Privacy Notice

Who we are

Mathilde Grant, trading as Mansions of the Moon, operates this website and is the controller responsible for the personal data described in this notice. The controller’s contact address is 2500 Q St NW, Apt 235, Washington, DC 20007, USA. For privacy questions or requests, email hello@m3th1ld3.art.

What we collect

• Your email address, name, login session, and notification or marketing choices. If you join the free daily moon-mansion email, Resend processes your address to deliver the welcome confirmation and future messages.
• Birth date, birth time, birth place, coordinates, timezone, and calculated lunar-mansion information when you create or save a chart.
• Practices, ritual plans, check-ins, notes, intentions, and challenge progress that you choose to save.
• Report, subscription, payment, gift, and print-order details needed to provide purchases and deliveries. Payment providers handle full payment-card details; we keep transaction references and status.
• Basic usage and diagnostic information, such as pages viewed, actions taken, campaign information, and pseudonymous browser or session identifiers.
• Messages you send when asking for support or exercising a privacy right.

Why we use it and our lawful bases

• Contract: to provide charts, saved features, reports, subscriptions, orders, requested notifications, and support, and to take steps you request before a purchase.
• Legitimate interests: to keep the service secure and reliable, prevent duplicate or fraudulent transactions, answer support requests, understand basic website use, and improve the service.
• Legal obligations: to keep payment, tax, accounting, and transaction records where the law requires us to do so.
• Consent: to send the free daily moon-mansion email, product news, or promotions after you subscribe. Resend may ask you to confirm your subscription by email. You can withdraw consent and unsubscribe at any time without affecting service messages.
• When you create a birth chart, we may send a weekly series of app-discovery tips for about seven months about free practices and educational pages, with occasional clearly labeled mentions of paid features in later emails. This is separate from the optional daily email. You can stop discovery tips independently in your Dashboard or from any tip email without losing your chart or app access.

Who receives it

We share only the information needed for a provider to perform its service.

• Replit and Neon for website hosting, logs, and database storage.
• Resend for service and marketing email, including subscription confirmation and unsubscribe handling.
• Stripe and PayPal for payments, refunds, and transaction records.
• PostHog and first-party analytics for limited usage and diagnostic events.
• Geocoding services for place searches.
• Prodigi for printing and delivering physical orders.

Cookies, storage, and analytics

The website uses browser storage for login sessions, remembered choices, attribution, and pseudonymous analytics state. Some of this information is sent to our servers or analytics providers when you use the website.

Analytics is limited to approved events and properties. Third-party analytics does not receive email addresses from our current analytics integration. You can block or clear browser storage using your browser settings, although saved login and preferences may stop working.

How long we keep data

• Account, saved-chart, practice, preference, and identified first-party analytics data is deleted when you complete an authenticated account-deletion request.
• First-party analytics events are normally deleted after 90 days.
• Marketing subscription information is kept until you unsubscribe. A suppression record may remain so we remember not to email you.
• Payment, tax, fraud-prevention, delivery, and order records are kept only while needed for those purposes or to meet legal, accounting, dispute, and provider requirements. Account deletion removes report contents and replaces your email with a non-reversible value in supported retained records.
• Providers may keep information under their own retention rules. Logs and backups may take additional time to expire.

Your choices and rights

Depending on where you live, you may have rights to access, correct, export, delete, restrict, or object to the use of your personal data, and to withdraw consent. You may also complain to your local data-protection authority.

After verifying your email, use the controls below to download or delete your account data. You can also email the privacy contact. Legal or provider retention requirements may limit immediate deletion of some transaction records.

International providers

Some providers may process information outside your country. Contact us if you want the current information available to us about a particular provider or where it processes data.

Children and changes

This service is not directed to children under 16. If you believe a child has provided personal data, contact us so we can remove it.

We may update this notice when the service or its providers change. The latest effective date appears at the top of the page.