Last updated: 14 September 2026
This is a working draft prepared for review. It is not yet legal advice or a final policy. Every placeholder marked [REVIEW: …] must be completed and the whole text approved by a qualified lawyer before publication.
This Privacy Policy explains how Luna Celestia (the "Service") collects, uses, and protects your personal data, and the rights you have over it. It is written to reflect what the Service actually does. Terms not defined here have the meaning given in our Terms of Service.
The data controller for the Service is [REVIEW: legal entity name], with registered address [REVIEW: business address], company registration number [REVIEW: registration number] and VAT number [REVIEW: VAT number] ("we", "us", "our").
For any question about this policy or your personal data, or to exercise your rights, you can reach us by email at [REVIEW: hello@lunacelestia.com].
We collect only the data we need to provide the Service. We do not buy personal data about you from third parties.
Email address. When you capture your email in the quiz, request a magic sign-in link, or subscribe, we store your email address to create your account, sign you in, and send you the emails described below.
Birth data. To calculate your natal chart we collect your birth date and, if you provide it, your birth time and birth place. The birth place is sent to a geocoding provider and stored as its coordinates (latitude and longitude) and IANA time zone. Your birth time is optional; without it we compute a reduced chart.
Quiz answers. We store the answers you give in the onboarding quiz (for example your astrology attitude and any free-text you enter) so we can personalise your reading. Free-text answers are automatically screened so we can respond with care to messages that suggest a crisis; this screening is a duty-of-care check only.
Subscription and payment status. We store your subscription lifecycle and status (trial, active, past due, cancelled, refunded) and the identifiers our payment provider returns. We never see or store your full card number — card payments are handled entirely by our payment provider.
Sign-in and session data. Sign-in is passwordless: we email you a single-use magic link and, once you use it, set a signed session cookie in your browser so you stay logged in. This cookie is strictly necessary to keep you signed in.
Content we generate. We keep the readings and reports generated for you, together with a limited audit record of how each was produced, so we can show your history and improve quality and safety.
To provide the Service you asked for — creating your account, signing you in, computing your natal chart, and generating and delivering your readings and reports. Legal basis: performance of a contract with you.
To send transactional messages you need — your magic sign-in link, payment receipts, the trial-ending reminder, and, if you are subscribed, your daily horoscope email. Legal basis: performance of a contract and our legitimate interest in operating the Service. You can unsubscribe from the recurring daily email at any time using the link in every such email or from your account settings; the trial-ending reminder is a necessary billing notice.
To take care of your safety — screening free-text intake for signs of crisis so we can respond responsibly. Legal basis: our legitimate interest in the safety of our users.
To comply with legal obligations, including tax and accounting duties around your payments, and to establish, exercise, or defend legal claims. Legal basis: compliance with a legal obligation and our legitimate interests.
We use a single strictly-necessary session cookie to keep you signed in after you use a magic link, and we store a small preference locally in your browser (such as your chosen language and whether you accepted the cookie notice).
We do not use any advertising or analytics trackers. There are no third-party advertising cookies, no analytics or behavioural-tracking pixels, and no ad networks on the Service. We do not sell or share your personal data for advertising.
We share personal data with a small number of processors strictly to run the Service. Each acts on our instructions under a data-processing agreement, and we share only what each needs.
Anthropic — generates your readings and reports from your chart data. We send the astrological inputs needed for the reading, not your identity or contact details.
Resend — sends our transactional and daily emails. It processes your email address and the message content.
OpenCage — geocodes your birth place into coordinates and a time zone. It processes the place text you enter.
Paddle — processes payments as our Merchant of Record. It handles your payment details and billing information; we receive only your subscription status and the identifiers needed to manage it.
Hetzner — hosts the Service on servers located in the European Union.
Our hosting is in the European Union. Some of our processors are established outside the EU/EEA, so providing the Service may involve transferring your data internationally.
Where data leaves the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses (or an adequacy decision where one applies), so your data keeps an equivalent level of protection. You can ask us for more detail about these safeguards.
We keep your personal data only as long as we need it to provide the Service and to meet our legal obligations. Your account and its associated data are kept while your account is active.
When you delete your account it is first deactivated and then permanently erased after a short grace period (30 days), after which we also ask our email provider to remove your contact. We may retain the minimum records required by law — for example billing and tax records — for the period the law requires, even after your account is deleted.
Subject to applicable law, you have the right to access your personal data, to correct it, to erase it, to restrict or object to certain processing, and to data portability. Where we rely on your consent you can withdraw it at any time without affecting prior processing.
You can edit your birth data and communication preferences, and delete your account, directly from your account settings — account deletion is built into the Service. To exercise any other right, contact us at [REVIEW: hello@lunacelestia.com] and we will respond within the time the law allows.
If you believe we have not handled your data properly, you have the right to lodge a complaint with your local data-protection supervisory authority.
We use appropriate technical and organisational measures to protect your data, including encrypted connections, passwordless sign-in with single-use links, and limiting access to those who need it. No method of transmission or storage is completely secure, but we work to protect your data and to respond promptly to any incident.
The Service is for adults only and is not directed at anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you.
Questions about this policy or your data? Email us at [REVIEW: hello@lunacelestia.com].
This policy and our processing of your personal data are governed by the laws of [REVIEW: Slovenia / the EU], without prejudice to the mandatory data-protection rights you have in your country of residence.