Last updated: 25 September 2026 · Applies to astroluma.app
On AstroLuma you can calculate birth charts for free, keep your charts and those of the people close to you in an optional account, and order readings written for you. All three involve intimate information: a date, time and place of birth, sometimes a child's or another person's, and what you tell us about your daily life. This page says what we do with it, where it is kept, for how long, who else has access to it, and how to remove it.
In short: without an account, the charts you save stay in your browser. With an account, they are kept on our server until you remove them or delete the account, and you can export everything at any time. An order is used to write and deliver your reading. We do not sell or trade any data, and we have no newsletter and no mailing list.
The data controller is Camille Marie Astrid Charles Viotte, sole trader established in Mexico, publisher of AstroLuma. Address: Calle Alejandro 3295, Col. Vallarta San Jorge, C.P. 44690, Guadalajara, Jalisco, México. RFC: VICA8805209U4. Full details in the terms of sale. She is responsible for the free tools, the account and orders.
For any question about your data: hello@astroluma.app.
When you calculate a chart without an account. My Birth Chart, My Relationships and the Today page calculate charts in your browser: the date, time and place you enter are not sent to any server, and they never appear in a page's address — not in your browser history, not in a link you might copy or send, and not in our servers' logs. Two requests still go to our server, with no birth data in them:
When you click “Save”, the chart (the name you give it, the date, the time or “time unknown”, the place and its coordinates) is stored in your browser, and only there. The same goes for an explored relationship (both births and the type of bond). After an order, the order page adds the record of your reading there: its reference, the reading ordered, the order date, the expected delivery and the language. From My Account you can export all of this to a file, import it again, or remove it.
When you open an account. The account is free and optional: the tools and the readings work without it. To sign in you give your email address and receive a sign-in link; there is no password. The account keeps:
To send you the sign-in link, we keep your address together with a fingerprint of the link, never the link itself. The link works for 15 minutes, once. To limit abuse, link requests are counted for one hour using a fingerprint of your email address and a fingerprint of your IP address; neither is kept in plain text.
The first time you sign in, if your browser holds charts, relationships or reading records saved without an account, My Account shows them to you and asks what should happen to them. If you choose to transfer them, they are sent to your account, then removed from the browser once they have been checked in the account. If you choose not to keep them, you can first export them to a file, then they are deleted from the browser without anything being sent. Until you choose, nothing is sent, and the question comes back on your next visit.
During a session, your browser keeps a display copy of your library, read from the account. When you sign out, that copy, the session cookie and everything that came from the account are deleted from the browser, and the session is deleted from our server. Charts saved without an account that you did not transfer then reappear in your browser.
When you buy. Payment takes place entirely on Stripe's pages. Stripe collects your name, your email, your country and your card details. We receive from Stripe the payment confirmation, the amount, the currency, your email and Stripe's references for the transaction, never your card number, which we see at no point and store nowhere.
When you fill in the questionnaire. It goes from the order page to our order server. We receive what you write in it:
The first name, the date and place of birth, and your email address are required. Everything else is optional; you may leave a field blank, and the reading will simply be less closely fitted.
When you browse the site. Cloudflare, which hosts the site, receives your IP address and the technical details of each request, as any host does. We measure the site's audience with Cloudflare Web Analytics, our host's measurement tool. For each page opened it records that page's address, the page or search engine you arrived from, the country inferred from your IP address, the type of device and the loading time. It sets no cookie, does not use your browser's storage, recognises you neither from one visit to the next nor on any other site, and never receives what you type into a form. We use no Google Analytics, no advertising pixel and no advertising tracker. On blog articles and on the sample reading pages, the site loads its typefaces from Google Fonts (Google, United States): those pages pass your IP address to Google. The rest of the site calls no outside typeface. What the site keeps in your browser is listed in point 12.
When you write to us. We keep your message and your email address for as long as it takes to reply and deal with your request.
We take no automated decision producing legal effects concerning you. The document is a symbolic reading; it assesses no one.
The reading concerns the personal data of a minor, sent to us by you. In ordering, you declare that you hold parental authority over that child, or have the agreement of the person who does.
That data is used solely to calculate their birth chart and write their document. It is never used for anything else: no profiling, no resale, no reuse for another customer, no publication, not even anonymised, without your explicit written agreement.
If you keep your child's chart in your account, it stays there until you remove it or delete the account, and it is used only for the calculations you ask for.
The reading extracts published on the site come from fictional examples: the people are invented, and only their charts are calculated for real.
This section is for you, whose birth data someone else gave us. We have no way of reaching you, and we have chosen not to give ourselves one: asking for your email address so we could tell you we hold information about you would mean collecting one more piece of data about someone who asked for nothing. So we write it here, on a page you can find on your own.
If you are an adult and someone ordered a synastry — the cross-reading of two charts — here is exactly what we receive: your first name, your date, time and place of birth, and what the person ordering tells us about your relationship. No surname, no address, no phone, no email. That information is used to calculate a birth chart and write a document. Your date, time and place of birth, and what was written about your relationship, are removed on delivery from our order database and its backup copies. They do remain in the production folder until the order itself is erased in full, within 12 months of delivery at the latest. Your first name and the astrological positions calculated from your birth do stay in the delivered document, which is kept for 12 months: your date, time and place are not written in it, but those positions are derived from them (point 9). The person ordering tells us that they have your agreement. We do not verify it — like an astrologer in a consultation, who works with the information they are given: the responsibility for that declaration lies with the person who makes it. What we do guarantee is what we do not take: no surname, no address, no phone, no email.
