Your free reading is calculated inside your own browser. Your birth details are not sent anywhere for it.
There are no accounts, no profiles, no cookies, and no tracking or advertising scripts on this site.
If you buy a full report, the placements we calculated are sent to an AI provider to write it, and the finished text is sent to your email address. That is the whole of it.
The controller for the processing described here is LEGAL NAME, BUSINESS ADDRESS, contactable at support@yourdomain.
For the purchase itself, Lemon Squeezy is the merchant of record and handles your payment details as its own controller. We never see your card number.
| Data | Why | Legal basis (GDPR) | Where it goes |
|---|---|---|---|
| Birth date, time, city; a name; a tarot question | To calculate the free reading | Art. 6(1)(b) — to give you what you asked for | Nowhere. Computed in your browser |
| The same details, once you buy | To write the full report | Art. 6(1)(b) — performance of the contract | Anthropic (AI provider) |
| Email address | To take payment and deliver the report | Art. 6(1)(b) | Lemon Squeezy; Resend (email delivery) |
| The finished report | To send it to you | Art. 6(1)(b) | Resend, then your inbox |
| Server and CDN request logs (including IP address) | To run and secure the site | Art. 6(1)(f) — legitimate interest | Vercel (hosting) |
We do not ask for, and have no use for, your address, phone number, or date of birth as an identity document. A birth date given for a chart is used to compute planetary positions and nothing else.
You may type anything into the tarot question box. Please do not put health, religious, sexual, political or other sensitive details in it. If you choose to, you are consenting to it being sent to the AI provider to answer your question (GDPR Art. 9(2)(a)), and you can withdraw that simply by not submitting it.
These providers are located outside the country where we are established, so your data may be transferred internationally. Transfers out of the EEA or the UK rely on the European Commission's Standard Contractual Clauses or an adequacy decision, as applicable to each provider.
sessionStorage so the reading survives the trip to the
payment page, and deleted as soon as you come back.CELESTIA sets no cookies and runs no analytics or advertising scripts,
so there is no consent banner to click. The only browser storage used is the
temporary sessionStorage entry described above, which is strictly
necessary to complete a purchase you started.
Lemon Squeezy's own checkout pages may set cookies; their privacy notice covers those.
If the GDPR or UK GDPR applies to you, you have the right to access, correct, erase, restrict or object to the processing of your personal data, and the right to receive it in a portable form. Because we keep no account and no reading history, in practice the only data tied to you is your order record and your email address — write to support@yourdomain and we will act within one month.
You also have the right to complain to your local data protection authority.
If you are in California, you have equivalent rights of access and deletion, and the right not to be discriminated against for exercising them. We do not sell or share personal information as those terms are defined by the CCPA/CPRA.
CELESTIA is not directed at children and is not for anyone under 18. We do not knowingly process children's data. If you believe a child has sent us something, write to us and we will delete it.
The site is served over HTTPS. Access to a paid report is gated by a short-lived signed token issued only after the payment provider confirms the order. Provider credentials are held as server-side environment variables and are never exposed to the browser. No system is perfectly secure, and we cannot guarantee absolute security.
If this policy changes, the date at the top changes with it. Material changes will be flagged on the home page.