Privacy Policy for Astrolabys

1. App Identification & Introduction

This Privacy Policy explains how Astrolabys ("we", "us", or "our"), accessible at https://astrolabys.com, collects, uses, protects, and handles your information when you access and use our application and associated services.

Astrolabys is an astrological processor and visualizer providing real-time 2D birth charts and 3D solar system rendering. We are deeply committed to protecting your privacy and transparently disclosing our data practices.

2. What Data We Collect

We only collect the data necessary to provide and synchronize your astrological calculations. Specifically, we collect:

A. Information from Google OAuth Consent Screen

When you voluntarily connect the optional Google Drive Cloud Sync feature, we request authorization via Google OAuth and receive:

• Your Google Email Address and User ID (via email scope): Used exclusively to authenticate your identity, establish your user session, and associate your cloud sync credentials.
• Basic Profile Information: Basic account identifier provided by Google to verify authentication status.
• Google Drive Application Data (via https://www.googleapis.com/auth/drive.appdata scope): Grants access exclusively to a hidden, private application folder created by Astrolabys within your personal Google Drive. Astrolabys cannot view, access, modify, or delete any of your other personal files, folders, documents, photos, or data in Google Drive.

B. Astrological Chart Data

When you create and calculate astrological charts in Astrolabys, you may input:

• Names or Labels: Person name or custom chart title.
• Birth Date and Time: Exact date, hour, minute, and second of birth.
• Geographic Location: City name, country, latitude, longitude, and timezone offset.
• Chart Preferences: Settings such as selected house system, zodiac system, and calculation limits.

By default, this data is processed entirely locally within your browser using astronomical algorithms (Swiss Ephemeris WebAssembly). It is saved locally on your device in your browser's local storage (IndexedDB/localStorage) unless you choose to sync with Google Drive, or to send a chart to Astrolabys AI (see section 5).

C. Technical & Analytics Data

We use Umami, a privacy-first, cookieless web analytics service, to collect aggregate, anonymous statistics (such as page views, general device type, and whether 2D or 3D mode was rendered). We do not use tracking cookies, we do not collect unique device identifiers or IP addresses, and we do not track you across other websites.

3. Why We Need It & How We Use It

We use the collected information strictly for the following purposes:

• Google Account Authentication: We use your Google email address and authentication tokens solely to authenticate your account and manage your secure Cloud Sync session.
• Cloud Chart Synchronization: We use the restricted Google Drive app-data folder (drive.appdata) to write, read, and synchronize your astrological charts as JSON files so you can access your saved charts seamlessly across multiple devices.
• Astrological Calculations: Birth dates, times, and geographic coordinates are used strictly to calculate planetary positions, house cusps, and aspects.

4. Google API Services User Data Policy (Limited Use Disclosure)

Astrolabys's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy , including the Limited Use requirements.

5. Data Sharing & Disclosure

We do not disclose your data to third parties, except in the following limited circumstances:

• Your Personal Google Drive: When you enable Cloud Sync, your chart files are stored directly in your own personal Google Drive account. Astrolabys does not operate centralized database servers storing your personal charts.
• Cloudflare Infrastructure: We utilize Cloudflare Pages and serverless Workers (Cloudflare KV) as our hosting and secure token relay. These serverless functions only hold the encrypted OAuth token during active synchronization and do not store or log your chart contents.
• At Your Request, Astrolabys AI: Astrolabys can be shown inside Astrolabys AI (https://ai.astrolabys.com), a separate service. There, nothing is sent from Astrolabys until you press the button Astrolabys AI places in it (for example «Разобрать эту карту»). Then, and only then, the chart open at that moment is sent to that page: its name, birth date and time, place and coordinates, and any layer open with it (prognostics, partner, relocation). From then on it is handled under the Astrolabys AI privacy policy, including by its AI provider. Your other charts are not sent.
• Legal Requirements: We may disclose information only if required to do so by law or in the good-faith belief that such action is necessary to comply with applicable legal processes.

6. Data Retention & Storage

• Local Browser Data: Charts stored in your browser remain on your device until you manually delete them from the Chart list or clear your browser site data.
• Google Drive Data: Charts synchronized to your Google Drive app-data folder remain in your Google account until you delete them or remove the app data in your Google Drive settings.
• Authentication Tokens: OAuth tokens held in Cloudflare KV exist only to sustain your sync connection. When you click "Logout" in the Settings dialog, the token is immediately deleted and invalidated.

7. Data Deletion & How to Request Deletion

You have complete control over your data. You can delete your information and revoke permissions at any time through the following steps:

1. Delete Charts from the App: Open the Chart list in Astrolabys, select any chart, and click the Delete button. To delete all local data, clear your browser's cookies and local storage for astrolabys.com.
2. Disconnect Google Drive (Delete Auth Tokens): Open the Settings dialog in Astrolabys and click Logout under the Cloud Sync section. This immediately removes and invalidates your stored Google Drive access tokens.
3. Delete Synced Data from Google Drive: Go to Google Drive on your desktop, click the Gear icon (Settings) > Settings > Manage Apps > find Astrolabys > click Options > select Delete hidden app data.
4. Revoke Google Account Access: You can revoke Astrolabys's access to your Google account at any time by visiting Google Account Security - Third-party apps and selecting Astrolabys > Remove Access.
5. Request Manual Data Deletion: If you wish to request the manual deletion of any account associations, logs, or cached records, please send an email to astrolabys@gmail.com with the subject "Data Deletion Request". We will process and verify your request within 30 days.

8. Security of Your Information

We implement industry-standard security measures to safeguard your information, including HTTPS / TLS encryption for all data in transit, OAuth 2.0 PKCE protocols for Google authorization, and restricted API scopes (drive.appdata) ensuring no access to personal drive files.

9. Children's Privacy

Astrolabys is not intended for children under the age of 13. We do not knowingly collect or solicit personal information from children under 13.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable legal requirements. The updated policy will always be accessible at https://astrolabys.com/privacy.html with an updated effective date.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: astrolabys@gmail.com
• Telegram: https://t.me/astrolabys
• Website: https://astrolabys.com