Privacy & Cookies Notice
1. Who is responsible
Ghana
Contact: see the site operator's published contact details
We are the data controller for the processing described here. Where you use this service from the EU/EEA or the UK, the GDPR applies in addition to the data protection law of Ghana (in Ghana, the Data Protection Act, 2012 (Act 843)).
2. What the service does
Access is by invitation: an administrator adds your email address to an access list, you sign in with a one-time code sent to that address, and you then enter birth details for which the service computes an astrological reading. The birth details you submit are saved together with your email address so that your requests can be reviewed and managed.
3. Data we process
| Data | Why | How long |
|---|---|---|
| Your email address. | To check the access list, send one-time sign-in codes and attribute your requests to you. | While you are on the access list; removed when an administrator revokes access or erases your data. |
| One-time sign-in codes. | To verify that you control the email address. | Stored only as a keyed hash for 10 minutes; at most 5 attempts per code. |
| Your sign-in session: a random token (stored hashed), the time, browser type and IP address of sign-in. | To keep you signed in and let us revoke access. | Up to 14 days, or until you sign out or your access is revoked. |
| Birth details you enter: a name or label, date and time of birth, place or coordinates, time zone, and optionally the same for a partner; the page or API used; any question you ask; the time and IP address of the request. | To compute the reading you asked for and to keep a record of your requests linked to your email address. | Kept until you ask us to erase them or your access is removed and erasure is requested. A copy of the generated reading is also held in a short-lived server cache for up to 60 minutes so that repeated views are fast. |
| Your IP address and request timestamps. | Rate limiting and abuse prevention (our legitimate interest in keeping the service available). | Rate-limit counters are kept for at most 60 seconds. Server access logs record the IP address, time, request path, status code and browser type; they are rotated automatically and kept only until the rotation limit is reached (by default the most recent 30 MB). |
What we deliberately do not log: the query string of your requests. Your name, birth date, time and place are therefore not written to the access log; they are stored only in the database records described above.
The readings contain generated interpretations about health, relationships, money and personal safety. They are astrological interpretations derived from the birth details you supply, not records of your actual health or finances. You may use a pseudonym instead of a real name for the subject of a reading; the calculation does not depend on it.
4. Legal basis
- Managing your access, signing you in and computing the readings you request: performance of the service you asked for (GDPR Art. 6(1)(b)), and for the interpretive content you choose to generate, your consent given by submitting the form (Art. 6(1)(a)).
- Keeping a record of requests, rate limiting, security and logging: our legitimate interests (Art. 6(1)(f)) in operating, securing and accounting for the service.
5. Sharing and transfers
We do not sell or share your data, use advertising, analytics or tracking services, or embed third-party content. Sign-in codes are delivered through our email provider, which processes your address only to deliver the message. The service and its database run on infrastructure operated for us by a hosting provider, which processes data only on our instructions. Downloaded reports are saved on your own device under your control.
6. Cookies and local storage
This site uses one strictly necessary cookie, lae_session, which keeps you
signed in (HttpOnly, Secure, SameSite=Lax, lifetime up to 14 days). It is required to provide
the service you asked for and is therefore exempt from consent requirements; no advertising, analytics or
tracking cookies are used, so no cookie banner is shown. If you install the app (Progressive Web App), your
browser stores the application shell (pages, icons and the offline page) locally so the app opens offline.
Your readings are not stored by the app; they are fetched from the server each time. Your
browser's history may keep the addresses of readings you generated, which include the birth details you
entered. Use a private window or clear your history and site data to remove them.
7. Children and other people's data
The service is intended for adults. Do not enter another person's birth details unless you have their permission, or parental responsibility for a child. If you believe someone has used your details without permission, contact us and we will investigate and erase the records where appropriate.
8. Your rights
Subject to applicable law you may request access to, rectification or erasure of your personal data, restriction of or objection to processing, and portability. Administrators can erase every record held for an email address (access list entry, sessions, codes and saved requests) on request. You can also complain to a supervisory authority (in Ghana, the Data Protection Commission; in the EU/EEA or UK, your national data protection authority). Contact us using the details in section 1.
9. Security
Connections are encrypted (TLS). Sign-in codes and session tokens are stored only as keyed hashes. The service runs in hardened, read-only containers as an unprivileged user, validates every input and applies rate limits. No security measure is perfect; use a pseudonym for the subject of a reading if you prefer not to transmit a real name.
10. Changes
We will post any changes to this notice on this page and update the effective date.