Your data
Privacy Policy
This describes what we actually do with your information — not what a template says. It is written against the real system: the same tables, the same third parties, the same retention periods the code uses. Last updated 28 July 2026.
Stellamica · Privacy Policy
The short version
We never send marketing email.
You will only ever receive the reading you asked for, your login link, a receipt, or a reply to something you sent us. There is no newsletter, no drip sequence, no promotional list — because there is no list.
We never sell or share your data.
Your name, birth details and chart are not sold, rented, traded or handed to advertisers or data brokers. They go only to the small number of processors listed below who are needed to actually deliver the service.
You can delete everything, yourself, at any moment.
One form, one confirmation email, and every record we hold for your address is destroyed — including your entire Companion conversation history. We cannot recover it afterwards, and neither can we.
We keep as little as we can.
Generated PDFs are emailed and never written to our server. Companion chat history is pruned to the most recent 50 messages. Birth data is kept only because the service genuinely cannot work without it.
Who is responsible for your data
Stellamica is operated by Dr. Amir Mokhtarian. For anything at all relating to your personal data — a question, a correction, a copy of what we hold, or a deletion — write to hello@stellamica.com. We answer within 30 days, and in practice much sooner.
The full legal and business details of the seller are on the Terms page.
What we collect, why, and for how long
| Data | Why we have it, and on what legal basis | How long we keep it |
|---|---|---|
| Name, birth date, birth time, birth place | These are the inputs to the numerology and astrology calculations. Without them there is no reading and no chart — the service is not possible. Legal basis: your consent for the free preview; performance of a contract once you buy a reading or subscribe. | Free preview only: up to 24 months from your last activity, then deleted. Companion subscriber: for as long as your subscription exists, then until you delete your account. |
| Email address | To send you the reading you bought, your Companion login link, and receipts. Legal basis: consent, then contract. | Same as above. |
| Your chosen intent (clarity / love / purpose / peace) | It shapes the emphasis of the reading that gets written for you. Legal basis: consent, then contract. | Same as above. |
| Companion chat messages | So a conversation continues rather than restarting each time. Legal basis: performance of the subscription contract. | Only the most recent 50 messages are kept. Older ones are permanently deleted automatically after every reply. |
| Companion long-term notes | A short, categorised summary (work, relationships, health, major events, current focus) so your coach remembers things you told it months ago without keeping the whole transcript. Legal basis: performance of the subscription contract. | Kept for the life of your account, then deleted with it. This is deliberately a small summary rather than an unbounded archive of everything you have ever said. |
| Payment details | We never see or store these. Card data goes directly from your browser to Stripe. Legal basis: performance of the contract. | Held by Stripe, not by us. Stripe retains payment and invoice records for the statutory accounting periods that apply to them. |
| Login session cookie (sc_session) | To keep you signed in to Companion. It contains a random token and nothing else — no personal data is stored in it. Strictly necessary, so no consent banner is required for it. | 30 days, extending each time you use the site. Deleted immediately when you sign out. |
| IP address | Used in memory, at the moment of the request, for two things only: rate limiting (so one source cannot hammer the service) and looking up your country offline to show an approximate local-currency price. It is never written to our database. Legal basis: our legitimate interest in keeping the service secure and working. | Not stored. Held only for the duration of the request. |
Generated PDFs are not retained. A reading is rendered, emailed to you, and discarded — saving them to disk is behind a switch that is deliberately left off in production.
Who else processes your data
Only these, and only for the part each one does. None of them are advertising companies, and none receive your data for their own marketing purposes.
| Processor | What they do | What they receive |
|---|---|---|
| Stripe | Payments and subscription billing. | Your email address and payment details. Stripe is a separate data controller for payment data; see stripe.com/privacy. |
| Anthropic | The AI that writes your reading and powers Companion chat. | Your chart values, your intent, and — for Companion — your messages. Under Anthropic’s commercial terms, data sent through their API is not used to train their models. |
| Resend | Sends our email (readings, login links, this policy’s deletion confirmations). | Your email address and the content of the message being sent to you. |
| Railway | Hosts the application and the database. | Everything in the table above, at rest, encrypted in transit. |
| Hostinger | Hosts the website itself. | Standard web server logs. No form data passes through it. |
| Google (Analytics) | Anonymous traffic measurement — how many people visit, which pages. | Page views and device/browser information. IP anonymisation is applied. No name, email or birth data is ever sent to Analytics. |
| Google · Apple (Sign-In) | Optional one-tap login for Companion. | Only if you choose that button: the verified email address in the sign-in token. We do not request contacts, calendar, or any other scope. |
Some of these providers operate outside the EU. Transfers are covered by the European Commission’s Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework.
What we never do
No marketing email.
We do not operate a mailing list. Giving us your email to see your preview does not subscribe you to anything, because there is nothing to be subscribed to.
No selling, renting or sharing.
Your data is never sold, rented, traded, or passed to advertisers, data brokers, or partners.
No advertising profiles.
We do not build advertising profiles, run retargeting pixels, or use your birth data for any form of ad targeting.
No hidden retention.
We do not keep a shadow copy after you delete. Deletion means the rows are gone.
Your rights, and how to use them
Under the GDPR you have the right to access your data, correct it, delete it, restrict or object to how it is used, take it elsewhere in a portable form, and withdraw consent at any time. Exercising any of these is free and will never affect the service you receive.
Deletion is self-serve and immediate: use the form below, or — if you are a Companion subscriber — the "Delete my account" option inside your account. Deleting removes your name, birth details, email, chart data, your entire conversation history and the coach’s long-term notes, and cancels any active subscription. It cannot be undone.
For everything else — a copy of your data, a correction, or a question about any of this — email hello@stellamica.com.
If you believe we have handled your data wrongly, you may complain to your national data protection authority. In Italy that is the Garante per la protezione dei dati personali (garanteprivacy.it).
Delete everything you hold about me
Enter the email address you gave us. We will send one confirmation link — we ask for that step so nobody but you can delete your data. Confirming is permanent and immediate.
Cookies and local storage
We use two things stored in your browser. The first is sc_session, a strictly necessary cookie that keeps you signed in to Companion — it holds a random token and no personal data. The second is a brief use of your browser’s local storage to carry your name and email across a Stripe payment redirect, which is cleared as soon as you land back on the site.
Google Analytics sets its own cookies for anonymous traffic measurement. You can block these with any standard browser setting or extension without affecting how the site works.
Children
Stellamica is not intended for anyone under 16, and we do not knowingly collect data from anyone under 16. If you believe a child has given us their information, write to hello@stellamica.com and we will delete it.
Changes to this policy
If we change what we collect, why, or who processes it, we update this page and change the date at the top. Material changes affecting Companion subscribers are also sent by email.