If someone has kept your chart in their account. A person with an account can keep the chart of someone close to them there: the first name or the name they choose, the date, time and place of birth, and the role they give it (child, partner, ex, friend, family, other), as well as relationships between that chart and others. Those charts stay in their account until they remove them or delete their account, and they are used only for the calculations that person asks for. If it is your chart and you want it taken out, write to us at hello@astroluma.app with enough to find it (the first name and date of birth saved there): once we have checked that the request really comes from you, we remove it from that account.
If you are a child, the situation is different, and that should be said. Your parent is the one ordering, and they exercise your rights while you are a minor: they receive all the information on this page, and the document is written for them, to support you. The day you are old enough to read it, it will be yours too — that is in fact the point. The data in your order is kept for 12 months, because your parent may need us to send the document again.
What you can ask for, at any time: to know what we hold about you, to have it corrected, or to have it erased. One place only: hello@astroluma.app. It is free, we answer within 30 days, and you do not have to give a reason.
The questionnaire has free-text fields. Do not enter health information there (a diagnosis, a disorder, a treatment, medical or psychological care), nor information about anyone's religious beliefs or ethnic origin. We do not need it: our document is neither medical nor educational, and astrology has nothing to say about it.
If you write something of the kind anyway, Camille removes it before anything is sent to Claude and makes no use of it for your reading. For every document, Claude receives a general instruction, the same for all readings, forbidding it to address these subjects — without receiving what you had written, nor even which subject was involved. That information is deleted as soon as it is spotted, from our order database and from its backup copies. Writing a sentence in a free-text field falls short of explicit consent under Article 9(2)(a) GDPR, and we take care not to treat it as such. You can also ask us to delete it straight away.
One person looks after your reading: Camille. She writes it with the help of an artificial intelligence model, Claude (Anthropic), which drafts the document from her method and her interpretation corpus; she rereads and corrects it before sending it to you. No team, no outside writer. Apart from her, only the following technical providers are involved:
We do not sell, rent or trade any data. No data is passed to an advertiser, a data broker or a social network.
AstroLuma is established in Mexico, and several of its providers are established in the United States. If you live in the European Union, your data therefore leaves the European Economic Area.
For each of these providers, here is the mechanism it relies on for those transfers, as that provider publishes it:
You can ask for your questionnaire and your child's data to be erased before that period, at any time, once the reading has been received. We do so within 30 days and confirm it by email. Only the accounting records are kept, because the law requires it. For your account, there is nothing to ask us: you remove a chart or delete the account yourself, from My Account.
The site is served over HTTPS, payment is encrypted end to end by Stripe, and the AstroLuma mailbox is protected by a unique password and two-factor authentication.
For the account, the sign-in link and the session cookie are kept on our server only as fingerprints; no script on the page can read the cookie; and the account only accepts changes coming from astroluma.app pages. Two limits to know about: anyone with access to your mailbox can sign in with the link they find there; and, without an account, the charts saved in your browser can be seen by anyone who uses that browser.
The questionnaire goes straight from the order page to our server, over an encrypted connection (HTTPS). The one exception: if our server cannot be reached when you send it, your email app opens instead. In that specific case, your answers leave in an ordinary email, which is not encrypted end to end and passes through your provider and ours. It is rare, but if it happens you need to know before you write: do not put anything in it that you would not write in an ordinary email.
From My Account, without asking us anything, you can export everything your account keeps to a file, remove a chart, a relationship or a reading record, sign out your other devices, and delete your account. Without an account, the same actions (export, import, remove) apply to what your browser keeps.
You can also, at any time, ask us for:
One place for all of it: hello@astroluma.app. We reply within 30 days at the latest, and usually well before. It is free.
If our reply does not satisfy you, you can refer the matter to a supervisory authority: in France, the CNIL; elsewhere in the European Union, the data protection authority of your country; in Mexico, the national authority competent for personal data protection.
The site sets no advertising cookie, no social network cookie and no analytics cookie: the tool described in point 2 counts page views without setting a single one.
A single cookie exists, and only if you open a session on My Account: al_ses. It keeps your session open for 90 days, extended when you come back, and it is deleted when you sign out. It is only sent to the account's addresses, no script on the page can read it, and it is used for nothing else.
The site also keeps a little information in your browser's storage: localStorage, which lasts until it is cleared, and sessionStorage, which is cleared when the tab closes. This storage stays in your browser and only leaves it through your own actions: the payment reference travels with your questionnaire, and charts saved without an account go to your account if you choose to transfer them. Here is each item:
Each of these items serves a feature of the site that you use, and none is used to track you or to measure the audience. That is why the site shows no consent banner.
One exception, off our site: Stripe's payment pages set their own cookies, needed for the security of the transaction. They are covered by Stripe's privacy policy.
Our readings are for adults. You must be of legal age to order, and to open an account. A child may of course read the document about them — that is even the point, later on — but they cannot buy it.
This policy will change as the service does, in particular when new readings or new account features are offered. The date of the last update appears at the top of the page. If a change concerns you directly and we have your email address, we will tell you.
A question, a doubt, an erasure request: hello@astroluma.app. A real person reads, and answers.