1. Information We Collect

We collect information you give us directly and information created when you use Heartability:

• Account information: your email address, username, and password when you create an account. Your password is stored encrypted, and we can't see it.
• Payment information: Stripe handles all billing. We don't store your card number or payment details, only a Stripe customer ID linked to your account.
• Content you create: your dream matrix entries, cosmic collage stories, photos you upload (including your inbox), stickers, studio items, journal entries, to-do lists, timers, saved media and toolshed items, reviews, and anything you post publicly. Photos are resized when you upload them, to save space.
• Birth chart details: if you set up your cosmic chart, we use your birth date, birth time, and birth city to calculate your planet placements. We save the placements, not your birth date, time, or city.
• Support messages: your email address and what you write when you contact us through the support page or suggestion box.
• Error reports: when something breaks on the site, we receive a technical report that includes your browser type, the page you were on, and your account ID if you're logged in.

2. How We Use Your Information

We use the information we collect to:

• Create and manage your account
• Process membership payments through Stripe
• Save the things you create, within your plan's storage (222 MB for free accounts, 4 GB for paid members)
• Send account and service emails (signup confirmations, password resets, receipts, membership notices, and replies to support messages)
• Send paid members a weekly digest email: The Saturday Report, made from the dream matrix entries you saved that week, and The Cosmic Beat, about that week's sky. Digests are on by default. You can turn them off with the unsubscribe link in any digest or in account settings.
• Improve the platform and fix bugs
• Respond to your questions and support requests
• Moderate public content and enforce our Terms of Service

We do not sell your personal information to third parties. We do not use your data for advertising.

3. Third-Party Services

Heartability uses these services, which may process your data on our behalf:

• Supabase: database, file storage, and logins (supabase.com)
• Stripe: payments (stripe.com)
• Vercel: website hosting (vercel.com)
• Resend: account, support, and weekly digest emails (resend.com)
• Sentry: error reports, so we can find and fix bugs (sentry.io)
• Cloudflare Turnstile: the signup checkbox that blocks bots. It checks basic information about your browser and device (cloudflare.com)
• Photon by Komoot: looks up your birth city's location for your chart. Only the city name you type is sent, from our server, not your browser (photon.komoot.io)
• Open Library: looks up book details when you search the media library. Only your search words are sent, from our server. Book covers load in your browser from their site (openlibrary.org)
• OMDb: looks up film and TV details when you search the media library. Only your search words are sent, from our server (omdbapi.com)
• jsDelivr: delivers the code library the site uses to connect to Supabase (jsdelivr.com)

Each service has its own privacy policy for how it handles data.

4. Public Content & Moderation

Anything you post publicly can be seen by other users: library reviews, comments, tools you add to the toolshed, things you ask us to add to it, comments on cosmic transits, and guestbook messages. Reviews and comments show your username unless you turn off "show my username" on that post. Tools don't show your username unless you turn it on. Comments on cosmic transits are shown to others without your username. Toolshed star ratings are only shown as an average, without your name. Hearts (saves) are private.

To keep Heartability safe, we may review public content and anything reported to us, and remove it at our discretion as described in our Terms of Service. When we take a moderation action, we may keep a record of it, including the content involved and the account it came from, for as long as we need it for safety, legal, or enforcement reasons.

We don't read your private content, such as journal entries or matrix boards, as part of routine moderation. We may access it only when you ask us to help with a problem, when we need to investigate a report or a violation of our Terms, or when the law requires it.

5. Data Retention

We retain your account information for as long as your account is active. When you complete the deletion process in account settings, your personal data is deleted immediately. Records we keep for business or legal reasons may include billing records (kept by Stripe), support messages, and email correspondences.

Reviews, comments (including comments on cosmic transits), tools, and guestbook messages you've posted publicly stay on the site after you delete your account, without your username. Private reviews, ratings, and saves are deleted with your account. If you want a post gone, delete it before deleting your account. You can delete your reviews, comments, and tools from your account settings. If you deleted your account before deleting old posts, email us or contact us and we can help.

Library titles and toolshed entries you add become part of the shared catalog and can't be deleted by the person who submitted them. A tool can only be edited or deleted until someone else saves, rates, or comments on it. Your name is not attached to toolshed entries or titles you add.

6. Your Rights

• Know what personal information we collect about you
• Request deletion of your personal information
• Opt out of the sale of your personal information (we do not sell personal information)
• Non-discrimination for exercising your rights

To exercise any of these rights, contact us at the address below.

7. Cookies & Browser Storage

Heartability keeps you logged in by saving a login token in your browser's storage. We also save a few things there so the site works the way you left it: a running timer, your settings on the tools page, hints and notes you've dismissed, and, if you play without an account, your progress for the day. We do not use advertising or tracking cookies. Clearing your browser's storage logs you out and resets these preferences.

8. Children's Privacy

Heartability is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the date at the top of this page. Continued use of Heartability after changes constitutes acceptance of the updated policy.

10. Contact Us