Effective date: June 24, 2026 (updates June 15, 2026 version)
Mr. Polaris (mrpolaris.com, "we," "us," "the Service") is a personal astrology web application. This policy explains what happens to the information you provide when you use the Service.
For anything related to this policy or your privacy, contact us at: hello@mrpolaris.com
Mr. Polaris is operated by Sky Tech USA LLC, a Texas limited liability company. The Service is provided in 20 languages to a global audience.
Mr. Polaris has two distinct surfaces with different data handling:
Static site (mrpolaris.com public pages, home, legal pages): The public pages make zero third-party requests. Typefaces are self-hosted. No tracking scripts load without your consent.
Authenticated application (account + report generation): When you create an account and generate reports, the details you enter (including your birth data) are sent to our cloud infrastructure and stored there, encrypted, in your account. They are also shared, with your knowledge, with certain trusted third-party service providers as described below. No birth data or personal details are sent to advertising third parties. Your data is stored in the European Union (Google Cloud, region eur3, Frankfurt). You control how long we keep it and can delete it at any time (see Section 8).
Note on a change from earlier versions: in an earlier version of the Service, the birth details
you entered stayed only in your browser and were not stored on our servers. The Service now stores
your birth details encrypted in your account in our cloud so that your saved charts and readings
work reliably across devices and sessions. This means we, as the operator, are the controller of
that data and are responsible for protecting it, retaining it only as long as you choose, and
deleting it on your request. This policy reflects that current model.
When you create an account, we collect your email address. It is processed by Firebase Authentication (Google LLC, United States) to send you a passwordless sign-in link and maintain your session. Your email is stored in Firebase Auth and in our Firestore database (Google Cloud, region eur3, Frankfurt).
To generate a report, you provide:
How it is stored. This data is sent to our secure Cloud Functions (Google Cloud, europe-west1) to compute your report, and the underlying birth details are then stored encrypted in your account in Firestore (eur3, Frankfurt). Encryption uses authenticated envelope encryption (AES-256-GCM); the encryption key is held in Google Cloud Secret Manager and is controlled by us as the operator. This is server-side encryption that protects your data at rest; it is not an end-to-end or "only you hold the key" arrangement. We can decrypt your birth details in order to provide the Service to you (for example, to rebuild a chart you saved or to let you download it).
How it is used. It is used only to produce, store, and re-open your astrological reports and to let you download them. It is not sold, shared with advertising companies, or used to profile you for any purpose other than providing the Service.
How long. See Section 8. By default we keep it for one year from your last access, and you can choose a shorter period or delete it immediately.
Before you create an account. If you reach us through a campaign page that asks for your birth details first, those details are stored the same way (encrypted at rest, in the European Union) under a random temporary identifier so that your report is ready the moment you create your account. If you do not create an account, this temporary record is automatically deleted within 30 days. Once you sign in, it is attached to your account and the temporary record is removed.
If you purchase a plan, your payment is processed by Stripe, Inc. (United States). We do not receive or store your card details; they go directly to Stripe. We receive from Stripe only the information needed to confirm your subscription status (subscription id, plan type, billing period). See Stripe's privacy policy for their data practices.
With your consent (given via the cookie preferences banner), Google Analytics 4 (Google LLC, United States) collects anonymized usage data such as pages visited, session duration, and general geographic region. No birth data, report content, or form inputs are included in analytics. Analytics storage defaults to denied until you accept. You can withdraw consent at any time via the "Cookie preferences" link in the footer.
We use SendGrid (Twilio Inc., United States) to send sign-in links and account notifications to your email address. No birth data is included in these emails.
Our hosting provider (Google Firebase Hosting) may record standard access logs (IP address, requested URL, timestamp, user-agent). These logs exist for security and operational stability and are not used to identify visitors or combined with report data.
Your date, time, and place of birth are treated as ordinary personal data. However, the interpretive content the Service generates can touch on themes that, depending on where you live and how the data is combined, may be treated as sensitive or special-category data under laws such as Article 9 of the GDPR or Article 6 of Turkey's KVKK (for example, health, relationship, or belief themes).
Because your birth details are now stored in our cloud and used to generate this content, we handle these themes with extra care:
When you generate a report, an AI model may be used to create a short, flowing personal sky reading displayed at the top of your calendar ("opening reading"). Here is exactly what that means for your data:
What is sent to the AI: A small set of structurally abstracted highlights derived from your report; for example, relative time buckets ("within the next 3 months"), event-type categories (abstract labels such as "transformation," "beginning," "challenge"), intensity levels (high/medium/low), life-area tags (career, relationships, health, creativity), and valence (supportive or demanding). This abstracted payload is designed to contain no personally identifying information.
