Last updated: 18 July 2026
Who we are. CosmicShe (“we”) is operated by [PENDING — legal entity name, address, and registration no.; awaiting accountant decision ~20 Jul 2026]. Contact: hello@cosmicshe.com. For EU/GDPR purposes, we are the data controller for the data described below.
What we collect and why
- Birth dates (and optionally names) you enter into calculators: processed in your browser to compute your reading. We store them only if you request an emailed report, together with your email address. Legal basis: consent.
- A second person’s birth date (compatibility tools): you enter it; we compute and, unless you request an emailed report, do not store it. Please only submit information you may lawfully share.
- Email address: to deliver readings and, with double opt-in consent, our newsletter. Legal basis: consent; withdraw anytime via unsubscribe.
- Purchase data: payments are processed by our payment processor (the merchant of record) — they handle card data; we never see card numbers. We receive the order details needed to fulfill your product.
- Analytics: privacy-respecting usage analytics (Google Analytics 4) to improve the site.
- Comments: if you comment, we store the comment, the name/pseudonym provided, and your email (not published). All comments are moderated.
What we never do
We do not sell personal data. We do not use your birth data for anything other than generating your reading. We do not run third-party advertising (this will be updated if that ever changes).
Retention
Emailed-report data: 12 months, then deleted. Newsletter data: until you unsubscribe. Comments: until you request removal. Orders: per legal accounting requirements.
Your rights (GDPR & similar laws)
Access, rectification, erasure, restriction, portability, objection, and withdrawal of consent — email hello@cosmicshe.com; we respond within 30 days. You may lodge a complaint with your local data protection authority.
Processors
Email platform (MailerLite), hosting (Rocket.net), our payment processor, and analytics (Google Analytics 4) — each under data processing terms.
Transfers
Some processors are US-based; transfers rely on appropriate safeguards (Standard Contractual Clauses or equivalent). [PENDING — confirm the mechanism per processor at compliance review.]
Cookies
[PENDING — cookie policy + consent banner, set per the final analytics/stack at compliance review.]
Children
This site is not directed at children under 16, and we do not knowingly collect their data.