Last updated: 15 October 2026
This Privacy Policy explains how Luna Celestia (the "Service") collects, uses, and protects your personal data, and the rights you have over it. It describes what the Service actually does. Terms we do not define here have the meaning given in our Terms of Service.
The data controller for the Service is Primoz Krsevan S.P., at registered address Vrtojbenska Cesta 27, SI-5290 Šempeter pri Gorici, Slovenia, company registration number 8795487000, VAT number SI76484386 ("we", "us", "our").
To ask about this policy, ask about your personal data, or exercise your rights, email us at hello@lunacelestia.com.
We collect only the data we need to run the Service. We do not buy personal data about you from third parties.
Email address. When you enter your email in the quiz, request a magic sign-in link, or subscribe, we store it to create your account, sign you in, and send the emails described below.
Birth data. To calculate your natal chart we collect your birth date and, when you provide them, your birth time and birth place. We look your birth place up in a local copy of the GeoNames places database (© GeoNames, licensed under CC BY 4.0) that runs entirely on our own server, and store the coordinates and time zone; only if a place cannot be found locally do we send the place text to our fallback geocoding provider. Your birth time is optional; without it we compute a reduced chart.
Quiz answers. We store the answers you give in the onboarding quiz — for example your astrology attitude and any free text — to personalise your reading. We automatically screen free text so we can respond with care to messages that suggest a crisis; when the screening matches, we record only the category of concern — never your words — so a member of our team can respond with care; these records are erased with your account, or with an unconverted quiz session under our retention rules.
Subscription and payment status. We store your subscription lifecycle and status (trial, active, past due, cancelled, refunded) and the identifiers our payment provider returns. We never see or store your card number — the payment provider handles card details in full.
Sign-in and session data. Sign-in is passwordless: we email you a single-use magic link and, once you use it, set a signed session cookie so you stay logged in. This cookie is strictly necessary to keep you signed in.
Content we generate. We keep the readings and reports we generate for you, with a limited record of how each was produced, so we can show your history and maintain quality and safety.
To provide the Service you asked for — creating your account, signing you in, computing your natal chart, and generating and delivering your readings and reports. Legal basis: performance of our contract with you.
To send the messages you need — your magic sign-in link, payment receipts, the trial-ending reminder, and, while you are subscribed, your daily horoscope email. Legal basis: performance of our contract and our legitimate interest in operating the Service. You can unsubscribe from the daily email at any time using the link in every one or from your account settings; the trial-ending reminder is a billing notice we send once per trial.
To keep you safe — screening free-text intake for signs of crisis so we can respond responsibly. Legal basis: our legitimate interest in the safety of our users.
To meet our legal duties, including tax and accounting duties around your payments, and to establish, exercise, or defend legal claims. Legal basis: compliance with a legal obligation and our legitimate interests.
To send you our tips-and-offers emails, only if you asked for them by ticking the box at the end of the quiz or confirming your subscription; and, if you buy the natal chart, the week of your personal sky included with the purchase and, afterwards, the occasional offer from us. Legal basis: your consent for promotional emails; for buyers, performance of our contract and our legitimate interest in offering services similar to the one you bought. If you consented to promotional emails, we measure in those emails, using a small invisible image, whether an email is opened, and in all of them which links are clicked, only to understand which emails are useful and improve them: we use this data for nothing else and do not share it. You can unsubscribe at any time with the link in every email.
A third-party AI provider generates your readings and reports from your chart data. We send it the astrological inputs the reading needs — never your identity or contact details.
These readings are entertainment content. They do not produce legal or similarly significant effects for you, so they are not the kind of solely-automated decision-making that would give you a right to human review under data-protection law. Even so, if you have a concern about a reading, contact us and a person will look into it.
We use one strictly-necessary session cookie to keep you signed in after you use a magic link, and we store a small preference in your browser, such as your chosen language and your cookie choices.
