Privacy Policy
How birth details, manuscript files and browser preferences are used and deleted.
Controller and contact
m00n Observatory, Parekklisia, Limassol, Cyprus, is the data controller. For privacy requests contact curator@m00n.io. This notice applies to adult customers and adults whose data they are authorised to supply.
Data and purposes
We process the name supplied for the manuscript, delivery email, birth date, birth time (if known), birthplace, latitude, longitude and timezone to calculate, generate and deliver your PDF. We also process order reference, selected edition, price, payment confirmation, consent evidence and limited technical security records. We do not receive or store full payment-card details. Do not submit sensitive health information.
Legal grounds and gifts
Contract fulfilment under GDPR Article 6(1)(b) covers purchase administration, calculations and delivery. Separate consent under Article 6(1)(a) covers astrological transit processing and optional analytics. Statutory accounting obligations use Article 6(1)(c); proportionate fraud prevention and service security use Article 6(1)(f). Consent may be withdrawn at curator@m00n.io without affecting earlier lawful processing. For a gift, the purchaser must obtain the adult data subject’s explicit consent before submitting birth details, including consent to transit analysis. We do not infer consent from payment alone.
Processors and international transfers
Google provides Gemini API narrative synthesis. Paid Gemini API terms state that prompts and responses are not used to improve Google products or models; Google may retain limited safety logs under its data-processing terms. Resend handles transactional messages, recipient addresses and PDF attachments. Revolut handles payments under its own privacy notice and payment obligations. Processing may occur outside the EEA; applicable processor agreements and lawful transfer safeguards, including Standard Contractual Clauses where required, govern such transfers. Provider retention is separate from our server deletion schedule.
Retention and security
Raw calculation inputs, private order files and manuscript PDFs are scheduled for deletion 47 hours after order creation, with a 15-minute cleanup schedule designed to remove them within 48 hours. Download or save your delivered PDF promptly. Minimum financial records (order reference, date, edition, amount, locale and payment status) are retained for applicable statutory accounting periods, then deleted when no longer required. Consent and correspondence needed to establish contractual rights are retained only for the applicable legal period. Access is restricted; emails and copies saved by recipients are outside the server cleanup. If delivery fails before expiry, contact us for resolution rather than sending unnecessary personal information.
Cookies and analytics
Necessary browser storage remembers language and cookie choices. Optional Google Analytics 4 is enabled only after consent, using Consent Mode v2. Birth inputs, email, manuscripts and order references are excluded from analytics. Cookie settings lets you refuse or withdraw analytics consent. Google processes permitted public-page statistics under its applicable terms.
Your rights and complaints
You may request access, rectification, erasure, restriction, portability and, where applicable, object to processing. Withdraw consent at any time by emailing curator@m00n.io. We normally respond within one month, subject to lawful extensions and proportionate identity verification. You may complain to the Cyprus Commissioner for Personal Data Protection at https://www.dataprotection.gov.cy/ or your local EEA supervisory authority. Mandatory retention may limit erasure; we explain any refusal.
Version
Effective 28 October 2026. Material changes will be published here; a new purpose requiring consent will not be introduced through silence.
Weekly ephemeris subscription
With your consent, we store your email, language and consent date privately on our server for the weekly ephemeris dispatch, until you withdraw consent. This separate mailing register is not subject to the 48-hour birth-profile deletion period. Request removal at curator@m00n.io.