Privacy Policy
Stellar Astrology, Stellar Tarot and Stellar BaZi
Last updated: 8 October 2026
The short version
- Your charts are calculated in your own browser. Some features send chart positions to our servers to work them out, but we don't store them there unless you sign in and save.
- If you sign in, we store your charts, readings and notes so they follow you between devices.
- We never sell your data, never use it for advertising, and never send your birth details to AI services.
- We use privacy-friendly analytics with no tracking cookies.
- You can see, export, correct or delete your data at any time.
This summary is here to help and isn't part of the Policy. The full Policy below is what applies.
1. Introduction and Data Controller
1.1 This Privacy Policy explains how Lucky Media LLC, an Oregon limited liability company trading as Creator Apps, with its address at 5441 S Macadam Ave, Ste R, Portland, OR 97239, USA ("we", "us" or "our"), collects, uses, discloses and protects personal information in connection with Stellar Astrology (stellarastro.app), Stellar Tarot (tarot.stellarastro.app) and Stellar BaZi (bazi.stellarastro.app) (together, the "Services").
1.2 For the purposes of data protection law, we are the controller of the personal information described in this Policy. Privacy enquiries may be sent to create@creatorapps.app.
1.3 Terms defined in our Terms of Use have the same meaning in this Policy.
2. Information We Collect and Why
2.1 We collect the following categories of information for the purposes stated:
| Information | Examples | Purpose |
|---|---|---|
| Birth details | Date, time and place of birth, coordinates, time zone, and the name or label given to a chart, for you or any other person you add | To calculate charts and readings |
| User writing | Journal entries, notes on tarot readings, questions entered into a tarot reading, saved readings | To store them for you |
| Account details | Email address and account identifier | To sign you in and synchronise your data |
| Current location, only if you choose | Your device's location when you select "Use my location" | To display the sky from your present location |
| Record of agreement | The version of the Terms you accepted, and when | To maintain a record of our agreement |
| Plans and purchases | Your plan, chart spaces, decks owned, gift codes redeemed (with the name to which the code was issued), and payment records from Stripe: amount, date, email address, customer reference | To provide what you have purchased, and for tax and accounting purposes |
| Reviews | Deck rating, review text and the display name you choose | To display your review to others |
| Referral code | The partner code in a referral link you followed | To credit the referring partner |
| Usage and security data | IP address, the feature requested and when, browser type | To operate the Services and prevent scraping and abuse |
| Anonymous usage counts | That a tarot reading was performed with a given deck; page views counted without identifying you | To calculate artists' royalties and understand which features are used |
2.2 Location. We use your device's location only if you select "Use my location" and grant permission when your browser requests it. It is used to display the sky from your present location, is saved with your settings (and synchronised if you are signed in), and may be changed or cleared at any time. You may also withdraw the permission in your browser. Otherwise, the only locations we hold are those you enter, such as birthplaces.
2.3 Charts of other persons. Charts you save for other persons are stored with your own charts, in the same manner, and are not used for any other purpose.
2.4 Sensitive information. Birth details are not a special category of personal data under most laws. However, journal entries and notes may contain any information you choose to enter, and you should avoid recording anything you do not wish to be stored. We do not access them except at your request for support, or where required by law.
3. Processing on Our Servers
3.1 Charts are calculated in your browser using an open-source astronomy library. The following features require our servers:
- Lucky days and certain forecast features. Your browser sends the planet and angle positions of your chart to our server, which calculates the result and returns it. The positions are not stored.
- Written interpretations. When you open a reading, your browser requests the entries that correspond to your chart (for example, "Moon in the 4th house"). We log the account or IP address making the request, and the time, to prevent scraping. These logs are deleted after 2 days, or after 90 days in the case of records of suspected abuse.
- Place search and maps. When you search for a birthplace, the text you enter is sent to a place-search provider, and Atlas loads map images from map providers (see section 5). These providers receive your IP address but not your chart.
3.2 We do not send your birth details to any artificial intelligence service or third-party astrology service.
4. Storage of Your Information
4.1 On your device. If you do not sign in, your charts, settings and notes remain in your browser's local storage and are not sent to us, except as described in section 3.
4.2 In our database. If you sign in, your data is synchronised to our database, hosted by Supabase. Access controls ensure that each account can read only its own records. Data is encrypted in transit and at rest.
4.3 With Stripe, for payments and subscriptions.
4.4 Sign-in. We send you a sign-in link and a one-time code by email, either of which may be used. We do not create or store passwords. Moving between the Services signs you in using a one-time link.
4.5 Share links. If you share a chart using a Stellar share link, the birth details of that chart are contained in the link itself. Any person with the link can view them, and our servers briefly process the link to display a preview. You should share only charts you are comfortable sharing.
