Privacy Policy

To calculate a reading we ask for a date of birth, optionally an hour of birth, and optionally a place of birth as free text such as "New York, United States". The place is used to resolve a time zone; we do not ask for and do not want a street address.

If you choose to unlock the full reading or join a waiting list, we collect the email address you type in.

Our servers and our hosting provider also record ordinary technical data when a page is requested: IP address, browser user agent, the page requested, and a timestamp. This is standard web server behaviour and is used for security, rate limiting and diagnosing faults.

Birth details are used for one purpose: producing your chart and your reading. They are stored with the reading so that the private link keeps working when you return to it.

Your email address is used to send you your reading, and to send you one message if you asked to be told when something opens. We do not sell email addresses, we do not rent them, and we do not add you to unrelated mailings.

Technical data is used to keep the site available and to identify abuse. Aggregate usage data tells us which pages people actually read.

Readings and the birth details attached to them are kept for 24 months from the date they were created, so that your link stays usable, and are then deleted.

Email addresses are kept until you unsubscribe or ask us to remove them, and are deleted within 30 days of that request.

Server logs are kept for 90 days.

You do not have to wait for any of these periods. Ask us and we will delete your data sooner.

We keep the list of third parties short on purpose. Each of the following is listed as it applies where enabled — if a service is not switched on for the version of the site you are using, it receives nothing at all.

Hosting and database: our site and its database are operated by infrastructure providers acting as processors on our behalf. They store the data described above; they do not use it for their own purposes.

PostHog, if enabled: product analytics. Receives page views and interaction events. We configure it not to receive your birth details or the content of your reading.

TikTok Pixel, if enabled: advertising measurement. Receives the fact that a page was viewed or a button was clicked, together with the identifiers TikTok sets in your browser. It does not receive your birth details or the content of your reading. It is loaded only where consent to non-essential cookies has been given.

Resend, if enabled: email delivery. Receives your email address and the message being sent to you, so that the message can be delivered.

We do not sell or share personal information with third parties for their own advertising purposes.

Strictly necessary storage is used to keep your session working, remember your light or dark theme choice, and apply rate limits. This does not require consent.

Analytics and advertising technologies, where enabled, are non-essential. They are loaded only after consent where consent is required, and declining them leaves every part of the site working.

You can clear cookies and local storage at any time in your browser settings. Doing so may sign you out of your saved theme preference and nothing more.

You can ask us for a copy of the personal data we hold about you, ask us to correct it, or ask us to delete it. Write to privacy@orientalpower.co and we will act on the request. We do not ask you to justify a deletion request.

You can unsubscribe from any email we send using the link in that email, or by writing to the same address.

We aim to respond to any request within 30 days.

Under the UK GDPR and the EU GDPR you have the right of access, rectification, erasure, restriction of processing, objection to processing, and data portability.

Our legal basis for processing birth details and producing a reading is your consent, given by submitting the form; you may withdraw it at any time by asking us to delete the reading. Our legal basis for sending an email you asked for is also consent. Our legal basis for security logging and fraud prevention is our legitimate interest in keeping the service available.

You have the right to complain to your local supervisory authority. In the UK this is the Information Commissioner's Office.

Under the CCPA and CPRA you have the right to know what personal information is collected, to request deletion, to request correction, and not to be discriminated against for exercising those rights.

We do not sell personal information, and we do not share it for cross-context behavioural advertising in the sense those terms are used in California law. Where an advertising pixel is enabled, it is loaded only after consent, and you can decline it without losing access to anything on the site.

To exercise any of these rights, write to privacy@orientalpower.co.

This site is not intended for anyone under 16, and we do not knowingly collect personal data from anyone under 16. If you believe a child has submitted data to us, write to us and we will delete it.

If we change this policy we will change the date at the top of it. If a change is material — a new third party, a new purpose, a longer retention period — we will say so plainly on the page rather than relying on the date alone.

Privacy questions and data requests: privacy@orientalpower.co. Everything else: hello@orientalpower.co.

Operator: Oriental Power, operated by an independent founder.