Operator and contact
Starmora is operated by Pangaea. Contact [email protected] for privacy and data requests. This policy was updated on 7 October 2026.
Data and purposes
The chart name, birth date, local birth time, place name and time zone are processed to calculate, interpret and display your chart. If you register, your email and a secure password hash are stored for account access. Passwords are not stored as plain text. Calculation results, UTC instants and chart creation time are also retained.
A random session identifier enables access to guest charts or an account; the server stores its hash. IP addresses are used for short-lived in-memory rate limiting. API requests containing birth data are not written to access logs. Necessary processing supports the service you request and its security; the applicable legal basis depends on your location and the processing involved.
Retention and deletion
Sessions remain valid for 30 days. Expired guest sessions and their unclaimed charts are periodically cleaned up. Charts transferred to an account are excluded from that cleanup; you can delete them from My charts. Contact us by email for account deletion or another data request. Verification that you control the account email may be required.
Deleting a chart removes its record from the application database. Files you downloaded or copies shared elsewhere are not automatically removed. Backup and hosting arrangements must also be considered as part of the live service’s retention practices.
Sharing and providers
The default calculation and reading engine runs on the server; birth data is not sent to an external AI service for readings. City search uses a local dataset derived from GeoNames. Hosting infrastructure may process data to operate the service. If the optional BodyGraph provider is enabled, necessary birth details are sent to that provider and this use is disclosed in the form.
Cookies, rights and security
The service uses only a necessary first-party session cookie. Advertising and analytics tracking are not enabled in this version. The cookie policy explains its name, duration and properties. Depending on applicable law, you may request access, correction, deletion and other data rights. Enter another person’s birth data only with appropriate authorization.
Access controls, secure password hashing and session protections are applied. No system can guarantee absolute security. Report security concerns to [email protected].