Privacy

→ You type it into the newsletter form, one of the "email me" forms (quiz result, lexicon entry, Grimoire, date reminder, natal chart), the checkout, or the account sign-in (we email you a one-time sign-in link). With a newsletter sign-up we also note which form you used and the language of the page, so we can tell which sign-up points are useful. If you arrived through a link on one of Pleroma's social-media profiles, we also keep that link's campaign tag with the sign-up (utm_source, utm_medium, utm_campaign, utm_content, for example instagram / social / grimoire / the post the link was in), so we can tell which posts bring readers. The tag names our profile and our post, never your social-media account, and the site reads it from the web address at the moment you sign up, without storing anything in your browser.

→ To send what you asked for: the welcome emails and the Sunday letter (weekly, or monthly if you choose), the one item an "email me" form requested, your purchases, and sign-in links, in your language.

Consent (Art. 6(1)(a)) for the newsletter. Contract performance (Art. 6(1)(b)) for purchases and your account. Legitimate interest (Art. 6(1)(f)) in knowing which sign-up points and social-media posts work, for the form, page language and campaign tag noted with a sign-up.

→ Stripe, when a payment completes — product, amount, currency, time, the Stripe session and payment IDs, and the email used at checkout. Stripe itself collects your name and billing address for tax and fraud checks; we can see them in Stripe but do not copy them into our own database. A one-off "Keep the lamp lit" support payment is recorded with the amount, currency, time and Stripe IDs, without your email. With a purchase or a support payment started on this site we also record the page you started it from and, if the link you arrived by carried campaign tags (utm_source, utm_medium, utm_campaign), those tags, to see which pages and emails lead to payments.

→ Fulfil the order, keep your downloads available in your account, honour refunds, and comply with tax and accounting obligations. The operator may also write to you once, personally, to thank you for a purchase or a support payment, using the name and email you gave at the Stripe checkout: one message, no marketing, and you are not added to any list.

Contract performance (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)). Legitimate interest (Art. 6(1)(f)) in thanking you once, for the personal thank-you message.

→ Your browser's HTTP headers, in two places. When you subscribe, record a cookie choice, confirm the withdrawal waiver before checkout, or use a tool with analytics switched on, we keep a hash of your IP address and your browser type. Separately, forms, downloads, search, sign-in and the public Lexicon API count requests per IP address (and per email address where a form takes one) to stop abuse; only a hash of that value is stored with the count.

→ Prevent abuse, and keep evidence of the consents you give (newsletter consent, cookie choice, withdrawal waiver). For consent evidence and tool statistics the IP is hashed with a salt that changes every day; for request counters the IP or email is hashed with a secret server-side salt. The raw IP is never stored in our database, and a hash is never linked back to a person.

Legitimate interest (Art. 6(1)(f)) in preventing abuse, and legal obligation (Art. 6(1)(c)) to be able to prove consent (Art. 7(1)).

→ Only after you accept analytics in the cookie banner: Google Analytics 4, and Pleroma's own reading and tool statistics — page path, referrer without query string, the campaign tag of an email link you followed (utm_source, utm_medium, utm_campaign), scroll depth and time on page, coarse tool results (for example a zodiac sign or a quiz path, never a birth date), browser type, a random per-tab ID that disappears when the tab closes, and a random ID for each page view, kept with the record and never stored in your browser. Every page you open is recorded, even if you leave within seconds, not only the pages you read. Google Analytics also receives which button or link you clicked (the button's name, and for a link to another site its address without anything after the question mark), that you started or finished a tool, that you started a checkout (product and price), and that you signed up for the newsletter, never the email address. Separately, Vercel Web Analytics runs without consent: it is cookieless, aggregate-only, and cannot identify you.

→ Understand what's read and what isn't, and improve the site.

Consent (Art. 6(1)(a)) plus ePrivacy Art. 5(3) for Google Analytics 4 and our own statistics; legitimate interest (Art. 6(1)(f)) for the cookieless Vercel Web Analytics.

