Privacy Policy

Last updated: August 2026

Magical Chart ("we", "us") respects your privacy. This policy explains what data we collect, how we use it, and your rights. By using magicalchart.com, you agree to this policy.

1. Who we are (data controller)

The controller of your personal data is Floryne Pierson, sole trader (auto-entrepreneur), SIRET 931 755 557 00010, operating magicalchart.com. VAT not applicable — art. 293 B of the French General Tax Code.

Magical Chart is an online tarot, astrology and numerology experience, for reflection and entertainment. For any privacy question, or to exercise the rights described in section 10, write to wooly@magicalchart.com.

2. Data we collect

• Information you give us: your email address (when you subscribe, save a reading or create an account), and the details you enter for a reading — a first name, a birth date and time, a birth place, or the question you ask.
• Payment data: handled entirely by Stripe. We never see or store your card number; we receive only the email address, the amount and the status of the payment.
• Data generated by your use: the readings produced for you, your saved history, course progress, coins and journal entries, when you use those features. Journal pages are stored under your account for one reason only: so you find them again when you sign in on another device. We do not read or analyse them, and you can export them to a file from the journal page or ask for their deletion at any time.
• Automatic data: IP address, browser type, device, pages visited and interaction patterns, collected through cookies and similar technologies (section 5).
• Ratings and feedback: if you rate a reading you bought, we store the number of stars, any comment you add, and the email tied to that order. The comment is never published under your name; the star ratings may be used, in aggregate and anonymised form only, to show an overall rating for a product (for example "4.8★ from N reviews").

The questions you ask Wooly can be personal by nature. We do not ask for, and you should not provide, data about your health, religion, political opinions, sexual orientation or any other special category under article 9 GDPR.

3. Why we use it, and on what legal basis

Under article 6 GDPR, every use of your data rests on one of these bases:

• Providing your reading — performance of a contract (art. 6-1-b). Without your question and birth details there is no reading to give you.
• Managing your account and subscription — performance of a contract (art. 6-1-b).
• Invoicing and accounting records — legal obligation (art. 6-1-c).
• Sending the newsletter and Wooly's emails — your consent (art. 6-1-a), given when you subscribe and withdrawable at any time via the unsubscribe link in every email.
• Analytics, advertising and session measurement — your consent (art. 6-1-a), collected through the cookie banner and withdrawable at any time (section 5).
• Keeping the service secure and available — our legitimate interest (art. 6-1-f) in preventing abuse, fraud and runaway costs. This covers rate-limiting by IP address and error logging.

4. How long we keep it

• Newsletter contacts: until you unsubscribe. Your address is then kept on a suppression list, on the basis of our legitimate interest, for the sole purpose of making sure we never email you again. You can ask for it to be erased entirely at any time.
• Saved readings: 3 years from the date each one was created, then deleted automatically.
• Account and profile: for as long as your account is active, then 3 years after your last activity.
• Subscription and customer records: for the life of the subscription, then 3 years after the end of the commercial relationship.
• Invoices and accounting records: 10 years, as required by article L123-22 of the French Commercial Code.
• Technical logs (errors, AI usage): 12 months.
• Anti-abuse counters: between 60 seconds and 36 hours, keyed to a one-way hash of your IP address — never the address itself.
• Analytics data: 14 months, Google Analytics' retention setting.

You can ask us to delete your data sooner at any time (section 10), except where we are legally required to keep it.

5. Cookies & similar technologies

On your first visit from the EU, EEA or UK, a banner asks for your choice. Nothing beyond what is strictly necessary to run the site is loaded until you accept, and you can change your mind at any time from the "Pop-ups" and cookie links in the footer, or by clearing your browser data.

The full list of cookies used, with links to each provider's policy, is available from the cookie banner's "Learn more" link on the homepage.

6. Advertising & Google AdSense

We use Google AdSense. Google may use cookies to serve ads based on your prior visits to this and other sites. If you decline cookies, ads run in non-personalised mode. You can manage your preferences at adssettings.google.com or youronlinechoices.com.

