Effective date: September 21, 2026 (updates June 15, 2026 version)
Mr. Polaris (mrpolaris.com, "we," "us," "the Service") is a personal astrology web application. This policy explains what happens to the information you provide when you use the Service.
For anything related to this policy or your privacy, contact us at: hello@mrpolaris.com
Mr. Polaris is operated by Sky Tech USA LLC, a Texas limited liability company. The Service is provided in 20 languages to a global audience.
Mr. Polaris has two distinct surfaces with different data handling:
Static site (mrpolaris.com public pages, home, legal pages): The public pages make zero third-party requests. Typefaces are self-hosted. No tracking scripts load without your consent.
Authenticated application (account + report generation): When you create an account and generate reports, the details you enter (including your birth data) are sent to our cloud infrastructure and stored there, encrypted, in your account. They are also shared, with your knowledge, with certain trusted third-party service providers as described below. No birth data or personal details are sent to advertising third parties. Your data is stored in the European Union (Google Cloud, region eur3, Frankfurt). You control how long we keep it and can delete it at any time (see Section 8).
Note on a change from earlier versions: in an earlier version of the Service, the birth details
you entered stayed only in your browser and were not stored on our servers. The Service now stores
your birth details encrypted in your account in our cloud so that your saved charts and readings
work reliably across devices and sessions. This means we, as the operator, are the controller of
that data and are responsible for protecting it, retaining it only as long as you choose, and
deleting it on your request. This policy reflects that current model.
When you create an account, we collect your email address. It is processed by Firebase Authentication (Google LLC, United States) to send you a passwordless sign-in link and maintain your session. Your email is stored in Firebase Auth and in our Firestore database (Google Cloud, region eur3, Frankfurt).
To generate a report, you provide:
How it is stored. This data is sent to our secure Cloud Functions (Google Cloud, europe-west1) to compute your report, and the underlying birth details are then stored encrypted in your account in Firestore (eur3, Frankfurt). Encryption uses authenticated envelope encryption (AES-256-GCM); the encryption key is held in Google Cloud Secret Manager and is controlled by us as the operator. This is server-side encryption that protects your data at rest; it is not an end-to-end or "only you hold the key" arrangement. We can decrypt your birth details in order to provide the Service to you (for example, to rebuild a chart you saved or to let you download it).
How it is used. It is used only to produce, store, and re-open your astrological reports and to let you download them. It is not sold, shared with advertising companies, or used to profile you for any purpose other than providing the Service.
How long. See Section 8. By default we keep it for one year from your last access, and you can choose a shorter period or delete it immediately.
Before you create an account. If you reach us through a campaign page that asks for your birth details first, those details are stored the same way (encrypted at rest, in the European Union) under a random temporary identifier so that your report is ready the moment you create your account. If you do not create an account, this temporary record is automatically deleted within 30 days. Once you sign in, it is attached to your account and the temporary record is removed.
If you purchase a plan, your payment is processed by Stripe, Inc. (United States). We do not receive or store your card details; they go directly to Stripe. We receive from Stripe only the information needed to confirm your subscription status (subscription id, plan type, billing period). See Stripe's privacy policy for their data practices.
With your consent (given via the cookie preferences banner), Google Analytics 4 (Google LLC, United States) collects anonymized usage data such as pages visited, session duration, and general geographic region. No birth data, report content, or form inputs are included in analytics. Analytics storage defaults to denied until you accept. You can withdraw consent at any time via the "Cookie preferences" link in the footer.
We use SendGrid (Twilio Inc., United States) to send sign-in links and account notifications to your email address. No birth data is included in these emails.
Our hosting provider (Google Firebase Hosting) may record standard access logs (IP address, requested URL, timestamp, user-agent). These logs exist for security and operational stability and are not used to identify visitors or combined with report data.
Your date, time, and place of birth are treated as ordinary personal data. However, the interpretive content the Service generates can touch on themes that, depending on where you live and how the data is combined, may be treated as sensitive or special-category data under laws such as Article 9 of the GDPR or Article 6 of Turkey's KVKK (for example, health, relationship, or belief themes).
Because your birth details are now stored in our cloud and used to generate this content, we handle these themes with extra care:
The Service uses an AI model in two distinct ways, and each one sends different data. In both cases the astrological facts are calculated by our own deterministic engine; the AI only writes or rewrites wording, and it never changes a calculated fact. Both uses run on Google Vertex AI (Gemini model) and both are asked for separately and require your consent.
When you generate a report, an AI model may be used to create a short, flowing personal sky reading displayed at the top of your calendar ("opening reading").
What is sent for the opening reading: A small set of structurally abstracted highlights derived from your report; for example, relative time buckets ("within the next 3 months"), event-type categories (abstract labels such as "transformation," "beginning," "challenge"), intensity levels (high/medium/low), life-area tags (career, relationships, health, creativity), and valence (supportive or demanding). This abstracted payload is designed to contain no personally identifying information.
What is not sent for the opening reading: Your name, birth date, birth time, birth place, city of residence, geographic coordinates, or astrological sign names.
How long the opening reading is stored: The generated text is stored in your account (Firestore, eur3, Frankfurt) alongside your chart, tied to a structural hash of the abstracted payload. If you generate the same chart again, the existing reading is reused and no new AI call is made. It is deleted when your chart is deleted or expires, or when you delete your data.
On paid reports, and only if you consent, the AI also rewrites passages of your report so that they speak to you as an individual instead of reading like a template. Unlike the opening reading, this layer necessarily receives information that identifies you, which is why we ask for it separately and explicitly.
