Legal
Privacy policy
Last updated: September 19, 2026
This policy explains what This Might Explain Everything ("we", "us") collects when you use our website, free preview, astrology charts and questions library (the "Product"), why, who else handles it, and what you can do about it.
The short version: we collect as little as we can, we never sell your data, and your birth details are only stored on our servers if you buy.
1. Who is responsible
This Might Explain Everything is responsible for your personal data (the "controller" under the GDPR and Brazil’s LGPD). Contact us about privacy at hello@thismightexplaineverything.com.
2. What we collect
2.1 Free preview
When you ask for a free preview, your birth date, time and place are sent to our server to calculate the chart and then discarded. We don’t store them on our servers. Your browser keeps the preview on your device so a refresh doesn’t recalculate it. It’s deleted the first time you open our site after 7 days, when you click “New chart”, or when you clear your browser data for our site. While you type your birthplace, the text is sent to Open-Meteo to find matching places.
2.2 When you buy
- Contact details: your email address, to deliver access, receipts and important service messages.
- Birth details and charts: the birth date, time and place you enter, and the charts we calculate from them, so you can come back to your report.
- Access details: your order code and the password you set. We only store a scrambled (hashed) version of the password and can’t read it.
- Purchase records: what you bought, when, the price, whether tax applied, and your acceptance of the Terms at checkout.
2.3 Payments
Stripe processes payments. We never see or store your full card number or bank details. Stripe shares limited data with us (such as your email and billing country) for receipts, fraud prevention and tax.
2.4 Support requests
If you contact support, we keep your message, your email and anything you choose to include, so we can help and keep a record.
2.5 Technical data
Like any website, our servers see your IP address and basic browser information. We use it to keep the service secure: to limit abuse and stop automated attacks. Short rate-limit records expire within a day; server logs are kept for about 30 days.
3. Why we use it, and on what legal basis
- To provide the Product (calculate and show your charts, deliver access, send receipts, handle support): necessary to perform our contract with you, or to answer your request for a free preview.
- To keep the service secure (rate limiting, bot checks, fixing failed orders): our legitimate interest in protecting the service and our customers.
- To understand how the site is used (Google Analytics): only with your consent, which you can withdraw at any time.
- To meet legal duties such as keeping accounting and tax records.
We don’t use your data for automated decisions about you, and we don’t send marketing emails.
4. Who else handles your data
We use these services to run the Product. Each gets only what it needs for its job and processes it on our behalf. We don’t sell, rent or trade your data.
Stripe · USA
Payments. Receives your payment details and email at checkout.
Google Cloud / Firebase · USA
Runs our servers and stores orders (email, birth details, chart, hashed password). Keeps server logs, including IP addresses, for about 30 days.
Resend · USA
Sends order and access emails. Receives your email address and the message.
Cloudflare Turnstile · Global
Checks that forms (free preview and support) are used by a person, not a bot.
Gemini Octopus · USA
Support desk. Receives your support form messages (name, email, message, optional order ID).
Upstash · USA
Rate limiting. Briefly holds IP-based counters (minutes to one day) to stop abuse.
Open-Meteo · EU (Switzerland)
Birthplace search. Receives the place name you type, not your identity.
Slack · USA
Internal alerts when an order fails (for example a payment with no confirmation email), so we can fix it. These may include your email and order reference.
Google Analytics · USA
Anonymous usage statistics. Only if you accept analytics cookies.
We may also share data if the law requires it, or with a buyer of the business if it’s ever sold, under this same policy.
5. Your AI conversations
The questions library is meant to be used with AI tools such as ChatGPT, Claude, Gemini or DeepSeek. Those conversations happen on their platforms, under their privacy policies. We can’t see, read or store them.
7. How long we keep it
- Orders, birth details and charts: for as long as you have access to your purchase, or until you ask us to delete them.
- Payment and tax records: as long as tax and accounting law requires, even after you delete your order.
- Support messages: as long as needed to resolve your request and keep a reasonable record.
- Rate-limit records: up to one day. Server logs: about 30 days.
- Free previews: not stored on our servers. On your device, deleted the first time you open our site after 7 days (or sooner with “New chart”).
8. Your rights
Wherever you live, you can ask us to show you, correct, export or delete your data, and to stop using it for anything that relies on consent or legitimate interest. Depending on your location (for example the EU, UK, Brazil or certain US states) these are legal rights; we honour them for everyone.
To delete your chart data, use our data request form. For anything else, email hello@thismightexplaineverything.com. We may need to confirm it’s you, and we’ll answer within 30 days.
If you think we’ve handled your data wrongly, you can also complain to your local data protection authority (for example your EU country’s authority, the UK ICO, or Brazil’s ANPD). We’d appreciate the chance to fix it first.
9. Security
Everything travels over encrypted connections (HTTPS), passwords are stored hashed, access to your report requires your order code and password, and our systems limit repeated guessing. No system is perfectly secure, but we take reasonable care and will tell you if a breach affects your data, as the law requires.
10. International transfers
Our main providers are based in the United States, so your data may be processed there. Where the law requires, we rely on safeguards our providers offer, such as the European Commission’s standard contractual clauses.
11. Children
The Product isn’t meant for children under 16, and we don’t knowingly collect their data. If you think a child has given us their details, contact us and we’ll delete them.
12. Changes to this policy
If we change how we handle data, we’ll update this page and the date at the top. For significant changes affecting customers, we’ll also let you know by email.
13. Contact
Questions about privacy? Email hello@thismightexplaineverything.com. See also our Terms of Use.