Privacy Policy

Last updated: October 6, 2026
Effective date: October 6, 2026

TerraLamp (“we”, “us”, “the Service”) is operated by TerraLamp LLC (“the operator”), based in Washington, United States. This policy explains what personal information we collect, why, how we protect it, and the choices and rights you have. We’ve tried to write it in plain language; where a term has a specific legal meaning we say so.

We collect the information needed to build you a personalized planner — your account email, the event details (date, time, and place) you enter if you choose to use astrology features, and a record of any planner you buy. Payment itself is handled by Stripe; we never see your card details. We do not run advertising, we do not use advertising or tracking SDKs, and we never sell or share your data with data brokers or advertisers. You can delete your data at any time by request at the contact page.

1. Who this applies to

This policy applies to anyone who creates an account on, or uses, TerraLamp, wherever you are located. The Service is operated from the United States, and you are welcome to use it from anywhere. Whoever you are, we honor the core rights described in Section 10 — access, correction, export, and deletion. If you are located in the European Economic Area (EEA), the United Kingdom, or California, you have additional, specific rights described in Section 10 and Section 11.

TerraLamp is not directed to children. You must be at least 18 years old (or the age of digital consent in your jurisdiction) to create an account. We do not knowingly collect information from children under that age; if you believe a child has provided us information, contact us and we will delete it.

2. What we collect

We collect only what we need to operate the Service. There are three buckets.

2.1 Information you give us

Data	Why we have it	Required?
Email address	Account identity, sign-in, verification, password reset, and essential service messages	Required to have an account
Password	Authentication. Stored only as a salted cryptographic hash — we never see or store your actual password	Required
Birth / event profiles — a label or name, and the date, time, and location (place name and/or coordinates) you enter	To compute charts and personalize your planner. These are the details you choose to enter — they may be your own birth data, someone else’s, or any date/time/place you want a chart for	Optional — only if you use astrology personalization
Planner configurations	The choices that make up a saved planner, so you can reload and re-download it	Created as you use the Service
Purchase records — an order number, what you bought, the amounts and currency, the email you entered at checkout, and when you asked for immediate supply	To supply what you bought, let you download it again, answer questions about an order, and show that you asked for immediate supply (see our Terms, §4.4)	Only if you buy a planner

2.2 Information we derive

Computed astrological data (e.g. natal chart positions) calculated from the birth/event details you enter, and stored alongside the profile so we don’t recompute it on every request.
Generated PDFs you create, based on planner configuration.

2.3 Information collected automatically or by our providers

Operational logs — IP address, browser/device type, timestamps, and error diagnostics, used to keep the Service running, secure, and debuggable. Retention window: 7 days.
Error tracking — we use Sentry.io to catch and diagnose crashes and errors so we can fix them. This is an operational tool, not a profiling one: we configure it to scrub personal data and birth details from error reports before they are sent.
Privacy-respecting analytics — we use Cloudflare Web Analytics, a cookieless, privacy-respecting analytics tool, to understand aggregate usage (e.g. which pages are visited). It does not set tracking cookies, build profiles of you, or track you across other websites.
Payment processing — purchases are handled by Stripe, through its Link service. Stripe is the seller of record for each purchase: it collects your payment details and billing information directly, on its own checkout page, under its own privacy policy. It sends us a confirmation and limited details of the transaction (the amounts, currency, and the email you entered). We never receive or store your card details.
Email delivery — transactional emails (verification, password reset, purchase confirmations, and notices of changes to our Terms or this policy) are sent through Resend.com, which processes your email address to deliver them.

We do not run advertising, use advertising or behavioral-tracking SDKs, set advertising cookies, or sell or share your information with data brokers or advertisers. This is a deliberate commitment.

2.4 Cookies and local storage

We keep a small amount of information in your browser, and only what the Service needs to work. We use no advertising or tracking cookies.

Sign-in cookies. A session cookie keeps you signed in. If you save a planner before creating an account, we start an anonymous session to hold it, so you can come back to it and bring it into an account later. A second cookie holds your account name, so the page header can show that you’re signed in; it holds nothing else.
Your drafts and preferences. Your browser’s local storage keeps the planner you’re working on, so a draft survives a reload, and remembers how you like the preview laid out. This stays in your browser and isn’t sent to us unless you save the planner.
Bot protection. Our sign-up, sign-in, password-reset and contact forms use Cloudflare Turnstile to tell people from bots.

When you check out, you’re on Stripe’s pages, and any cookies there are Stripe’s, under its own privacy policy.

All of these are needed for features you use, so we don’t ask for cookie consent. If we ever add something that isn’t, such as analytics that store data in your browser, we’ll ask for your consent first and update this policy.

3. How we treat birth data

Birth date, exact time, and precise place, taken together, are a strongly identifying combination, and the fact that you use astrology features can imply something about your beliefs. Even though this kind of data is not formally a “special category” under the GDPR, we treat it with heightened care: it is access-controlled to your account, encrypted at rest — see Section 6, never sold, and never shared for advertising. You are always free to use the Service without entering any birth data, or to enter data for a date/place that is not your own.

4. How we use your information

We use your information to:

Create and secure your account, and sign you in;
Compute charts and generate the personalized planner you configure;
Store your configurations and generated files so you can return and re-download them;
Take payment through our payment processor, supply the planners you buy, and handle questions and refunds about an order;
Send essential service messages (verification, password resets, purchase confirmations, and important changes to the Service or this policy);
Keep the Service reliable, debug problems, and prevent abuse and fraud;
Comply with legal obligations.

