Natal Sky (the "Service") is an astrology web app operated by the team behind astrologyomaha.com ("we", "us", "our"). We provide personalized natal charts, daily horoscopes, compatibility readings and lunar rituals for entertainment and self-reflection purposes.
This policy explains what personal data we collect, why we collect it, how we use it, and your rights under the General Data Protection Regulation (GDPR, EU/EEA/UK), the California Consumer Privacy Act as amended by CPRA (CCPA/CPRA, USA), and other applicable laws worldwide.
By using Natal Sky you accept the practices described here. If you do not agree, please do not use the Service.
We do not collect or store your payment card details. All payments are processed by Stripe, Inc. ("Stripe"), a PCI-DSS Level 1 certified payment processor. When you subscribe, you enter card details directly on Stripe's payment page. We receive only a tokenized customer ID, your country, and the last 4 digits of your card for receipts. See Stripe's Privacy Policy.
| Purpose | Legal basis |
|---|---|
| Computing natal chart, providing service | Contract performance (Art. 6(1)(b)) |
| Processing payments | Contract performance (Art. 6(1)(b)) |
| Security, fraud prevention | Legitimate interest (Art. 6(1)(f)) |
| Aggregated analytics | Legitimate interest (Art. 6(1)(f)) |
| Marketing emails | Consent (Art. 6(1)(a)) — opt-in |
| Legal compliance | Legal obligation (Art. 6(1)(c)) |
Special category data: Birth date/time/place can in some jurisdictions be considered as identifying information. We treat it with elevated care: stored encrypted at rest, accessible only to you, never shared with third parties for purposes other than chart computation.
We use the following data processors, each bound by Data Processing Agreements:
| Processor | Purpose | Location |
|---|---|---|
| Stripe, Inc. | Payment processing, subscription management | USA, Ireland |
| Supabase, Inc. | Database, authentication | EU (Frankfurt) |
| Vercel, Inc. | Hosting, edge functions | USA, EU |
| Resend, Inc. | Transactional email delivery | USA |
| Cloudflare, Inc. | DNS, CDN, DDoS protection | Global edge |
| PostHog, Inc. | Product analytics: pages visited and steps of the reading flow, sent through our own domain | EU (Frankfurt) |
We may add or change processors as the Service evolves. Material changes will be reflected here with notice.
Some of our processors are based outside the EU/EEA/UK. When transferring personal data outside these regions, we rely on:
Subject to applicable law, you have the right to:
To exercise any right, email hello@astrologyomaha.com. We respond within 30 days (extendable by 2 months for complex requests, with notice).
If you are a California resident, you have additional rights:
To exercise these rights, email hello@astrologyomaha.com with subject "CCPA Request". We verify identity via the email associated with your account.
We use a small set of cookies and local-storage entries:
| Name | Purpose | Type |
|---|---|---|
sb-* (Supabase) | Authentication session | Strictly necessary |
astralune.* | Local app state: theme, ritual progress, language | Functional |
| Stripe cookies (on checkout) | Fraud prevention | Strictly necessary |
ns_birth | Birth date, time and city you entered in a calculator, kept in your browser so the reading can be prefilled; removed when you clear site data | Functional |
ph_* (PostHog) | Anonymous visitor ID used to count page views and see where people leave the reading flow; not used for advertising | Analytics |
We do not use third-party advertising cookies, tracking pixels or cross-site tracking. You can block or delete analytics storage in your browser settings at any time; the site keeps working without it.
Natal Sky is not directed to children under 16. We do not knowingly collect personal data from children under 16. If you believe a child has provided us personal data, please contact us at hello@astrologyomaha.com and we will promptly delete it. For California residents, the threshold is age 13 in line with COPPA.
We apply industry-standard safeguards:
No system is 100% secure. In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours of becoming aware, as required by GDPR Art. 33–34.
We may update this policy occasionally. The "Last updated" date at the top reflects the most recent change. Material changes will be announced via email to registered users at least 14 days before they take effect. Continued use after the effective date constitutes acceptance.
Questions, requests, or complaints about your privacy:
EU/EEA residents may also lodge a complaint with their national Data Protection Authority. UK residents may contact the ICO. California residents may contact the California Attorney General's office.