Privacy

Birth details you enter in the calculator

Your birth date, time and place go to our server, which works out your chart and sends it straight back to your browser. We don’t save them, and they don’t appear in our logs.

Paid readings

When you order a reading, we keep the birth details you confirm, the email address you pay with, what you bought, the boxes you ticked at checkout and when, and the payment’s reference, amount and any refund. We use them to prepare and deliver your reading, to answer questions about your order and for our accounts. These records are stored on our server in Singapore.

Payments are handled by Stripe. You enter your card details on Stripe’s payment page, so we never see or store your card number. Stripe’s own privacy policy covers what happens on their side.

If you leave the payment page without paying, we delete the birth details and email address from that unfinished order within two days.

Email sign-ups

If you join a list, we keep your email address, which list it is (the 7-day course, a waitlist for a reading, or monthly notes), the page you signed up on, the time, and your Day Master if you signed up from your chart. These records are stored on our server in Singapore.

Our outgoing email provider is Google Workspace. When we send a message, Google processes its recipient address and message content for delivery. We manage subscription preferences on our own server.

The 7-day course and monthly notes have not started sending yet. When they launch, each email will include an unsubscribe link.

Your account

If you sign in, we keep your email address, when you created your account and when you last signed in. Your account shows the readings ordered with that address.

To sign you in, we email you a one-time link and code. The sign-in request records your IP address and is deleted within a day. While you’re signed in, we keep a record of the session with your browser type and IP address, used only to keep your account secure. It ends when you sign out, or after 30 days.

If you continue with Google, Google tells us your email address and an ID for your Google account, which we keep so we recognize you next time. We don’t ask Google for anything else, and we don’t store your name or photo. Google’s own privacy policy covers what happens on their side.

You can delete your account at any time from the account page.

Emails you send us

Our mailbox, hello@moonandtao.com, is hosted by Google Workspace, so messages you send us are stored there.

Server logs

Like most websites, our web server records standard technical details for each request: your IP address, the page requested, the time and your browser type. We use them only for security and fixing problems, and they’re deleted after about two weeks.

Your language

If you choose a language on the site, a small cookie remembers it (mt-lang, kept for a year) so we don’t switch you back. It holds only the language. Your browser’s language setting may also be used to offer or open the Spanish version of a page.

Visit statistics

We use Umami Cloud in its EU data region to count visits: which pages are viewed, which site sent you, your country and your type of device. It doesn’t use cookies or follow you to other sites. We also count actions such as charts calculated, list sign-ups, share-button clicks, interest in upcoming readings and which readings people start to order. Chart events include the Day Master and whether the birth time is known or the Day Master is uncertain; we don’t send your birth date, birth time, birthplace, name or email address to Umami. URL query strings and fragments are excluded. We use the Hobby plan, which retains analytics data for six months. Browsers set to “Do Not Track” aren’t counted.

Share cards

Share cards show a Day Master only. They contain no birth details or anything else about you.

Deleting your data

Email hello@moonandtao.com from the address you signed up with. We’ll delete it and everything stored with it, and confirm when it’s done. If you have an account, you can also delete it yourself from the account page. Once emails start, each one will also have an unsubscribe link. More on the contact page.

Children

This site isn’t meant for children under 13, and we don’t knowingly collect their data.