7. Analytics

We use Google Analytics and Microsoft Clarity to understand how the site is used and improve it. Clarity may record anonymised interaction replays; the journal and the Wooly chat are masked and are never captured. Ahrefs Analytics measures traffic without writing any cookie.

8. Who else processes your data

We rely on the following providers. Each acts as a processor on our instructions, or as a joint or independent controller where indicated.

• Anthropic (United States) — generates your readings. The question you ask and the birth details you enter are sent to its API to produce your text. Anthropic does not use this content to train its models.
• Supabase — database hosting: accounts, saved readings, subscriptions, course progress.
• Vercel — website and API hosting.
• Stripe — payment processing and subscription management (independent controller for payment data).
• Brevo — sending the newsletter and transactional emails.
• Google — Analytics, Tag Manager, AdSense and Fonts.
• Microsoft — Clarity session analytics.
• Sentry — error monitoring.
• Upstash — anti-abuse counters keyed to a hashed IP address.
• Ahrefs — cookieless traffic measurement.
• Pinterest — advertising measurement, loaded only if you accept cookies.
• Push notifications — handled by our own service worker with a browser Push key, only if you opt in. No third-party push provider is involved: the subscription is stored on our own database and can be revoked from your browser settings at any time.
• Amazon Web Services — storage of the images generated for sharing.

We never sell your personal data, and we never share it for anyone else's marketing.

9. International transfers

Several of the providers above are established in the United States or process data there — in particular Anthropic, Google, Stripe, Microsoft, Sentry and Vercel. These transfers rely on the European Commission's Standard Contractual Clauses and, where the provider is certified, on the EU–US Data Privacy Framework. You can ask us for a copy of the safeguards in place at the address in section 12.

10. Your rights

Under the GDPR you have the right to:

• Access your data and obtain a copy of it;
• Rectify it when it is inaccurate or incomplete;
• Erase it ("right to be forgotten");
• Restrict its processing;
• Portability — receive the data you gave us in a structured, machine-readable format;
• Object to processing based on our legitimate interest, and at any time to direct marketing;
• Withdraw your consent at any time, without affecting what was done before you withdrew it;
• Define directives on what happens to your data after your death (art. 85 of the French Data Protection Act).

To exercise any of these, write to wooly@magicalchart.com. We reply within one month. You can cancel your subscription yourself at any time from your account, and unsubscribe from any email using the link it contains.

11. Automated decision-making

Your readings are written by an AI model, but they produce no decision with a legal or similarly significant effect on you within the meaning of article 22 GDPR. They are offered for reflection and entertainment, and nothing about your account depends on them.

Before a paid reading is sent, we may read it through by hand to check its quality — that the text is complete, coherent and worth what you paid. We are checking the writing, not you: nothing is analysed, profiled or shared beyond that check.

12. Weather on your account page

Your account page shows a globe with the current weather where you are. Your browser's time zone gives an approximate location — a city, never an address — which is sent to Open-Meteo to fetch the forecast. Nothing else goes with it: no name, no email, no account identifier. We do not ask for or use your device's GPS location, and the result is cached in your browser for an hour.

13. Where your birth details go

When you type a birth place into the natal chart, human design or kundli tools, that place name is sent to Nominatim, the OpenStreetMap search service, to turn it into coordinates. Only the text you typed goes with it — no name, no email, no account identifier. The result is used in your chart and is not stored by us beyond your own device.

14. Fonts and libraries loaded from other servers

Some pages load typefaces from Google Fonts, and the astrology tools load two small date-and-timezone libraries from the jsDelivr and unpkg content networks. Loading a file from another server reveals your IP address and browser to that server, which is how the web works for any external resource; nothing about you or your reading is sent with the request.

15. Security

Data travels over HTTPS. Sessions use signed tokens, database access is restricted server-side, and payment details never reach our servers. No system is perfectly secure, but we will inform you and the CNIL as required if a breach ever affects your data.

16. Children

Magical Chart is intended for adults: you must be 18 or over to use the service, as stated in our Terms of Use. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, write to us and we will delete it.

17. Changes

We may update this policy. The date at the top always reflects the current version, and we will tell you about any significant change.

18. Contact

Questions? Write to us at wooly@magicalchart.com. 🐑