What is NOT sent to the AI: Your name, birth date, birth time, birth place, city of residence, geographic coordinates, or astrological sign names. The AI receives no information that could identify you as an individual.
Who processes it: We use Google Vertex AI (Gemini model, Google LLC, United States) for this purpose. Google is already our cloud infrastructure provider for authentication, data storage, and report computation (see §3 above), so this does not add a new third-party sub-processor to our data chain. Processing is routed through Google Cloud in the European region where technically feasible. Google's data processing terms and commitments apply to this use in the same way they apply to the rest of our Google Cloud infrastructure. See Google's privacy policy for details.
How long is the reading stored: The generated text is stored in your account (Firestore, eur3, Frankfurt) alongside your chart, tied to a structural hash of the abstracted payload. If you generate the same chart again, the existing reading is reused and no new AI call is made. It is deleted when your chart is deleted or expires, or when you delete your data.
Your consent: When you create a chart, we ask for your explicit consent to generate the AI-assisted opening reading before proceeding. You can decline at that point, and no AI call will be made for that chart. You may also contact hello@mrpolaris.com to request deletion of any stored opening reading.
In addition to your account data in the cloud (Section 3), the application saves a small number of interface preferences in your browser's local storage. These items are preferences only and are not transmitted to our servers:
| Key | What it stores | Why |
|---|---|---|
astro_theme | Your light/dark theme choice | Interface preference |
astro_lang | Your language choice | Interface preference |
astro_consent | A flag (with timestamp) that you accepted the Terms | So we do not ask again |
astro_consent_analytics | Your analytics consent choice | Consent Mode v2 preference |
Your birth details and reports are not kept only on your device; they are stored encrypted in your account in our cloud (Section 3.2). You can delete your browser preferences at any time by clearing your browser's site data for mrpolaris.com. To delete your account data in the cloud, use "Delete my data" in your account settings or contact us (Section 8).
We engage the following sub-processors who may process personal data on our behalf:
| Sub-processor | Role | Location |
|---|---|---|
| Google LLC (Firebase Auth, Firestore, Cloud Functions, Hosting, Vertex AI Gemini) | Authentication, encrypted data storage, report computation, hosting, AI-assisted opening interpretation (structurally abstracted data; no PII) | USA / EU (eur3; AI routed to european region where available) |
| Stripe, Inc. | Payment processing | USA |
| Google LLC (Google Analytics 4) | Anonymized usage analytics (consent-gated) | USA |
| Twilio SendGrid | Transactional email | USA |
You have rights of access, rectification, erasure, restriction, portability, and objection (Articles 15-21 GDPR). To exercise any of these rights, contact us at hello@mrpolaris.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
Legal bases for processing:
We have carried out a data protection impact assessment for the storage of birth details and the generation of interpretive content that may touch on sensitive themes; a summary is available on request.
International transfers: Google, Stripe, and SendGrid are US-based. Transfers are covered by Standard Contractual Clauses or, where applicable, Data Privacy Framework certification. Your stored birth and report data resides in the EU (eur3, Frankfurt); Google Vertex AI processing is routed within Google Cloud European infrastructure where technically available.
Under KVKK No. 6698, you have rights under Article 11 to learn whether your data is processed, request correction or deletion, and object to adverse outcomes. Contact us at hello@mrpolaris.com to exercise these rights. Your data is stored in the European Union (Frankfurt); where KVKK applies, cross-border storage relies on an appropriate safeguard under the regime in force since 1 June 2024.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. To submit a privacy request or opt out of any sharing, contact hello@mrpolaris.com.
Regardless of where you live, your birth and report data is stored encrypted in our EU cloud, used only to provide the Service to you, and never sold or shared with advertising companies. You choose how long we keep it, and you can request deletion at any time.
You choose how long we keep your birth details and reports. By default, your saved charts are kept for one year from the last time you access them (an inactivity-based period: each time you open a chart, the one-year clock restarts). If you do not return, the chart and everything derived from it (the cached report, the AI opening reading, and any generated PDF) is automatically deleted.
In your account settings you can change this to:
In addition:
The Service is not directed at anyone under 16 years of age (or the higher age of digital consent in your country). We do not knowingly collect data from children. If we become aware that we have done so, we will delete it.
We may update this policy from time to time. The "Effective date" at the top will reflect the latest version, and material changes will be announced with a notice on the Service before they take effect.
hello@mrpolaris.com Sky Tech USA LLC; operated from Texas, United States.
This policy describes data practices only. For the nature and limits of the astrological content itself (guidance and reflection, not medical, financial, legal, or psychological advice), please see our Terms of Use.