→ Resend: delivery, bounce and spam-complaint events. Open and click tracking is switched off; links in our emails carry a campaign tag that is counted only in aggregate, never per person. A bounce or complaint on a one-off email to an address that is not on the list (a natal chart, an "email me" delivery, a date reminder) is kept only as a salted hash of the address with the kind of email and the event.

→ Keep the list clean, remove addresses that bounce, honour your unsubscribes, keep the address of anyone who reports an email as spam on a suppression list (address, status, dates) so that we never mail them again, and pause all automated email if unsubscribes or complaints rise (2 unsubscribes or 1 complaint in 7 days, complaints about one-off emails included).

Legitimate interest (Art. 6(1)(f)).

→ You enter it when you save a profile in the Chrism Fast calendar: email, birth date, optional birth time and time zone, display time zone, and whether you want reminders.

→ Calculate your personal dates, serve your private calendar feed, and send the reminder emails you switched on.

Consent (Art. 6(1)(a)). You can delete the profile at any time from the calendar.

→ Messages you send to any @pleroma.guide address, including replies to our emails.

→ Read and answer you. A question you send for the Sunday letter may be answered in a future issue, without your name or address. Replies are answered by a person, never by AI.

Legitimate interest (Art. 6(1)(f)) in answering people who write to us, or contract performance when it concerns an order.

→ You ask for one reminder before a Chrism window or a lunar date: your email, the date and a short label. Your birth data never leaves your browser.

→ Send that one reminder, two days before the date.

Consent (Art. 6(1)(a)). Deleted as soon as the reminder is sent.

→ You type it into the tool, and it stays in your browser's local storage. The natal chart keeps the birth date, time and place (name, coordinates, time zone) you entered (key pleroma.natalChart.v1) so your chart reopens next time; pressing "Recompute with new birth data" removes it. Saturn Return and Chrism Fast keep your birth date, and time and time zone if you give them, only when you tick the box to remember them. The natal chart's birthplace search runs in your browser, against a GeoNames place list (CC BY 4.0) downloaded from this site: what you type is not sent anywhere.

→ Draw your chart and dates, and keep them for your next visit. None of it reaches our database. With analytics consent we count coarse results only, such as the house system used or a zodiac sign, never a birth date. Clearing this site's data in your browser deletes it.

We receive none of this data, so we do not process it, unless you ask for the natal chart by email (next row). Keeping it in your browser is part of the tool you chose to use (strictly necessary storage, ePrivacy Art. 5(3)). A Chrism Fast profile saved to your account is a separate record, described above.

→ You ask for it under the chart (Email me this chart) and tick the box for it. Your browser then sends us your email address and the chart it has computed: the positions of the Sun, the Moon, the planets, the nodes, the Ascendant and the Midheaven (sign, degree, house, retrograde), the principal aspects with their orbs, the house system, and the birth date, time and place name as you entered them. Not the coordinates or the time zone.

→ To build and send that one email, once, in your language. Pleroma stores none of it: the chart and the birth details are used while the email is built and sent, and are not written to our database or our logs. Resend, which delivers the email, keeps a copy of every sent email for 30 days. So that the form cannot be turned against someone else's inbox, we allow one chart email per address per day and a few requests per connection per hour; for that we keep only salted hashes of the address and the IP address (request counters, below). We also keep a record that you gave this consent: the time, a salted hash of your address (not the address), the language, a fingerprint (SHA-256 hash) of the exact consent text you ticked, and a hash of your IP address whose salt changes every day. The record holds no birth data and no chart. If the email bounces or is marked as spam, we note that against the salted hash of the address, so that it counts toward the automatic pause of our mail. With analytics consent we count that a chart was emailed, with the house system and whether the newsletter box was ticked, never the birth data.

Consent (Art. 6(1)(a)), given with the box that sends the chart; it covers this one email. The newsletter is a separate, optional box with its own consent, recorded as for any sign-up. Legal obligation (Art. 6(1)(c)) to be able to prove consent (Art. 7(1)), for the consent record. Legitimate interest (Art. 6(1)(f)) in preventing abuse and keeping our mail deliverable, for the request counters and the bounce and complaint notes.