Privacy Policy

Effective {{EFFECTIVE DATE}}

Roastrology turns your real birth chart and today's real sky into a daily roast. To do that it handles some personal data. This explains exactly what, why, who sees it, and how to take it back. We collect the minimum and we never sell it.

Who we are

In plain terms: We're the people who run Roastrology, and we're responsible for your data.

Roastrology is operated by {{LEGAL ENTITY NAME}} ("we", "us"), the data controller, incorporated in {{JURISDICTION OF INCORPORATION}}. For any privacy question or to exercise your rights, contact us at privacy@vanishingpoint.dev.

What we collect

In plain terms: Your birth date, time, and place; the chart we compute from it; your roasts; and basic technical data.

Birth details you give us: your birth date, birth time (optional — you can say you don't know it), the UTC offset, and the latitude, longitude, and name of your birth place. Birth time and place can be precise, so we treat them carefully.

Derived data: the natal chart we compute from your birth details, your roast history, and the steering choices you make (which lenses or tones you pick).

Identity: an anonymous random ID stored as a token in your browser. No name, no email, no account is required to use Roastrology.

Approximate location: when you ask us to use your current location, we read the coarse city/region your network suggests (via Cloudflare). It is only stored if you save it as a birth place.

Technical data: standard request information (IP address, device/browser type, timestamps) processed by our hosting provider to deliver and secure the service.

Why we use it (lawful basis)

In plain terms: To make your roast, with your consent for the birth details and necessity for the rest.

We process your birth details on the basis of your consent, which you give when you submit them (we record the moment you consent). You can withdraw consent at any time by deleting your data (see Your rights).

We process the anonymous token and technical data because they are necessary to provide the service you requested and to keep it secure (our legitimate interest in a working, abuse-resistant product).

Who we share it with

In plain terms: A short list of service providers that help generate the roast. We do not sell your data, ever.

We do not sell your personal data and we do not use it for advertising.

We share data only with providers that operate the service on our behalf: Cloudflare (hosting and edge delivery); Anthropic (the AI model that writes the roast — it receives a prompt derived from your chart and the day's signals); and read-only data sources used to gather public "world signals" near a location (geocoding, weather, earthquake, and news/space-weather providers). These receive only what they need.

International transfers

In plain terms: Some providers are in the US; we rely on standard safeguards.

Some of our providers (including Cloudflare and Anthropic) process data in the United States and other countries. Where data leaves your region, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

In plain terms: Until you delete it. Then it's gone.

Our retention rule is simple: we keep your profile, birth details, chart, roast history, and steering events until you delete them, after which they are erased from our database (deletion cascades across all of the above). Standard technical logs are kept for a short period by our hosting provider for security and reliability.

Your rights

In plain terms: Access it, take it, fix it, or make us forget you — right here on this page.

You have the right to access your data, receive a copy in a portable format, correct it, delete it, and object to or restrict its processing. If you're signed in on this device, the buttons below do this immediately. You also have the right to lodge a complaint with your local data-protection supervisory authority.

What we store on your device

In plain terms: One functional token. No cookies, no analytics, no tracking.

Roastrology sets no cookies and runs no analytics or advertising trackers. The only thing stored on your device is a single functional token in your browser's local storage that holds your anonymous session — it is strictly necessary for the app to remember your chart between visits, and it never leaves to a third party. Because we use no non-essential tracking, there is no consent banner to click.

To block automated abuse we use Cloudflare Turnstile, a privacy-preserving bot check that runs without tracking cookies.

Security

In plain terms: Encrypted in transit, hardened headers, and as little data as possible.

All traffic is encrypted in transit. We apply hardened security headers, verify every authenticated request cryptographically, and design for anonymity so there is little to expose. No system is perfectly secure, but we minimize what we hold and how long we hold it.

Children

In plain terms: Roastrology is for people 16 and older.

Roastrology is not intended for anyone under 16, and we do not knowingly collect data from them. If you believe a child has provided us data, contact privacy@vanishingpoint.dev and we will erase it.

Changes to this policy

In plain terms: If it changes materially, we'll update the date and tell you where it matters.

We may update this policy as the service evolves. We'll revise the effective date above and, for material changes, surface a notice in the app.

Contact

In plain terms: Email us. A human (or a suspiciously well-informed cosmos) will answer.

Questions, requests, or complaints: privacy@vanishingpoint.dev.

Your data, right now

In plain terms: If you have a session on this device, take a copy or torch it for good.

You don't have a session on this device. Start a roast to create one, or email us to exercise your rights.