What we collect
| What | When |
|---|---|
| Account details: email address, and your name and photo if you sign in with Google | When you create an account |
| Birth details: date, time, and place of birth, for you and for anyone you add | When you reveal a chart, add a person, or personalize a piece |
| Order details: recipient name, shipping address, email, phone (optional), gift message, and what you bought | When you check out |
| Payment records: PayPal order and transaction IDs and amounts. We never see or store card or bank numbers; PayPal handles those. | When you pay |
| Membership and credit records: your plan, its dates, credits, and gift codes you redeem | When you buy, subscribe, or redeem |
| Waitlist email and the editions you’re interested in | When you join a waitlist |
| Email preferences: your email, whether you asked for news and offers, where and when you said yes (with the exact wording you saw), when you unsubscribed, and how many orders you’ve placed with us | Only when you tick “Email me about new products and offers” at checkout, sign-up, or a waitlist, or join a waitlist |
| Usage: pages viewed and key actions in the app, tied to your account | Only while you’re signed in |
| Anonymous shop statistics: which shop pages and products are viewed, what’s added to the cart, when checkout starts, the kind of site you arrived from (for example “google” or “direct”), and whether you came in through the shop or the app. Each is tied only to a random ID that lives in that browser tab and is gone when you close it. No name, email, IP address, or device details, and nothing that follows you between visits. | When you browse the shop, signed in or not |
| Site analytics (Google Analytics): the pages you view (their address, without any codes in it), the campaign tags in the link you followed, whether you came in through the shop or the app, products viewed, adds to cart and checkout starts, plus what Google Analytics records about any visit: approximate location (city or region), device and browser type, and the site you came from. It uses Google Analytics cookies, not your name or email. | When you browse, unless your browser sends Global Privacy Control |
| Messages you send us, including photos for a claim | When you email us |
Birth details
Your chart is calculated in your browser. Birth details are saved on your device, and to your account so your chart follows you when you sign in elsewhere.
When you enter someone else’s birth details, for a gift or for your people list, please only do so if you believe they’d be comfortable with it. We use those details only to make their chart or their piece. For a Signature piece, their natal chart is printed on the piece itself, as you see in the preview.
We never sell birth details, use them for advertising, or share them beyond what’s needed to make your order.
How we use it
- To show your chart, colors, readings, and other app features.
- To make, ship, and support your orders, including replacements and refunds.
- To run your account, membership, credits, and gift codes, and to prevent fraud.
- To send order confirmations, tracking, and service messages.
- To send launch news, only for the waitlist you joined, and news and offers only if you ticked the box asking for them. It’s never ticked for you. Every marketing email has a one-click unsubscribe that takes effect right away; order and account emails still come.
- To understand how the site and app are used (which pages and products people find, where they leave) and improve them.
- To meet legal, tax, and accounting obligations.
Cookies and device storage
We use your browser’s local storage to keep your chart, cart, and preferences on your device, and the cookies and storage that sign-in and PayPal checkout need to work. Our anonymous shop statistics use no cookies: they use a random ID kept in your browser’s session storage for that one tab, which is deleted when you close it.
We also use Google Analytics, which sets its own first-party cookies (named _ga and _ga_ followed by an ID) to recognize a returning browser; they last up to two years. We’ve set it up for measurement only: Google signals and advertising personalization are off, it doesn’t run on our internal admin pages, and the page addresses it sees never include codes or other private values. To opt out, turn on Global Privacy Control in your browser (we then don’t load Google Analytics at all), block cookies for this site, or use Google’s opt-out add-on.
We don’t use advertising cookies or tracking pixels. If that ever changes, we’ll update this page first and give you any choices the law requires.
How long we keep it
- Account and chart data: while your account is open, and deleted when you ask us to close it.
- Order and payment records: as long as needed for support, refunds, taxes, and accounting (usually several years).
- Waitlist emails: until you unsubscribe or the waitlist ends.
- Email preferences: while you’re subscribed. After you unsubscribe we keep your address, when you opted in and out, and nothing new, so we never email you by mistake and can show what you agreed to. Ask us and we’ll delete it.
- Usage data: only as long as it’s useful for improving the app, and deleted with your account.
- Anonymous shop statistics: 13 months, then deleted.
- Google Analytics data: 14 months, then deleted by Google.
Your choices and rights
You can ask to see the personal information we hold about you, correct it, get a copy, or delete it. Email hello@cosmiccolor.co from the address on your account. Until account deletion is available in the app, we handle deletion requests by email, usually within 30 days. We may keep order and payment records that the law requires us to keep.
Depending on where you live (for example California, Colorado, Connecticut, Virginia, and other US states), you may have additional rights under state privacy laws. We honor those requests too, and we won’t treat you differently for making one. We don’t sell or share personal information as those laws define it, and we treat a Global Privacy Control signal from your browser as an opt-out: we don’t load Google Analytics for it.
Children
The service isn’t for children under 13, and we don’t knowingly collect their personal information. If you believe a child has created an account, email hello@cosmiccolor.co and we’ll delete it. Gift buyers may enter a child’s birth details to personalize a gift; we use them only for that order.
Security
Data is encrypted in transit, stored with Google Cloud, and access to it is limited to what’s needed to run the service. No system is perfectly secure, so please use a strong, unique password.
Changes and contact
If we change this policy, we’ll update the date at the top, and tell you by email or in the app if the change is significant.
Questions or requests: hello@cosmiccolor.co. Cosmic Color Co, 5316 Yacht Haven Grande, St. Thomas, VI 00802.
See also: Terms.