What is sent for personalized rewriting:
What is not sent for personalized rewriting: Your email address, your account identifier, your exact date and time of birth, your geographic coordinates, and your payment details. Your date and time of birth are used by our own engine to calculate your chart; the date and time themselves are not transmitted to the AI. The consent text shown in the application refers to your birth details generally; in practice what reaches the AI is the chart calculated from them together with your birth and current city names.
Not used to train models: Under Google Cloud's terms for Vertex AI, the data sent for this purpose is not used to train Google's models.
How long the personalized text is stored: The rewritten text is stored encrypted with your report in your account (Firestore, eur3, Frankfurt) and is deleted when your chart is deleted or expires, or when you delete your data. So that identical text does not have to be generated twice, rewritten passages are additionally held in an internal cache. That cache is stored with the chart it belongs to, inside your account; each entry is addressed by an irreversible hash of the chart and of the reader context, and it holds the rewritten reading text only. It is deleted whenever the chart is deleted: when you delete the chart yourself, when it expires, and when you delete your account data.
Who processes it: We use Google Vertex AI (Gemini model, Google LLC, United States) for both layers. Google is already our cloud infrastructure provider for authentication, data storage, and report computation (see §3 above), so this does not add a new third-party sub-processor to our data chain. Processing occurs on Google's Vertex AI infrastructure. As of September 2026 this runs on Google's global-tier endpoint rather than a Europe-only region, because the AI models we use are not offered on a regional European endpoint. This does not change where your account or report data is stored (Firestore, eur3/Frankfurt); it affects only the transient AI rewriting step, which does not persist the data it processes. Google's data processing terms and commitments apply to this use in the same way they apply to the rest of our Google Cloud infrastructure. See Google's privacy policy for details.
Your consent: Before an AI-assisted reading is generated we ask for your explicit consent, and the consent text shown in the application lists the categories described above. You can decline, in which case no AI call is made for that chart and you receive your report in its deterministic form. You can withdraw your consent for future reports at any time, and you may contact hello@mrpolaris.com to request deletion of any stored AI-generated text.
In addition to your account data in the cloud (Section 3), the application saves a small number of interface preferences in your browser's local storage. These items are preferences only and are not transmitted to our servers:
| Key | What it stores | Why |
|---|---|---|
astro_theme | Your light/dark theme choice | Interface preference |
astro_lang | Your language choice | Interface preference |
astro_consent | A flag (with timestamp) that you accepted the Terms | So we do not ask again |
astro_consent_analytics | Your analytics consent choice | Consent Mode v2 preference |
Your birth details and reports are not kept only on your device; they are stored encrypted in your account in our cloud (Section 3.2). You can delete your browser preferences at any time by clearing your browser's site data for mrpolaris.com. To delete your account data in the cloud, use "Delete my data" in your account settings or contact us (Section 8).
We engage the following sub-processors who may process personal data on our behalf:
| Sub-processor | Role | Location |
|---|---|---|
| Google LLC (Firebase Auth, Firestore, Cloud Functions, Hosting, Vertex AI Gemini) | Authentication, encrypted data storage, report computation, hosting, AI-assisted interpretation: the opening reading (structurally abstracted data; no PII) and, on paid reports and with consent, personalized rewriting (first name, provided life context, city names, computed chart placements) | USA / EU (eur3 for stored data; AI processing via Google's global Vertex AI infrastructure, not Europe-confined) |
| Stripe, Inc. | Payment processing | USA |
| Google LLC (Google Analytics 4) | Anonymized usage analytics (consent-gated) | USA |
| Twilio SendGrid | Transactional email | USA |
You have rights of access, rectification, erasure, restriction, portability, and objection (Articles 15-21 GDPR). To exercise any of these rights, contact us at hello@mrpolaris.com. We will respond within 30 days. You also have the right to lodge a complaint with your local data protection supervisory authority.
Legal bases for processing:
We have carried out a data protection impact assessment for the storage of birth details and the generation of interpretive content that may touch on sensitive themes; a summary is available on request.
International transfers: Google, Stripe, and SendGrid are US-based. Transfers are covered by Standard Contractual Clauses or, where applicable, Data Privacy Framework certification. Your stored birth and report data resides in the EU (eur3, Frankfurt). Google Vertex AI processing (the AI rewriting step only, never storage) runs on Google's global infrastructure rather than a Europe-only region.
Under KVKK No. 6698, you have rights under Article 11 to learn whether your data is processed, request correction or deletion, and object to adverse outcomes. Contact us at hello@mrpolaris.com to exercise these rights. Your data is stored in the European Union (Frankfurt); where KVKK applies, cross-border storage relies on an appropriate safeguard under the regime in force since 1 June 2024.
We do not sell personal information. We do not share personal information for cross-context behavioral advertising. To submit a privacy request or opt out of any sharing, contact hello@mrpolaris.com.
Regardless of where you live, your birth and report data is stored encrypted in our EU cloud, used only to provide the Service to you, and never sold or shared with advertising companies. You choose how long we keep it, and you can request deletion at any time.
You choose how long we keep your birth details and reports. By default, your saved charts are kept for one year from the last time you access them (an inactivity-based period: each time you open a chart, the one-year clock restarts). If you do not return, the chart and everything derived from it (the cached report, the AI opening reading, and any generated PDF) is automatically deleted.
In your account settings you can change this to:
In addition:
The Service is not directed at anyone under 16 years of age (or the higher age of digital consent in your country). We do not knowingly collect data from children. If we become aware that we have done so, we will delete it.
We may update this policy from time to time. The "Effective date" at the top will reflect the latest version, and material changes will be announced with a notice on the Service before they take effect.
hello@mrpolaris.com Sky Tech USA LLC; operated from Texas, United States.
This policy describes data practices only. For the nature and limits of the astrological content itself (guidance and reflection, not medical, financial, legal, or psychological advice), please see our Terms of Use.