Privacy policy

Last updated October 3, 2026.

Information used for your reading

We store your account email, a salted password hash, temporary hashed verification codes, session records, birth details, computed charts, order references, and generated reports. Your nickname does not need to be your legal name. Reports are accessible through your signed-in account.

Service providers

Stripe processes payments and may collect billing and payment information. We do not receive or store your full card number. Birth details and calculated chart information are sent to OpenAI to generate your reports. The website and its database use Sites / Cloudflare infrastructure. Resend delivers email-verification codes, password-reset emails, and service emails. Cloudflare Email Routing forwards support messages to our support inbox. Google Fonts receives normal browser connection information when fonts load.

Retention and security

We retain readings so you can revisit them. Passwords are hashed, session cookies are HTTP-only, and access to readings is checked on the server. Temporary birth-form drafts stay in your browser session until submitted. No website can guarantee absolute security.

Your information is not open source

The software source is available under AGPL. Birth details, reports, emails, payment records, passwords, and service credentials are excluded from the public source download.

Purpose and choices

Provide only the details needed for the reading. Do not enter another person's private information without permission. Advertising measurement is optional and off until you accept advertising cookies. On our dedicated advertising landing page and payment-confirmation page, Meta may receive page visits and verified purchases, the USD 19.99 amount, an opaque identifier for deduplication, browser and network information (including IP address), and advertising cookie/click identifiers. This helps attribute and improve Facebook ads. Meta may associate this information with its own users under its privacy policy. We do not provide birth details, report contents, account email, passwords, or service credentials to Meta. Tracking code does not load on birth-entry, account, or report pages. Automatic advanced matching and automatic event configuration are not enabled by our code. Choose Decline to use the site without advertising tracking, or change your choice at any time using Privacy choices in the footer. We honor Global Privacy Control by keeping advertising tracking off. Advertising cookies may last up to 90 days; your consent choice stays in your browser until changed or cleared. Browser restrictions and your choice can limit attribution. For access, correction, or deletion requests, email support@myfortuneatlas.com. We verify account ownership before processing a request, and may retain records required for payment, fraud prevention, or legal obligations.