Birth data is sensitive context, even when it is not legally classified the same everywhere.

Effective and last updated: 2026-07-23

What we collect

To calculate a chart, we collect the birth date, optional birth time, birthplace label, longitude, optional latitude, IANA time zone, calculation choices and optional display name that you submit. At checkout we collect a name, email address, billing country and postal code. We also retain an order identifier, payment status, payment reference and limited security audit information.

Why we process it

Birth details are processed only after explicit consent to calculate the free chart and generate a purchased report. Checkout details are used for report delivery, private order access, billing, tax handling, fraud prevention, support and necessary accounting or legal obligations.

Location and time-zone lookup

The optional “Search place” button sends the city-and-country text to OpenStreetMap’s Nominatim service to return coordinates. When a result is selected, those coordinates are sent to TimeAPI.io to suggest an IANA time zone. Manual coordinate and time-zone entry is available if you do not want to use these external lookups. Review the OpenStreetMap Foundation privacy policy and TimeAPI.io privacy information.

Storage and retention

Birth and customer records are encrypted at rest with AES-256-GCM. Unpaid birth details are scheduled for deletion after 24 hours. A PayPal reference submitted for manual review may be retained with its chart for up to 7 days so the payment can be checked. After confirmed payment, raw birth details are scheduled for deletion after 30 days. Generated PDFs and the customer details needed for private order lookup are retained for up to 365 days, then scheduled for deletion. A user may delete the associated birth details, customer details and PDF earlier from the private order page.

Sessions and cookies

The site uses a signed, HttpOnly, SameSite session cookie to keep a chart or order private to the browser session and to protect forms against cross-site request forgery. It is not used for advertising profiling.

Payment and email providers

Card payments are hosted by Stripe when enabled; Stripe may collect a billing address and Energy Archetype does not store full card details. PayPal payment references may be submitted for manual verification. Arbitrum payments are checked against public blockchain data. Report-email delivery may be provided by Resend. Each provider processes data under its own terms and privacy policy.

Deletion and access

Use the delete control on the free chart or private order page for immediate product-data deletion. You may also contact [email protected]. Deletion does not erase public blockchain transactions, payment-provider records or accounting records that must be retained by law.

International users and legal rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, and to lodge a complaint with a regulator. Mandatory rights are not limited by this policy.