Privacy

Last updated October 4, 2026

No account is needed. Without one, your charts never leave your device.
Signing in is optional and exists only to sync your charts across devices. Then we hold your email address (with Google, also your name) and your charts — nothing else about you.
We don't sell data, show ads, or use tracking cookies.
Deleting your account removes it and every chart stored with it. Deleted charts are kept 30 days so you can restore them, then erased.

Who runs Horoskopos

Horoskopos is operated by Crow & Crone, which is responsible for the data described here. Questions or requests: crow.and.crone.supplies@gmail.com.

Using Horoskopos without an account

Every calculation runs in your browser. Your charts, settings and saved searches are kept in your browser's local storage on your device. We never receive them.

Share links carry a chart inside the link itself, after the #. Browsers don't send that part of an address to any server, so a shared chart goes only where you send the link.
Backup files are files you download and keep.
"Use my location" asks your browser for your position and works out the time zone on your device. It isn't sent anywhere.

If you sign in

You can sign in with Google or with a link sent to your email address. We then store:

Your email address: to identify your account. With Google, also the name on your Google account and Google's ID for it. We don't receive your Google password or anything else in your Google account.
Your charts: what you enter for each one (name, date and time of birth, place, coordinates and time zone), so the same library appears on each device you sign in on. Only charts that changed are sent.
When you signed in, and the time of each change, so the latest edit wins when two devices disagree.
Whether you want update emails, and when you last changed that choice.

We use this to run sign-in and sync, and — only if you ask for them — to send update emails. Otherwise we email you only to send a sign-in link you requested.

If you're in the EEA or UK, the legal basis is that processing is necessary to provide the service you asked for (GDPR Art. 6(1)(b)); for update emails, it's your consent (Art. 6(1)(a)), which you can withdraw at any time.

Google user data

If you sign in with Google, here is exactly what Horoskopos does with Google user data:

What we access: only your Google account's email address, whether Google has verified it, your name, and Google's account ID for you — through the openid, email and profile permissions. We don't request or receive your contacts, files, calendar, Gmail or anything else. Your profile photo is offered to us by the profile permission, but we don't store it.
How we use it: to create and sign you in to your Horoskopos account, to show you which account you're signed in with, and to connect your account to the same library if you also sign in with an emailed link to the same address. If you tick the update-emails box, your email address is also used to send those updates.
Storage and protection: it's stored in our account database on Cloudflare, sent only over encrypted connections, and readable only by our sign-in service.
Sharing: we don't sell, rent or share Google user data with anyone, or use it for advertising, and we don't use it to train AI models. It's handled only by Cloudflare as our infrastructure provider, and by an email delivery service when we send updates you asked for.
Retention and deletion: we keep it until you delete your account from the Cloud sync card on the Charts page, which removes it immediately (see the recovery copies note below). You can also remove Horoskopos's access in your Google account settings at any time.

Horoskopos's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Update emails

If you tick "Email me about new features and offers from Horoskopos" when you sign in, or turn it on later from the Cloud sync card, we'll email you news about new features and offers from Horoskopos. It's off unless you choose it, and we never sell or share your email address. Every update email has an unsubscribe link, and you can switch it off from the Cloud sync card at any time. Signing out doesn't unsubscribe you; deleting your account does. We may use an email delivery service to send these; it receives only your email address, for that purpose.

Cookies and browser storage

Name	What it's for	How long
`hk_session` cookie	Keeps you signed in. Set only when you sign in; sent only to our sign-in and sync service.	60 days from last use, or until you sign out
`hk_oauth` cookie	Protects the Google sign-in step against forgery.	10 minutes
`almanac.*` local storage	Your charts and settings on this device. When signed in, also which changes still need syncing.	Until you clear them or your browser's site data

These are strictly necessary for features you choose to use. There are no advertising or cross-site tracking cookies.

Do Not Track

Horoskopos doesn't track you across other sites or build a profile of you, so there's no tracking for a browser's Do Not Track signal to switch off. We treat every visitor the same whether or not it's set.

Page counts

We count page views with Vercel Web Analytics, which uses no cookies. Before anything is sent, the address is reduced to the name of the page (such as /chart or /voyage). No chart, name, date or place is ever included.

Feedback

If you send feedback, the form delivers your message and, if you give them, your name and email address to us through Formspree. It also includes which part of the app you were on — the page name only. We use it to reply and to improve Horoskopos.

Who processes data for us

Cloudflare runs the sign-in and sync service, stores accounts and synced charts, and sends sign-in emails.
Vercel hosts the website and counts page views.
Google, if you choose Google sign-in. Google will know you signed in to Horoskopos.
Formspree, for feedback you send.
An email delivery service, only if you opt in to update emails — we'll name it here once we use one.

Like any website, our hosts see your IP address and browser details when you visit. They use these to deliver pages and stop abuse; we use your IP address only to rate-limit sign-in attempts. Their logs are kept briefly under their own policies; our service's logs are kept up to 7 days and contain no chart data. These providers may process data in the United States and other countries.

"Buy me a coffee" links to an outside site with its own privacy policy. We receive nothing from it except any support you choose to send.

How long we keep things

Your account and synced charts: until you delete them or the account.
A chart you delete: 30 days (so you can restore it), then erased.
Sign-in sessions: up to 60 days after last use. Sign-in links: 15 minutes, single use.
Deleting your account removes the account, its sessions and every chart at once.

Our database provider keeps point-in-time recovery copies so the service can be restored after a fault. Erased data can remain in those copies for up to 30 more days before it ages out. We use them only for disaster recovery.

Your choices and rights

See and export your charts at any time with "Export backup" on the Charts page.
Correct or delete any chart in the app; changes sync to the cloud.
Delete your account from the Cloud sync card on the Charts page. It takes effect immediately (see recovery copies above).
Stop syncing by signing out. Charts on your device stay; nothing more is sent.

You may also have rights to access, correct, delete or move your data, or to object to its use, depending on where you live. To ask about any of them, email crow.and.crone.supplies@gmail.com or use the feedback form in the app, and include the email address on your account. If you're in the EEA or UK, you can also complain to your data protection authority.

Security

All traffic is encrypted (HTTPS). We store no passwords. Session and sign-in tokens are stored only as one-way hashes, and the session cookie can't be read by scripts on the page.

Children

Horoskopos isn't directed at children under 13, and we don't knowingly let them sign in. If you believe a child has created an account, let us know and we'll delete it.

Changes

If this policy changes, we'll update the date above. If a change would affect how synced data is used, we'll say so in the app first.