We only collect what we need to give you your reading. Here's what that means in plain words.
1.What we collect
- Your name and email address.
- Your birth date, birth time (optional) and birth place.
- The report language, the focus area you choose and the questions you write.
- Order and payment status from Stripe. We never receive or store card numbers.
- Basic usage statistics, such as which pages are visited and which buttons are clicked, so we can improve the site.
- Email interactions, for example when you unsubscribe.
2.Please don't include sensitive information
Your questions shape your report, but please don't write about health, religion, ethnicity, sexual orientation or other sensitive matters. We don't need it and don't want to store it.
3.Why we use your data, and our legal basis
- To create your free mini profile and the reports you buy: to take steps before a contract and to perform it.
- To email you one reminder the day after you get a free mini profile, and emails about your purchase: our legitimate interest in following up. Every email has a one-click unsubscribe.
- To send your monthly reports: to perform your subscription.
- To understand how the site is used, through basic statistics: our legitimate interest in improving it.
- To keep bookkeeping records: a legal obligation.
4.Who helps us
We use a few services that process data on our behalf:
- Base44, part of the Wix group: our hosting and app platform. It stores your data and runs the automated text tools that write your reports.
- Stripe: payments.
- Google Workspace: our email.
- OpenStreetMap Nominatim: used only with the name of your birth place, to find its coordinates.
Some of these are based outside the EU/EEA, for example in the USA. Those transfers are protected by the EU Standard Contractual Clauses or by the EU–US Data Privacy Framework.
5.We don't sell your data
We never sell personal data, and we don't use it to build advertising profiles.
6.How long we keep it
Your profile and reports are kept so your personal link keeps working. We delete them when you ask us to, or at the latest three years after your last activity.
Payment records are kept for seven years, as Swedish bookkeeping law requires.
7.Your rights
You have the right to see the data we hold about you, to have it corrected or deleted, to ask us to restrict how we use it, to object to our use, and to get your data in a portable format. You can withdraw your consent and unsubscribe from emails at any time.
Just email info@thecosmicself.com and we'll help. If you think we've handled your data wrongly you can complain to the Swedish Authority for Privacy Protection (IMY, imy.se).
Cosmic Self is run by Sofia Johnson (sole trader, enskild firma), Geijersgatan 44A, 752 26 Uppsala, Sweden, who is responsible for your personal data.
8.Analytics and session recordings
We use the analytics built into our hosting platform to count visits: country, device, the pages you view and the site you arrived from. We also record anonymous sessions — clicks, scrolls and pages viewed — to see where the site is confusing, and we keep a note of which channel brought you to us (a search engine, social media, a link or an email).
We don't use advertising or tracking cookies, we don't build advertising profiles, and we never sell your data. The fields where you enter your details are marked so session recordings leave them out: what you type into our forms is not recorded.
9.Cookies and local storage
We only use what the site needs to work, for example remembering your reading settings and your language. We don't use advertising cookies or trackers.
10.Changes
If we change this policy, the new version appears on this page with a new date.