Privacy Policy
Last updated: July 12, 2026
Cosmic Blueprint ("we," "us," or "our") operates the Cosmic Blueprint web application. This Privacy Policy explains how we collect, use, and protect your information.
Information We Collect
Account Information: We use Replit login for authentication. We receive basic account details from Replit, such as your email address and name, so we can create and maintain your account. We do not create, store, or manage a local password for you.
Birth Data: To provide personalized astrological, numerological, and symbolic calculations, we collect your full name, date of birth, time of birth (optional), and place of birth. This data is used solely to generate your personalized cosmic profile.
Usage and Session Data: We use essential session data to keep you signed in and may review operational logs to maintain and improve the service. We do not use third-party advertising trackers.
Email Preferences: If your account has an email address, we store your email preference status for monthly product update emails, including unsubscribe status, timezone, and timestamps needed to honor your choices. Accounts receive the monthly product update email; you can turn it off anytime in Settings or with the unsubscribe link in any email.
Guest Readings: If you try the app without an account, your birth data and the resulting reading are saved in your browser's local storage. Our server receives the details long enough to calculate the guest reading but does not write that guest request to an account record. Signing in is what saves the reading to your account. A comparison link contains the sender's exact birth date in the URL, and the sharing flow asks the sender to confirm that disclosure first.
How We Use Your Information
We use your information to:
- Generate personalized astrological placements and other symbolic results
- Calculate daily, monthly, and yearly insights based on your birth data
- Autocomplete birth-city lookups through our server-side geocoding tools
- Maintain and improve the service
- Send service emails and monthly product update emails according to your settings
We do NOT:
- Sell your personal data to third parties
- Share your birth data except when you choose a feature that discloses it, such as a birthday comparison link
- Use your data for advertising or marketing purposes beyond our own service
- Send marketing emails after you opt out or unsubscribe
Service Providers
We use a small number of third-party services to operate specific features. They process data only on our behalf:
- OpenAI powers the Reading Helper. When you ask it a question, your message and the relevant parts of your dashboard reading are sent to OpenAI's API to generate a response, subject to OpenAI's privacy policy.
- Nominatim (OpenStreetMap) handles birth-city search. The city and country text you type is sent to their geocoding service to look up coordinates.
- Resend manages and delivers our emails. If your account can receive email updates, your email address, email preference status, timezone, account creation timestamp, and basic display-name fields may be shared with Resend so we can send or suppress the right messages.
Data storage, security, and logs
Your data is stored in infrastructure provisioned through Replit and PostgreSQL. Authentication is handled through Replit OIDC, and we use secure session cookies to keep you signed in. We implement reasonable safeguards to protect your information, but no method of transmission or storage is 100% secure.
We may retain operational, security, email-delivery, and webhook logs needed to run and protect the service. These global logs are not included in a personal data export and may outlast an account deletion where retention is needed for security, abuse prevention, delivery records, or legal obligations. Account deletion removes the account-owned profile, saved results, daily cache, product-update preference, and matching local sessions after the Resend contact is removed or confirmed absent.
Your Rights
You can:
- Download a schema v2 copy of your account, profile, coordinates and timezone, saved results, daily cache, and product-update preference
- Update your personal information at any time (via Settings)
- Turn monthly product update emails on or off at any time (via Settings or unsubscribe links)
- Request deletion of your account-owned data in Settings; auth/session secrets and global operational logs are outside the export
Cookies
We use essential cookies only for authentication and session management. We do not use advertising cookies, and we do not sell your data to data brokers.
Children's Privacy
This service is not intended for anyone under the age of 13. We do not knowingly collect information from children under 13.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page with an updated date.
Contact
If you have questions about this Privacy Policy, you can reach us at: dmkthinks.org