As of 29 September 2026
Privacy policy
In three sentences: birth data is only needed to calculate and write the report. To write it, the data goes to Anthropic in the USA. After 24 months everything is deleted, earlier at any time at the press of a button.
1. Controller
The controller is G6 Agency AG, Baar, Switzerland, address [Address to follow]. Send privacy requests to hallo@stellium.to.
The Swiss Federal Act on Data Protection applies. For customers from the EU we also observe the General Data Protection Regulation.
2. Which data, why, for how long
We only process the data that is needed for the report you bought. Birth data together with a name is especially sensitive because it identifies a person. We treat it that way: it serves the report and nothing else, it is not sold, not passed on for advertising and not used to analyse your behaviour.
| Data | Purpose and legal basis | Retention |
|---|---|---|
| Name, birth date, birth time, birth place with resolved time zone | Calculate and write the report. Performance of the contract. | 24 months after purchase, then deleted automatically. An email warns you 14 days before. |
| Calculated values and report texts | Show the report and deliver it as a PDF. Performance of the contract. | 24 months, like the birth data |
| PDF cache | Download the PDF again without recalculating. Performance of the contract. | 12 months |
| Email address | Confirmation, link to the report, sign-in by link. We create an account for this when you buy. Performance of the contract. | As long as the account exists. An account with no sign-in and no order for 24 months is deleted, an email warns you 14 days before. |
| IP address as a hash only, browser identifier | Abuse prevention and rate limiting. Legitimate interest. | 30 days |
| Booking data: order number, amount, date, tax, Stripe reference | Statutory retention. Legal obligation. | 10 years, pseudonymised and without birth data |
| Unpaid order with a draft of your details | Find the draft again after an abort. Pre-contractual steps. | 7 days |
| Waitlist entry: email address | One email when Stellium Resonance is available. Consent. | Until Resonance has launched and the email is sent, then deleted |
| Log of administrative actions | Traceability, for example of a refund. Legitimate interest. | 24 months |
| Export file, if you request an export | Access and data portability. Legal obligation. | 7 days, then the link is invalid and the file deleted |
If you delete your account, we remove birth data, calculated values, report texts, the PDF, email address, sessions and sign-in links within 72 hours. Only the booking data remains that the law requires us to keep.
3. Service providers that receive data
We use the following service providers. A data processing agreement exists with each of them. There are no other recipients.
| Provider | Location | Purpose and data |
|---|---|---|
| Stripe Payments Europe, Ltd., with Stripe, Inc. | Ireland and USA | Payment, tax, refunds. Stripe receives the email address, the amount and your payment details. We never see card data. |
| Anthropic PBC | USA | Generation of the report texts. Anthropic receives the name, birth date, birth time, birth place and the calculated values. Under Anthropic's terms for the commercial interface, these inputs are not used to train the models. |
| Photon, operated by komoot GmbH | Germany | Search for the birth place. The request comes from our server and contains only the place name you typed, not your IP address. |
| Cloudflare, Inc. (Turnstile) | USA | Check whether a form is submitted by a person. Turnstile sets no cookie. Cloudflare receives technical details of your browser. |
| Vultr | USA, data centre [Location to follow] | Hosting of server and database. All data from the table above is stored there. |
| [Mail provider to follow] | [Location to follow] | Sending the emails: confirmation, sign-in link, report ready, refund. The provider receives the email address and the content of the email. |
4. Transfer to the USA
Stripe, Anthropic, Cloudflare and Vultr process part of their data in the USA. The transfer is needed because without it you could not pay, the text could not be written and the site could not run. It relies on standard contractual clauses or, where a provider belongs to the Data Privacy Framework, on the adequacy decision.
Anthropic is probably the one that matters most to you, because name and birth data end up there. We pass them on only for the one task of writing the text of your report.
6. Your rights
You can ask at any time for access to your data, have it corrected, have it deleted, restrict its processing, receive your data as a file and object to processing. You can withdraw a consent you gave at any time.
You can use two of these rights yourself and at once, in your account under data and deletion: the export as a machine readable file, ready within 24 hours, and the deletion, which you confirm by email and which is carried out within 72 hours. For everything else write to hallo@stellium.to.
You can complain to the Federal Data Protection and Information Commissioner, or to the supervisory authority of your country.
7. How we protect data
Connections to Stellium are encrypted. We store your IP address only as a hash with a secret addition, so it cannot be calculated back. Few people have access to the administration, and every intervention is logged.
8. Changes
If something changes, for example a service provider, we adapt this policy and state the date at the top. For a material change that concerns birth data, we write to customers with an existing report.
Stellium is a tool for reflection. No prediction, no medical, legal or financial advice.