deletion.
  • Subscription/billing records: retained 7 years to comply with tax and accounting law (varies by jurisdiction).
  • Aggregated analytics: indefinite (anonymous, not tied to you).
  • Support emails: retained up to 3 years for service quality.
  • Marketing consent records: retained while consent is active + 3 years.

8. Your rights (worldwide minimum)

Subject to applicable law, you have the right to:

  • Access the personal data we hold about you;
  • Rectify inaccurate or incomplete data (you can edit birth data directly in the app);
  • Erase ("right to be forgotten") your account and associated data;
  • Restrict or object to certain processing;
  • Portability — receive your data in a structured, machine-readable format (JSON);
  • Withdraw consent for marketing emails at any time;
  • Lodge a complaint with your local data protection authority.

To exercise any right, email hello@astrologyomaha.com. We respond within 30 days (extendable by 2 months for complex requests, with notice).

9. California residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

  • Right to know the categories of personal information collected, sources, purposes and third parties.
  • Right to delete personal information we have collected.
  • Right to correct inaccurate personal information.
  • Right to opt out of sale/sharing. We do not sell personal information and do not share it for cross-context behavioral advertising.
  • Right to limit use of sensitive personal information. The only sensitive PI we process is precise geolocation (city of birth, derived from your input). It is used solely for chart computation, not for advertising or profiling.
  • Right to non-discrimination when exercising your rights.

To exercise these rights, email hello@astrologyomaha.com with subject "CCPA Request". We verify identity via the email associated with your account.

10. Cookies and local storage

We use a small set of cookies and local-storage entries:

NamePurposeType
sb-* (Supabase)Authentication sessionStrictly necessary
astralune.*Local app state: theme, ritual progress, languageFunctional
Stripe cookies (on checkout)Fraud preventionStrictly necessary
ns_birthBirth date, time and city you entered in a calculator, kept in your browser so the reading can be prefilled; removed when you clear site dataFunctional
ph_* (PostHog)Anonymous visitor ID used to count page views and see where people leave the reading flow; not used for advertisingAnalytics

We do not use third-party advertising cookies, tracking pixels or cross-site tracking. You can block or delete analytics storage in your browser settings at any time; the site keeps working without it.

11. Children's privacy

Natal Sky is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact us at hello@astrologyomaha.com and we will promptly delete it. For California residents, the threshold is age 13 in line with COPPA.

12. Security

We apply industry-standard safeguards:

  • TLS 1.3 encryption in transit (HTTPS everywhere);
  • AES-256 encryption at rest in our database;
  • Row-Level Security in our database ensuring each user can only access their own records;
  • Hardware-isolated payment processing (Stripe handles all card data);
  • Principle of least privilege for internal access;
  • Regular security audits and dependency updates.

No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR Art. 33–34.

13. Changes to this policy

We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Material changes will be announced via email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.

14. Contact

Questions, requests, or complaints about your privacy:

  • Email: hello@astrologyomaha.com
  • Subject line: include "Privacy Request" for fastest routing
  • Postal address: available on request via the email above

EU/EEA residents may also lodge a complaint with their national Data Protection Authority. UK residents may contact the ICO. California residents may contact the California Attorney General's office.

© 2026 Natal Sky · Home · Terms of Service · Contact