We use privacy-friendly analytics (PostHog, hosted in the EU) to understand how the Service is used. By default this runs without cookies or any persistent identifier (legal basis: our legitimate interest in understanding aggregate use of the Service). In regions with opt-in rules we set an analytics cookie only if you accept it in the cookie notice (legal basis: your consent); where an opt-out model applies (such as the United States) cookie-based analytics runs by default and you can opt out at any time via Cookie preferences in the footer. We use no advertising trackers, no behavioural-ad pixels, and no ad networks, and we never sell or share your personal data.
To show you the correct privacy choices for where you are, we determine your country from your IP address using a local copy of the DB-IP IP-to-country database (IP Geolocation by DB-IP, licensed under CC BY 4.0) that runs entirely on our own server — your IP address is not sent to any third party for this lookup.
If you arrive from an advertising or campaign link, we record the campaign identifiers carried in that link (such as UTM tags or an ad click id), together with your IP address and browser type, against your quiz session so we can tell which of our own campaigns work. Legal basis: our legitimate interest in measuring our own marketing. This information stays in our systems and is shared with an advertising platform only with your consent.
We share personal data with a small number of processors, only to run the Service. Each acts on our instructions under a data-processing agreement, and we share only what each one needs.
Anthropic — the AI provider that writes your readings and reports from your chart data. We send the astrological inputs the reading needs, not your identity or contact details.
Resend — sends our transactional and daily emails. It processes your email address and the message content.
OpenCage — our FALLBACK geocoding service, asked only when a birth place cannot be found in the local places database on our own server. When that happens it processes the place text you enter, and nothing else.
Dodo Payments — processes payments as our Merchant of Record. It handles your payment and billing details; we receive only your subscription status and the identifiers needed to manage it.
Hetzner — hosts the Service on servers in the European Union.
PostHog (EU) — privacy-friendly analytics that helps us understand how the Service is used. It runs without cookies or a persistent identifier unless analytics cookies are allowed for you — with your consent in opt-in regions, or by default (until you opt out) in opt-out regions such as the United States; for a signed-in user who has accepted, we associate events with a pseudonymous account identifier only. When analytics are allowed for you, we may also review anonymised replays of how pages are used to fix usability problems; everything you type (email, birth details) is masked and never appears in a replay. We never send it your email, name, or birth data.
We host the Service in the European Union. Some processors are established outside the EU/EEA, so running the Service can involve transferring your data internationally.
When data leaves the EU/EEA, we rely on appropriate safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision where one applies, so your data keeps an equivalent level of protection. Ask us for detail about these safeguards at any time.
We keep your personal data only as long as we need it to run the Service and meet our legal duties. We keep your account and its data while your account is active.
When you delete your account, we first deactivate it and then erase it permanently after a 30-day grace period, after which we also ask our email provider to remove your contact. We keep the minimum records the law requires — for example billing and tax records — for as long as the law requires, even after your account is gone.
Subject to applicable law, you have the right to access your personal data, correct it, erase it, restrict or object to certain processing, and receive it in a portable form. Where we rely on your consent, you can withdraw it at any time without affecting processing we did before.
You can edit your birth data and communication preferences, and delete your account, directly from your account settings — account deletion is built into the Service. To exercise any other right, email us at hello@lunacelestia.com and we will respond within the time the law allows.
If you believe we have mishandled your data, you have the right to complain to your local data-protection supervisory authority.
We use appropriate technical and organisational measures to protect your data, including encrypted connections, passwordless sign-in with single-use links, and access limited to those who need it. No method of transmission or storage is completely secure, but we work to protect your data and to respond quickly to any incident.
The Service is for adults only and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has given us data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make a material change, we update the "Last updated" date above and, where appropriate, tell you.
Questions about this policy or your data? Email us at hello@lunacelestia.com.
The laws of Slovenia govern this policy and our processing of your personal data, without prejudice to the mandatory data-protection rights you have where you live.