Pythic Cosmos

Privacy

Last updated 16 October 2026

Who we are

Pythic Cosmos is operated from Quebec, Canada. You must be 18 or older to buy a report or use the free synastry reading.

Person in charge of the protection of personal information: the Privacy Officer, support@pythiccosmos.com. Shop questions use the same address.

What this policy covers

The public calculator, the free synastry reading, the newsletter signup, this site, the /order intake, Stripe checkout, the thank-you page, and the emailed download link for a purchased PDF.

What we collect

• You type: email. For the 18-month Ahead Transit, also birth date and optional time, place, coordinates, and timezone — only what is needed to generate that personalized file. The Year Ahead Transit, the Moon Ritual Guide, and the Retrograde Ritual Kit do not collect birth details.
• Newsletter signup, described below: an email and an optional first name. No birth details. The signup is not part of an order and not part of the free synastry form.
• Free synastry, described below: birth date, time, place, coordinates, timezone, and an optional name for you and for one other person.
• If you use city autocomplete on /order or on the free synastry form, the typed city query is sent to our server, which asks Photon and, if needed, Nominatim (OpenStreetMap). A timezone lookup then asks Open-Meteo and, if needed, timeapi.io. Those services see the search text or the coordinates. They do not see your email, your name, or the birth date. Only the selected place, coordinates, and timezone are used.
• Cloudflare Turnstile checks that a request to the order form, the free synastry form, or the newsletter signup comes from a person. It processes your IP address and browser and device signals for that check. We send the IP address with the check.
• Automatic: ordinary request logs (for example IP and user-agent) on the host.
• Cloudflare Web Analytics is not running. We may enable that cookieless beacon later. It would record aggregate page views, the referring page, country, and device and browser. It sets no cookie and does not do cross-site tracking. We will update this page before turning it on.
• Stripe collects payment details. We do not see full card numbers.

Free synastry

The free synastry reading asks for a birth date, a time, a city, and an optional name for you and for one other person. If the time is left blank, the form sends 12:00. Choosing a city uses the place and timezone lookups above.

When you ask for the reading or the free PDF, both people’s birth date, time, place, coordinates, timezone, and optional names are sent to our server, with your confirmation that you are 18 or older and, when the check is on, a Turnstile token. We use the birth details and names only to compose the reading or the PDF, then discard them. We do not save them in a database, in KV, in browser storage, or against an email. The reading stays on the page until you leave it, and the PDF stays in the file you download. A daily count of readings and free PDFs is kept, with no names, birth details, or IP address in that count.

You must confirm that you are 18 or older before the reading is composed. We keep that confirmation in Cloudflare KV. The record is a random id, the time in UTC, that you confirmed you are 18 or older, whether the call was the on-page reading or the free PDF, and the version of the Privacy, Terms, and Disclaimer pages then posted. It does not include birth details, names, a city, an email, an IP address, or browser details. It expires after 24 months (730 days). The record has none of those identifiers, so we cannot look up one person’s copy of it.

Enter another person’s details only if that person has agreed.

Why

To compose the free synastry reading, generate a purchased PDF, offer that PDF on the thank-you page, email a download link, prevent fraud, and keep payment records for tax and support. Prices are shown in CAD.

Birth-data rule

Birth fields are purpose-limited. For a paid 18-month report they exist for the generate job (natal positions and personal transits), then are discarded. For free synastry they exist only to compose that reading or PDF, then are discarded. They are not written to this browser, not sold, and not used as a marketing list. The Year Ahead Transit, the Moon Ritual Guide, and the Retrograde Ritual Kit never receive them. If that architecture ever changes, this page will change the same day.

What we keep after fulfillment

Order id, email, SKU, amount, timestamps, and payment references. Chart inputs are not on that record. You keep the PDF. The file is also kept so a later download link can be sent, until a full refund deletes it.

When checkout starts, we keep a small encrypted consent record. The encrypted record is stored with the order, and the same encrypted record is written once to Cloudflare KV, keyed by order id. It holds the time in UTC, the SKU, which policies you agreed to and the version of each page, that you confirmed you are 18 or older, and — for the 18-month map — that you affirmed the accuracy of the birth data supplied. Chart inputs, payment details, email, name, and IP address are not stored in that record. Email stays on the order itself so we can send the download link and match a later request for a new one.

