Privacy notice
How Starborn handles your data
Short version: we store the birth details you type, the reading we write from them, and, if you buy the full report, the email address Stripe gives us. No cookies on the public site, no advertising, no analytics. You can delete a reading yourself from its page at any time.
Who is responsible
Nuage OÜ, registry code 16039777, Pelguranna 51-15, 13516 Tallinn, Estonia, is the controller. Contact: hello@starborn.at. This applies to starborn.at and its subpages.
What we collect and why
- Birth details: date, optional time, time zone, optional first name. Used to compute your chart and write your reading. Legal basis: performance of a contract, or steps you ask us to take before one (GDPR art. 6(1)(b)).
- The reading itself: the computed chart and the generated text. Same basis.
- Email address: only if you buy the report, ask for a link by email, or use the recovery page. Used to deliver and recover your link. Basis: contract.
- Payment reference: the Stripe session and payment identifiers and the amount. Card details never reach us. Basis: contract and our legal obligation to keep accounting records.
- A hashed IP address: on each reading, and short-lived server logs. Used to limit abuse and keep the service running. Basis: legitimate interest (art. 6(1)(f)) in security; we cannot identify you from the hash.
We do not profile you for advertising, sell data, or send marketing email. Your reading is for you; we do not use it to train models.
Who processes data for us
- Anthropic, PBC (USA) writes the text of your reading from your computed chart and first name. Data is sent under Anthropic's commercial terms and data processing addendum; transfers to the USA rely on the EU-US Data Privacy Framework and standard contractual clauses. Anthropic does not train on this data.
- Stripe Payments Europe, Ltd. (Ireland) processes payments and acts as an independent controller for the card transaction. See Stripe's privacy policy for their handling.
- Hetzner Online GmbH (Germany) hosts the service in the EU. Encrypted database backups are kept for up to 90 days.
- Our email provider delivers link emails when you ask for one.
How long we keep it
- Free readings that were never purchased: deleted automatically after 90 days.
- Purchased reports: kept for 1095 days (3 years) so your link keeps working, then deleted.
- Any reading: deleted immediately when you use "Delete this reading" on its page, or on request by email.
- Payment records stay with Stripe and in our accounting for the period Estonian law requires (seven years).
- Backups holding a deleted reading expire within 90 days.
Your rights
You can ask for access to your data, correction, deletion, restriction, portability, and object to processing based on legitimate interest. Deletion is self-service on the reading page; everything else, write to hello@starborn.at and quote your reading link or Stripe receipt so we can find it. We answer within one month. You may also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or the supervisory authority where you live.
Cookies
The public site sets one cookie only if you choose a language from the menu, so the choice is remembered; it holds nothing else. One strictly necessary session cookie exists for our own administration login. No analytics, no advertising cookies, hence no cookie banner.
Children
The service is not directed at children under 16 and we do not knowingly hold their data. If you believe we do, email us and we will delete it.
Changes
This notice may change when the service does. The version on this page applies. Questions: hello@starborn.at. See also the terms. Terms.