5. Disclosure of Information
5.1 We do not sell personal information, and we do not share it for advertising. We disclose personal information only to the following service providers, which process it on our behalf:
| Provider | Function | Information received |
|---|---|---|
| Supabase | Database, accounts, sign-in emails | Your account and synchronised data |
| Stripe | Payments and subscriptions | Payment and billing details |
| Vercel | Hosting, privacy-friendly analytics | Requests to the Services, including IP address |
| OpenFreeMap, Esri (ArcGIS) | Map images in Atlas | IP address, map area viewed |
| OpenStreetMap Nominatim, Open-Meteo | Place search | IP address, the place name entered |
| jsDelivr | Delivery of software libraries | IP address |
| Resend | Sign-in and service emails | Email address |
| Porkbun | Hosting of our email inbox | The contents of any email you send us |
5.2 Partners and artists. Partners who refer users to the Services see counts and totals, and email addresses in masked form (for example, ne···@gmail.com). Artists see the number of readings and sales of their decks, but not who made them. Neither receives birth details, readings, notes or payment details.
5.3 Legal requirements. We may disclose information where required by law, or where necessary to protect the safety of any person or the security of the Services.
5.4 Business transfers. If the Services are transferred to another owner, your information would be transferred to that owner subject to this Policy, and we would notify you in advance.
6. Legal Bases for Processing (UK and EU)
Where the UK or EU General Data Protection Regulation applies, we rely on the following legal bases:
- Performance of a contract: to provide the Services and any purchase.
- Legitimate interests: to secure the Services, prevent scraping and fraud, understand usage in aggregate, and operate our referral and artist programmes.
- Legal obligation: to keep tax and accounting records.
- Consent: where we request it, such as for optional emails or referral tracking where consent is required. You may withdraw consent at any time.
7. Retention
7.1 We retain personal information for the following periods:
| Information | Retention period |
|---|---|
| Charts, readings, journal entries, notes | Until you delete them or your account |
| Account details | Until you delete your account |
| Reviews | Until you delete them or your account |
| Payment and commission records | As long as tax law requires, usually 7 years |
| Security and rate limit logs | 2 days, or 90 days for suspected abuse |
| Referral code in your browser | 60 days |
| Record of agreement to the Terms | For the life of your account, then as long as needed for legal claims |
| Information on your device | Until you clear your browser storage |
7.2 When you delete your account, we delete your synchronised data within 30 days, except records we are required by law to retain. Backups are overwritten within 30 days.
8. Your Rights
8.1 Wherever you live, you may request that we:
- provide access to the personal information we hold about you, including a copy in a portable format;
- correct inaccurate information;
- delete your account and data;
- restrict or object to our processing, and withdraw any consent you have given.
8.2 You may delete charts and readings yourself within the Services at any time, and delete your account in your account settings. Other requests may be sent to create@creatorapps.app. We will respond within 30 days, free of charge. We may need to verify your identity.
8.3 Authorised agents. You may authorise another person to make a request on your behalf, in which case we will ask for proof of that authorisation.
8.4 Appeals. If we decline a request, we will explain why, and you may appeal by replying to our response. We will respond to an appeal in writing within 45 days.
8.5 Complaints. In the UK and EU, you may complain to your data protection authority. In Australia, you may complain to the Office of the Australian Information Commissioner; in New Zealand, to the Office of the Privacy Commissioner; and in Canada, to the Office of the Privacy Commissioner of Canada.
9. Notice to United States Residents
9.1 Residents of California and other US states with consumer privacy laws (including Oregon, Colorado, Connecticut, Virginia and Texas) have the rights described in section 8. We do not sell personal information, do not share it for targeted advertising, and do not use it for profiling that produces legal or similarly significant effects. We honour Global Privacy Control signals as a request to opt out. We will not discriminate against you for exercising your rights.
9.2 In the preceding 12 months we have collected the following categories of personal information, as defined in California law, for the purposes in section 2, and disclosed them only to the service providers in section 5:
| Category | Collected | Examples |
|---|---|---|
| Identifiers | Yes | Email address, account identifier, IP address |
| Customer records | Yes | Billing records held by Stripe |
| Characteristics of protected classes | Yes | Date of birth, as part of birth details |
| Commercial information | Yes | Plans and decks purchased |
| Internet activity | Yes | Feature requests and security logs |
| Geolocation | Only if you select "Use my location" | Used to display the sky at your location |
| Sensitive personal information | Only what you choose to record in notes | Not used to infer anything about you |
| Inferences | No | We do not build profiles |
| Biometric, audio and visual, employment, education | No |
10. Children's Privacy
The Services are not directed to children. You must be at least 16 years of age to create an account. We do not knowingly collect personal information from children under 16 who use the Services themselves. If you believe a child has provided us with personal information, please contact us and we will delete it. A parent may add a child's chart to the parent's own account; such information is covered by section 2.
11. International Transfers
We and our service providers are located in, or process information in, the United States and other countries. Where required by law, such transfers are protected by appropriate safeguards, such as the European Commission's standard contractual clauses.
12. Security
We protect personal information using HTTPS throughout, sign-in without stored passwords, per-account access rules on our database, and rate limiting, and we leave payment handling entirely to Stripe. No system is completely secure. If a personal data breach affects you, we will notify you and the relevant authorities as required by law.
13. Changes to This Policy
We may update this Policy as the Services change, and will revise the date at the top when we do. If a change materially affects you, we will notify you in the Services or by email.
14. Contact
Lucky Media LLC, trading as Creator Apps
5441 S Macadam Ave, Ste R
Portland, OR 97239, USA
create@creatorapps.app