Processors

Cloudflare hosts the site (Workers, R2 file storage for purchased PDFs, D1 for orders and the short-lived birth payload of an 18-month report, KV for the checkout consent pointer, the free synastry 18+ record, and the newsletter consent record, and Turnstile for the bot check). Stripe processes cards. Brevo sends the report-ready email, which carries a download link. Brevo is also the processor for the newsletter list “Pythic Cosmos Newsletter” (list id 31), which holds the email and optional first name when you opt in. City lookup uses Photon and Nominatim (OpenStreetMap). Timezone lookup uses Open-Meteo and timeapi.io. See Stripe’s privacy notice.

Outside Quebec

Cloudflare, Stripe, and Brevo are based in the United States, so order, payment, email, and newsletter information may be stored or processed in the United States, and outside Quebec. City and timezone lookups may be processed outside Quebec and outside Canada. Where information is processed outside Quebec, local authorities may be able to access it.

Before personal information is communicated outside Quebec, the factors to assess are the sensitivity of the information, the purpose of the communication, the safeguards (including contractual ones), and the legal framework of the place that receives it, including whether that framework is adequate given the sensitivity of the information.

Cookies / similar tech

See the Cookie note. Cloudflare Turnstile and Cloudflare’s security service may set cf_clearance, an essential security cookie, when the bot check runs. Stripe hosted checkout may set cookies that are essential to taking payment. Cloudflare Web Analytics is not running. If it is turned on, it sets no cookie, so there is no consent banner for it. Fonts are served from this site.

Marketing email

The report-ready email sent through Brevo is transactional. We do not start a newsletter from your order email.

The newsletter signup is a separate form in the site footer. It asks for an email and an optional first name. It does not ask for birth details. The box is unticked. Ticking it is only for the newsletter. It is not tied to a purchase, a report, or the free synastry reading, and it is not bundled with any other consent.

The line at the fields says: “Monthly sky notes from Pythic Cosmos. Unsubscribe anytime.” The form links to this page. The purpose is to send those monthly sky notes. This site does not send the notes. Brevo holds the contact and sends them, on the list “Pythic Cosmos Newsletter” (list id 31).

If you tick the box and send the form, we keep a consent record in Cloudflare KV. The key starts with newsletter: and a random id. The record holds the time in UTC, the page path you signed up from, the exact wording version shown, and the endpoint (/api/newsletter). It does not hold the email, the name, an IP address, or birth details. It expires after 24 months (730 days). Because the record has no email, we cannot look up one person’s copy of it.

You can unsubscribe at any time from a link in a sky note, or by writing to the Privacy Officer at support@pythiccosmos.com.

A newsletter contact in Brevo is deleted on unsubscribe, or after 24 months with no opens.

Retention

Synastry birth details and optional names are not kept. The 18+ confirmation for that reading is kept in Cloudflare KV for 24 months (730 days), then deleted. What that record holds is described under Free synastry.

Birth fields for a paid 18-month report are deleted when the file is generated or the job ends in failure, and if checkout expires or the payment fails. They are not kept with the order.

Each download link lasts about 48 hours, or three successful downloads, whichever comes first. The purchased PDF stays available for a new link until a full refund deletes the file.

Order records (order id, email, product, amount, timestamps, and payment references) and the encrypted checkout consent record are kept. This system does not delete them on a timer. Support messages you send to the address above are kept in that mailbox. The site does not set a deletion date for them.

Your choices

Email the Privacy Officer to ask for access, correction, or deletion of what we still hold, or to withdraw consent. We will tell you what withdrawal affects. It does not erase an order record the purchase still requires. We reply within 30 days. We may ask you to confirm that you control the email on the order. Birth fields already discarded are no longer held. The free synastry 18+ record cannot be found from an email, because that record does not hold one. It is deleted after 24 months (730 days). The newsletter consent record is the same: it cannot be found from an email, and it expires after 24 months (730 days). Unsubscribing removes the Brevo contact.

Privacy incidents

We keep a record of privacy incidents. If an incident creates a real risk of significant harm, we notify the people affected and the Commission d’accès à l’information du Québec, and the Privacy Commissioner of Canada where that law requires it.

Children

The site’s paid reports and free synastry reading are only for people 18 or older. We do not knowingly collect personal information from anyone younger, and we will delete it if we learn of it.

Security

The site is served over HTTPS. Checkout consent records are encrypted before they are stored. Birth fields are redacted from our logs. The operator desk is limited to the operator. Chart engines are not published as public assets.

Changes

We will date a new version at the top of this page when the text or the system changes.

Complaints

Write to the Privacy Officer first at support@pythiccosmos.com. You may also contact the Privacy Commissioner of Canada. Quebec residents may contact the Commission d’accès à l’information du Québec. Residents of British Columbia may contact the Office of the Information and Privacy Commissioner for British Columbia.