Privacy Policy

Starwhisper is a free astrology site. You can read most pages without giving us a single piece of information about yourself. We ask for data only when you give it yourself — when you open an account or send us a message.

• We do not sell or rent your data — to anyone.
• Your date of birth is optional and used only to calculate your sign and personal reading.
• Tools like numerology and biorhythms run in your browser; without an account nothing is stored. Oracle conversations and cup readings (subscription) are kept with your account.
• Payments (personal reports, subscription) go through the payment processor Stripe — we never see or store your card details; we keep only the record of the payment.

Starwhisper is a free astrology site — daily, weekly, and monthly horoscopes, a daily oracle, sign descriptions, numerology, biorhythms, moon phases, elements, and compatibility. The content is meant for entertainment and self-reflection. You can read more about us on the About us.

Account data. When you open an account, we store your name, email address, and password. The password is stored encrypted and we never see it in readable form. Your date of birth is optional — you enter it only if you want us to calculate your sign and personal reading.

Messages and inquiries. When you write to us through the form for contact or consultation, you send us your name, email address, optionally a phone number and date of birth, along with the text of your message. We store this data to reply to you and keep the correspondence.

Technical data. When you visit the site, basic logs are automatically created — for example your IP address, browser type, and access time. These are necessary for the site to work properly and stay secure.

Browser tools. Numerology, biorhythms, and similar tools are calculated in your browser. If you are not signed in, the results are not sent to us and nothing is stored.

Conversations with the oracle. When you ask the oracle as a subscriber, we keep your question, the answer you received and your account email — to make readings more consistent and better. The same holds for the cup reading: the photo and its reading are kept, so the same cup always receives the same reading.

Visit counting. We record how many times each page was opened per day — with no cookies, no visitor identifier and no IP address in that record. It is a total per page and day, not a trace of you.

We use data only for clear, limited purposes:

• To manage your account and enable sign-in.
• To calculate your sign and personal reading from your date of birth.
• To respond to your message or process your personal reading order.
• To help you reset your password if you forget it.
• To keep the site secure, stable, and protected from misuse.

We use your date of birth only to calculate your sign and personal reading — for nothing else.

We process your data on one of the following bases:

• Consent — when you voluntarily provide data, for example the optional date of birth when opening an account. You may withdraw consent at any time.
• Performance of the service — processing necessary to provide what you requested, such as managing your account or responding to your inquiry.
• Legitimate interest and security — basic technical logs that keep the site working properly and protected.

• We keep account data for as long as the account exists. When you delete your account, we delete this data too.
• We keep contact-form messages and personal reading orders for as long as needed to respond, deliver and maintain the correspondence.
• We keep technical logs briefly, for the security and proper functioning of the site.
• Oracle conversations and cup photos are kept for at most 12 months, then deleted.
• Daily visit totals (no personal data) are kept for at most 14 months for year-over-year comparison.

We may retain data longer only if required by law.

When you call the oracle by voice, we engage ElevenLabs as an external processor — they run the voice conversation and convert speech to text on our behalf.

The call recording (audio) is kept for at most 30 days, then automatically and permanently deleted. The transcript (text) is kept with your account, the same as written conversations with the oracle, to keep readings consistent and give you access to past calls.

If you'd like your transcript deleted before the usual period ends, contact us through the Contact.

We do not sell or rent your data. We share it only when truly necessary:

• With trusted service providers who help the site run — for example an email-sending service (password reset, replying to your inquiry) — and only to the extent needed for that service.
• When required by law or a competent authority.
• With Stripe, our payment processor — when you buy a subscription or a report, your card number is entered directly with them; that data never reaches us.
• With a language-model processor, through our own broker — when you ask the oracle a question or request your personal-day text, that request is passed to that processor so the answer can be composed.
• With Google (Google Ireland Ltd), our analytics processor — ONLY if you accept the banner: Google Analytics 4 then measures page visits with IP anonymisation. Without your consent, not a single request goes to Google.

Without your consent we use only necessary cookies — the ones that keep your session and enable your account to work. Without them, you would not be able to sign in.

We count visits without cookies and without visitor identifiers — a total per page and day. If we ever introduce tracking that requires consent, we will ask for it first.

Analytics (only with consent): if you accept the banner, we use Google Analytics 4 with IP anonymisation to measure page visits; you can change your choice under “Cookie settings” in the footer.

In accordance with the Law on Personal Data Protection of the Republic of Serbia, you have the right to:

• access — to find out what data we hold about you;
• rectification — to correct or complete inaccurate or incomplete data;
• erasure — to request that we remove your data;
• objection and restriction — to object to processing or restrict it;
• withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise any of these rights, contact us via the Contact page. If you believe your rights have been violated, you may also contact the competent authority for personal data protection.

We take reasonable measures to protect your data — passwords are stored encrypted, and access to data is kept to the minimum necessary. Still, no transmission of data over the internet is completely secure, so we cannot guarantee absolute security. Keep your password confidential and do not share it with anyone.

We may update this policy from time to time. The date of the last change is shown at the top of the page. If we introduce a significant change, we will make an effort to highlight it clearly. This policy is accompanied by our Terms of Use.

For any questions about privacy or your data, write to us via the Contact page. We aim to respond to every inquiry within a reasonable time.

This text has been prepared as a complete and usable privacy policy, but before public launch we recommend a legal review to ensure full compliance with applicable personal data protection regulations.