AstroAlkemy Privacy Policy
Last updated: 27 June 2026
1. Data controller
Andrea Simoncini, VAT number 02275470223, Via Battindarno 31, 40133 Bologna (Italy). Privacy contact: [email protected].
2. Data we process
Account data
- Email, name, sign-in provider (email or Google), language preference, newsletter consent.
Data on Persons analyzed
- Name, date, time, place of birth and sex of the "Persons" entered by the User, and the resulting charts/interpretations. This data may concern the User or third parties: in the latter case, the User is responsible for the lawfulness of providing such data.
Payment data
- Payments are processed by Stripe: card data is handled directly by Stripe and is not stored by us. We store the subscription/unlock status and the Stripe identifiers required.
Technical data
- Service logs and IP address (for security and operation), managed through our hosting/CDN providers.
Usage data (analytics) - consent-based only
- With your consent we use Google Analytics 4 for aggregated, anonymous statistics on site usage (page views, navigation events). Before consent is given, the related cookies are not set (Google Consent Mode v2). You can review or withdraw your choice from the cookie banner (the "Cookie preferences" link in the footer). Details are in the Cookie Policy.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the Service (chart calculation, interpretations, PDF) | Performance of a contract |
| Registration and authentication | Performance of a contract |
| Managing payments, subscriptions and unlocks | Contract and legal/tax obligations |
| Sending service emails (confirmation, password reset, etc.) | Performance of a contract |
| Sending newsletters and promotional communications | Consent (revocable) |
| Website usage statistics (Google Analytics) | Consent (revocable) |
| Security, abuse prevention, logging | Legitimate interest |
4. Providers (data processors)
- Supabase - database, authentication and storage (EU data centers).
- Stripe - payment processing.
- Resend - transactional email and newsletter delivery.
- Google - "Sign in with Google" authentication (for those who use it) and, only with consent, statistics via Google Analytics 4 (Google Ireland / Google LLC).
- Hetzner - hosting of the application server (Germany, EU).
- Cloudflare - CDN/proxy and security.
Some providers (in particular Google, for Analytics) may process data outside the EU (USA). In such cases the transfer takes place on the basis of appropriate safeguards (standard contractual clauses / Data Privacy Framework).
5. Retention
Data is retained for as long as necessary to provide the Service and for as long as the account remains active. Upon a deletion request, data is removed subject to any applicable retention obligations (e.g., tax obligations relating to transactions).
6. Data subject rights
You have the right to access, rectify, erase, restrict, port and object to the processing of your data, and to withdraw consent at any time. You can exercise these rights by writing to [email protected]. You also have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali).
7. Minors
The Service is not intended for individuals under 18 years of age. We do not knowingly collect data from minors without an appropriate legal basis.
8. Changes
This policy may be updated; material changes will be communicated through the Service.