Privacy Policy

Information we collect

When you create an account, Supabase Auth stores your email address, account identifier, session metadata, and profile fields you choose to provide.

For readings, reports, and tools, Lunar Letter may collect birth date, birth time, birth city, time zone or location details, tarot questions, relationship context, manifestation inputs, assessment answers, delivery email, order records, PayPal payment references, and support messages.

Payment is handled by PayPal. Lunar Letter does not collect or store your full card number, PayPal password, or bank login details.

How we use information

We use submitted information to provide account access, prepare digital reports, save readings to My Lunar, confirm orders, respond to support requests, handle refunds or disputes, prevent abuse, and improve service reliability.

We do not sell your personal information. We do not use symbolic, birth, tarot, or assessment data to make legal, medical, employment, credit, insurance, immigration, or similarly significant decisions.

Service providers

Lunar Letter uses Supabase for authentication and database storage, Netlify for hosting and serverless functions, PayPal for payment processing, Resend for transactional email, and Google Analytics for optional aggregate website analytics.

These providers process information according to their own infrastructure, security practices, and legal obligations. Data may be processed in countries or regions where those providers operate.

Google Analytics

On public production pages, Google Analytics 4 is loaded only after you choose to accept analytics. It may receive technical and usage information such as page path, browser and device characteristics, approximate location derived from network information, referral source, and selected product interaction events.

Tracked events can include starting or completing a tarot draw, starting the birth-chart tool, viewing a service page, starting checkout, completing a verified purchase, generating a manifestation image where that feature exists, and newsletter signup where that feature exists. Automatic page views are disabled on checkout, payment, order, draw, search, account, report, authentication, and internal routes where tracking is unnecessary or a URL may contain sensitive state.

Lunar Letter does not send names, email addresses, birth dates, birth locations, tarot questions, manifestation prompts, PayPal account information, full payment details, or other private reading inputs to Google Analytics. Verified purchase events may include an internal transaction reference, product information, value, and currency.

Google may set analytics cookies such as _ga and _ga_* after consent. Google processes analytics data under its own terms and privacy practices. Lunar Letter does not currently use advertising pixels or Google Analytics data for personalized advertising.

Your analytics choice

You can accept or decline Google Analytics through the cookie notice and change the saved choice on the Cookie notice page. Declining analytics does not prevent essential sign-in, order, security, or payment-return storage from operating.

The availability of a consent control does not by itself determine every legal requirement for every country. Lunar Letter reviews its target markets and implementation as the service changes.

Retention and deletion

Account, order, payment reference, report, and submitted reading details are kept as long as needed to provide the service, maintain My Lunar records, handle refunds or disputes, keep business and tax records, prevent abuse, and meet legal obligations.

Google Analytics data retention is managed in the associated Google Analytics property and may differ from Lunar Letter account retention. You can delete analytics cookies through your browser and decline future analytics on the Cookie notice page.

You may contact support@lunarletters.net to request access, correction, deletion, or withdrawal of consent where applicable. Some records may need to be retained for legitimate business, tax, accounting, dispute, security, or legal reasons.

Security

No website, payment flow, database, or email system can be guaranteed perfectly secure. Please do not submit emergency information, passwords, government identity numbers, full payment card details, or highly sensitive material that is not needed for the report.

Lunar Letter will never ask for your password, verification code, or full payment card details by email. For privacy or account questions, contact support@lunarletters.net.

Time Capsule privacy and retention

Time Capsule stores the title, private letter, optional reflection answers, chosen theme, creation date, opening date, opening status, and limited technical metadata needed to return the letter to your account. The private letter is not included in notification emails, analytics events, or public share images.

A sealed Time Capsule remains in your private account until its scheduled opening unless you cancel or permanently delete it. An opened or cancelled capsule remains in My Lunar until you delete it or request account deletion. Cancelling prevents the scheduled opening and notification; deleting removes the capsule record and its private letter from the active database.