What we keep, and what we let go
AstraLetter is built around a simple principle: your reading belongs to you. When you request a reading, your first name, birth date — and birth time and place if you share them — and your question are used to compute your chart and sent to our interpretation service to generate the reading. Free previews are processed and immediately discarded. For paid full readings, we store your chart inputs and question together with the generated reading for up to 12 months so you can re-open it via the secure link in your email — only you and we have access to that link.
Your name, your date, your question
Your chart is computed on our servers from your birth details — real astronomical ephemeris math, not profiling. The question you type is treated as private content: it is used to generate your reading and for nothing else. We never publish, profile, or resell what you ask your chart.
Subscriptions store a birth profile, cloud journal (up to 365 entries) and the latest 200 new questions with answers to restore them across your devices. Collections are retained for up to 400 days after their last write or access renewal. You can export and individually delete entries and questions. Journal entries are not sent for AI readings; questions are sent to our AI provider to generate an answer. The free journal stays local; older local entries are imported only when you choose to. Your personal calendar is calculated from your saved profile and cached for 7 days. Sign-in links sent through Resend expire after 15 minutes and work once.
After email verification, My Astra uses the necessary __Host-astra_session login cookie for 30 days. It has HttpOnly, Secure and SameSite=Lax protection; it is not an analytics cookie. The server stores a hash of the access key, account and session identifiers, email, and session creation and expiry dates. My Astra lists those dates with the generic label “Browser”. You can revoke individual web sessions. Account identity is retained for up to 400 days after the most recent login session was created, or until account deletion. Revoking a web session does not revoke older, separate member access saved on another device.
When you create a compatibility invitation, we store the supplied birth details for up to 30 days. Anyone with the link can see your first name, calculated chart and comparison after entering their own details. You can revoke a new invitation in invitation management on the compatibility page. Invitations created while signed in, including free accounts, or with member access are linked to the account and also removed when it is erased. Anonymous invitations are managed using a private key stored in this browser; losing it prevents management. Older invitations without an ownership record expire on their original schedule. Revocation does not erase results already received or downloaded.
Payments
Payments are processed by Stripe. We do not see, store, or have access to your full card number or banking details. We receive only the minimum information needed to verify and fulfil your purchase (a payment status, the plan you bought, and a payment confirmation token).
Cookies and analytics
Necessary storage keeps the site working. We enable Google Analytics only with your consent. It uses cookies and pseudonymous identifiers to measure public pages and selected checkout steps. We do not send birth details, questions, reading text or access links to it. Ad personalisation is off. You can change your choice below; rejecting stops further measurement.
Your rights
Under EU data protection law you can ask us to access, correct, delete, restrict, export, or object to the use of the data we hold about you — write to hello@astraletter.com. We respond within seven days.
Children
AstraLetter is intended for use by people aged 16 and over. We do not knowingly collect content or information from anyone younger.
Contact
Questions about how your data is handled? Write to hello@astraletter.com. We read every message, usually within a day.
Service providers
AstraLetter uses Stripe (payments), Anthropic (reading generation), Vercel (hosting), Resend (emails) and Upstash (storage). With consent, we also use Google Analytics to measure site usage. The link above explains how Google processes data.
Right to lodge a complaint
You have the right to lodge a complaint with the Slovak supervisory authority for data protection (Úrad na ochranu osobných údajov SR, dataprotection.gov.sk) at any time. We hope you’ll write to us first — but the right is fully yours.
Data controller
The data controller for AstraLetter is Appinara s.r.o. (Company ID: 57 623 252), a company registered in the Slovak Republic. For data protection requests, contact hello@astraletter.com.