Your data, plainly

The short version

• We keep what we need to calculate your chart and write your readings: your name, email, birth date, time and place.
• We don't sell your data or show you ads. We share it only with the services that run Horozy (listed below).
• Cookies for statistics (Google) and for measuring our adverts (Meta and TikTok) are optional and off until you say yes. Change your mind any time under Cookie settings at the bottom of every page.
• Questions you ask in Ask aren't stored. We only note that a question was asked, to apply the daily limit.
• Delete your account and everything we hold about you goes with it.

Who we are

Horozy is run by [operator name to be confirmed], the data controller for the information described here. Questions or requests: [contact email to be confirmed].

What we collect, and why

Account

Your email and sign-in details (held by Clerk), so you can sign in and we can send emails you ask for.

Birth details

Name, birth date, time and place, and the chart we calculate from them. This is the whole point of the service: every reading is built from it. Legal basis: performing our contract with you.

Readings

The readings written for you, and what you asked for (a tarot question, for example), so you can open them again any time.

Compatibility

When someone opens your invite link and reveals a reading, both of your charts are used to write it and a copy is saved to each account. Your first name is shown to anyone with your link; you can reset the link from your profile.

Plan and payments

Your plan, and a Stripe customer reference if you've paid. Card details stay with Stripe.

Notifications

If you turn on notifications, your browser's push address for this device. Turn them off and it's deleted.

Free horoscope emails

If you sign up for the daily horoscope without an account, we keep your email address, your sign, and when you signed up and confirmed, so we can send it. To stop the form being abused, we also note each sign-up attempt against a scrambled version of your IP address (hashed with a secret key only we hold), never the address itself. Legal basis: your consent, given when you confirm.

Visit counts

We use Vercel Web Analytics to see which pages are read and which features get used. It doesn't use cookies. It records the page, the site you came from, and your country, browser and type of device. It also counts five moments: signing up for the free horoscope, confirming it, starting a checkout (with the plan and whether it's monthly or yearly), a reading being written (its type only) and a question being asked in Ask (never the question). None of these carry your email, name, birth details or anything you typed. To tell visits apart, Vercel makes an anonymous code from your request and discards it within a day, so it can't follow you over time. Private links (compatibility invites, shared cards, saved readings) are blanked out before anything is sent. Legal basis: our legitimate interest in knowing what's useful.

Optional: Google Analytics

Only if you say yes to analytics cookies. Google Analytics counts visits in more detail than Vercel: which pages you open, roughly how long you stay, and the moments listed below. It sets cookies (_ga, _ga_…) that remember your browser for up to 2 years, so a return visit counts as the same person. Google doesn't store your IP address and keeps these reports for 14 months. Legal basis: your consent.

Optional: Meta and TikTok pixels

Only if you say yes to marketing cookies. These tell Meta (Facebook, Instagram) and TikTok when someone who saw our advert then visits, so we know which adverts work and can show them to people more likely to enjoy Horozy. They set cookies (Meta's _fbp for 90 days, TikTok's _ttp for up to 13 months), and Google's ad cookie (_gcl_au, 90 days) is allowed too. Meta and TikTok can link this to an account you hold with them and use it under their own privacy policies. Like any website, their servers see your IP address and browser when the pixel loads. Legal basis: your consent.

What the optional trackers hear

Only these moments: a page being opened, signing up for the free horoscope, creating an account, starting a checkout (the plan, and monthly, yearly or one-off) and finishing a payment (what was bought and its price). Never your email, name, birth details or anything you type.

Web addresses

Of the part of a web address after the "?", trackers only ever see campaign tags: the labels on our adverts' links that say which advert brought you (utm_source, utm_medium, utm_campaign, utm_term, utm_content) and the ad click codes Google, Meta and TikTok add (gclid, gbraid, wbraid, fbclid, ttclid). Every other part is removed before Google sees the address. Meta and TikTok read addresses themselves, so they aren't used at all on a page whose address, or the address of the page you came from, has any other part. Nothing from Google, Meta or TikTok loads or hears anything on private links (compatibility invites, shared cards, saved readings) or on the sign-in and sign-up pages.

Rough location

A cookie (lum_geo) holding your latitude and longitude to the nearest whole degree (about 100 km), worked out from your IP address. It only decides whether Horozy shows Day or Night. It isn't stored on our servers or linked to your account. Legal basis: our legitimate interest in a site that follows your sky; it's too coarse to identify you.

Cookies

Always on, because the site needs them: Clerk's sign-in cookies, the location cookie above, and lum_consent, which remembers your cookie choice for 6 months (then we ask again).

Off until you say yes: analytics cookies (Google Analytics) and marketing cookies (Meta and TikTok), described above, plus lum_checkout, a note that lasts up to an hour, so those trackers can count that you've gone to pay. Nothing from Google, Meta or TikTok loads until you choose. They're optional: saying no changes nothing about what Horozy does for you.

To change your mind, open Cookie settings at the bottom of any page. If you take a yes back, we delete those cookies from this site and stop the trackers straight away.

Who processes it

These services run parts of Horozy for us, under data processing agreements. Transfers outside the UK and EU rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

Anthropic doesn't use what we send through its API to train its models.

Emails

We email you when a reading is ready and, if you choose, a daily reading. Every email has an unsubscribe link, and you can change both in your profile. Account emails (like sign-in codes) come from Clerk.

If you sign up for the free daily horoscope, you get one email to confirm, then the horoscope each morning. Nothing else is sent until you confirm. Every email has an unsubscribe link at the bottom.

How long we keep it

For as long as you have an account. Delete it from your account settings (or ask us) and your profile, chart, readings, daily readings and push addresses are removed straight away; any subscription is cancelled. Stripe keeps payment records for as long as the law requires.

Free horoscope emails: your email and sign stay until you unsubscribe. Unsubscribing deletes them straight away. If you never confirm, we delete them after a week. The hashed IP records are deleted after a day.

Your rights

Under UK and EU data protection law you can ask for a copy of your data, correct it, delete it, restrict or object to how we use it, or take it elsewhere. Email [contact email to be confirmed] and we'll reply within a month. If you're unhappy with how we've handled your data you can complain to the Information Commissioner's Office (ico.org.uk).

Children

Horozy is for people aged 18 and over.

Changes

If we change this policy in a way that matters, we'll tell you by email before it takes effect.