Privacy policy

1. Who we are

LunaLoom provides personal astrology readings, calculated from your birth details and written with the help of AI, delivered as PDFs. The operator is based in Lithuania. The operator’s legal name, postal address and privacy contact details are pending and must be added before paid orders open.

2. Information we use

To prepare a reading, we process the first name, birth date, optional birth time and birth place you provide. We use your email address to send you the finished PDF, and our payment provider processes your payment details. Please only provide another person’s details if you have permission to do so.

3. How we use your information

We use your birth details to calculate your chart and write the reading you request, and your email address to deliver it. Processing needed to provide the requested service is based on performance of a contract or steps you ask us to take before a contract. Optional analytics and advertising processing are based on your consent.

We may process limited technical information, such as IP addresses and request logs, to prevent abuse, protect the service and diagnose failures, based on our legitimate interest in operating a secure service.

4. AI generation and service providers

Your birth date, time and place (with its coordinates) are sent to FreeAstroAPI to calculate your chart. The calculated chart and your first name are sent to an AI model through OpenRouter to write your reading. Your email address is not included in either. AI output can contain errors; readings are for reflection and entertainment, not decisions with legal or similarly significant effects.

Our hosting provider runs the website and database. A payment provider processes payments; we never see your card details. Resend delivers the email that contains your PDF. If you accept optional cookies and the tools are configured, Meta and Google Analytics may process browsing and interaction data.

Service providers may process data outside the European Economic Area. Provider locations, retention terms and applicable transfer safeguards must be confirmed by the operator before paid launch. We do not include birth details in tracking events.

5. Storage and retention

We keep your birth details, first page and email address with your order only as long as needed. If you don’t complete a purchase, they are deleted after 7 days. After your report is delivered, they are kept for 30 days so we can re-send it or help with problems, and then deleted. Calculated chart data is cached for up to 30 days. We keep payment records for as long as accounting law requires.

We never keep the finished report or PDF. It is created for your order and sent to you as an email attachment. Copies you receive by email remain in your mailbox.

Email providers, AI providers and infrastructure providers may retain delivery or technical logs under their own service terms. The operator must confirm provider-specific log retention before launch.

6. Cookies and similar technologies

We store your cookie preference in your browser so we can remember your choice. Optional analytics and advertising tools remain off unless you accept. When enabled, these tools may use cookies or similar storage to measure visits, advertising performance and interactions.

You can accept or reject optional cookies with equal access to both choices. Use Cookie settings in the footer to change your choice. Rejecting after accepting stops optional tracking on the reloaded page; you can also remove previously stored cookies through your browser settings. Provider cookie names and lifetimes depend on the tools enabled and must be documented before they go live.

7. Your privacy rights

Depending on applicable law, you may request access, correction, deletion, restriction or a portable copy of your personal data, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting the lawfulness of earlier processing.

You may also complain to your local data protection authority; in Lithuania this is the State Data Protection Inspectorate (VDAI). A direct privacy contact is pending and must be published before paid launch.

8. Changes to this policy

We may update this policy when our service or data practices change. The date above identifies the latest version. Material changes will be communicated where required by law.