Public API and MCP
When you explicitly call the public API or MCP, the server processes the birth inputs transiently to calculate the result. No birth data is stored or logged: request bodies and query strings never enter access logs, statistics or error reports. The browser calculator continues to work on your device.
Calculator links from the API carry inputs only in the URL fragment, which browsers never send to the server. The form removes the fragment after reading. Share this link only with the person concerned; the assistant or application you choose has its own privacy policies.
Your birth details stay here
Birth date, birth time, selected place and optional display name are processed in your browser. Guest charts, including the selected place, are stored in localStorage on this device with a 24-hour expiry. Expired data is removed when the app checks storage. “Forget my data” removes the guest chart and reveal flag immediately.
This version has no account, cookies, third-party scripts, external geocoder or automatically shared chart. A shared PNG is created only on your action, without date, time or place.
The place search
The server receives the city search query and language in order to search our GeoNames database. Neither Astraluno’s API access logs nor the staging web server access logs record search query strings. The server returns city labels, coordinates and the IANA time zone.
Your network address is handled transiently for connection and rate limiting, with a one-minute in-memory bucket. It is not stored in analytics or API access logs. Readings are downloaded as one language file, so automatic requests do not reveal the chart’s placements. The browser also requests the selected zone file, which necessarily reveals which zone file was requested to the server.
Anonymous daily counts
We count supported actions by day, page path and small categories such as calculator type or birth-time precision. There are no visitor identifiers, hashes, names, birth details or stored IP addresses. Aggregates are retained for 400 days; they cannot measure unique users or individual return visits.
Do Not Track and Global Privacy Control disable the beacon. Visiting a page with ?internal=1 sets a local analytics opt-out on this device; ?internal=0 clears it. The server validates an explicit whitelist and rejects extra fields.
Data sources and this staging
Place data comes from GeoNames under CC BY 4.0. Time-zone tables come from IANA tzdb 2026e. Font files are served locally under the SIL Open Font License.
This is a public, non-indexable staging environment for an independent project. Privacy and legal requirements will be reviewed before a commercial launch. No contact address is published until the production domain is established.