We will not use your birth/event data for anything beyond providing the Service to you without asking you first.

Legal bases (EEA/UK users)

Where the GDPR applies, we rely on: performance of a contract (operating your account, producing what you configure, and supplying what you buy); legitimate interests (security, abuse prevention, keeping the Service working, and keeping a record of purchases and of the consent given at checkout so we can handle refunds and disputes); consent (any optional processing, such as non-essential analytics or marketing, if introduced); and legal obligation (e.g. tax records for purchases).

We do not sell your personal information, we do not share it for advertising, and we do not disclose it to data brokers or embed third-party advertising/tracking SDKs in the Service.

We share information only with service providers (“processors”) who help us run the Service, and only as needed:

Hosting / infrastructure: Railway.com — runs the application and stores its database.
File storage and network: Cloudflare — stores your generated planners and our database backups, both encrypted before they are stored, and carries traffic between you and the Service. It also provides the analytics and bot protection described in Section 2.
Email delivery: Resend.com.
Error tracking: Sentry.io — receives error reports, scrubbed of personal data and birth details (see Section 2.3).

Payments work differently. Stripe, through its Link service, is the seller of record for each purchase, so it handles your payment under its own privacy policy rather than as our processor. To set up a checkout we send it the email address on your account (to prefill the form), what you are buying, an order reference, and the record of your request for immediate supply.

We may also disclose information if required by law, or to protect rights, safety, or the integrity of the Service, or in connection with a business transfer (e.g. if the Service is acquired) — in which case we will notify you and this policy will continue to apply to your data.

6. How we protect your information

In transit: all traffic is encrypted with HTTPS/TLS.
At rest: birth/event details are encrypted at rest in the database, so they are not readable in raw database backups. Each database backup and each stored planner file is also encrypted as a whole, with its own key, before it leaves our server.
Passwords: stored only as salted hashes; never in plaintext.
Payment details: entered on Stripe’s checkout page, never on ours. We never see your card number.
Access control: your profiles, configurations, and files are tied to your account and served only to you after an ownership check.
Secrets: application secrets and provider keys are kept out of source control and rotated as needed.

No system is perfectly secure, but we take reasonable, industry-standard measures.

7. How long we keep it

Account data and birth/event profiles: kept while your account is active. When you delete a profile, it is removed immediately. When you delete your account, your personal data is deleted immediately, except where we must retain limited records (e.g. transaction/tax records) for a legally required period.
Generated PDFs and configurations: kept so you can re-download them, until you delete them or close your account. When you delete a planner you have downloaded or bought, it leaves your list but is kept with your account, because your right to download it again still stands; it is deleted when you close your account.
Purchase records: kept while your account is active, and deleted with it unless we need them for a legal obligation or an open refund or dispute. Stripe keeps its own records of the payment under its own policy.
Backups: we keep encrypted backups of the database for 90 days. What you delete leaves the live Service immediately and leaves the backups as they expire. If we ever have to restore from a backup, the deletions made since it was taken are applied again, so a restore does not bring back a profile or an account you deleted.
Operational logs: kept for 7 days then deleted or anonymized.

8. Your choices

Edit a profile at any time from account settings.
Delete your account by contacting us; this removes your personal data subject to the retention exceptions above.
Email preferences transactional/service emails are required while you have an account; any marketing email (if introduced) will be opt-in and unsubscribable.

9. International transfers

The Service is operated from the United States, and our providers may process data in the United States and other regions used by our providers. If you access the Service from outside the United States — including from the EEA or UK — your information will be transferred to and processed in the United States. Where required for such transfers, we rely on appropriate safeguards (e.g. the Standard Contractual Clauses offered by our providers).

10. Your rights

Depending on where you live, you may have the right to: access the data we hold about you; correct it; delete it; export/port it; object to or restrict certain processing; and withdraw consent where processing is based on consent. To exercise any of these, contact us at our contact page.

If you are in the EEA/UK and believe we have mishandled your data, you may lodge a complaint with your local supervisory authority.

11. Region-specific disclosures

California (CCPA/CPRA). In the past 12 months we have collected the categories described in Section 2: identifiers (email), account credentials, the birth/event details and outputs you create, and commercial information (records of the planners you buy). Payment card details are collected by Stripe, not by us. Note that precise geolocation and inferences are treated as “sensitive personal information” under California law — we use such information only to provide the Service and do not use or disclose it for other purposes. We do not sell or “share” personal information as those terms are defined under California law. California residents may exercise the rights in Section 10, including through an authorized agent.

EEA / UK (GDPR / UK GDPR). Legal bases are described in Section 4. The data controller is TerraLamp LLC, operating from the United States. You have the rights in Section 10 and the right to complain to a supervisory authority. We welcome users from the EEA and UK; note that we do not specifically target or market to the EEA/UK, and we have not appointed an Art. 27 representative on that basis.

12. Changes to this policy

We may update this policy. If we make material changes, we will notify you (e.g. by email or an in-app notice) and update the “Last updated” date above. Continued use after changes take effect means you accept the revised policy.

13. Contact

Questions, requests, or complaints: use the contact page.