Privacy policy
Last updated: 20 October 2026
1. Who is responsible for your data
The controller of your personal data is Something Digital d.o.o., Gračanska cesta 127c, 10000 Zagreb, Croatia, OIB 50480964887. For any question about your data, write to [email protected].
2. What data we collect
- Birth data you enter: date, time and place of birth, your first name, and your answers in the questionnaire (areas of interest, relationship status).
- Email address, so we can send you your summary, reports and horoscopes, and your choice about marketing emails.
- Data of other people you enter: the first name and birth data of a partner or a child, when you order those reports. Before you enter them, let that person know. We use their data only for the report you ordered, and they can exercise the same rights as you by writing to [email protected]. When you buy a gift we also store your email, the recipient’s name and the message, if you enter them.
- Orders and subscriptions: what you bought, when, in which language, and the status of your subscription.
- Technical data: IP address and basic information about your browser in server and security logs. When you sign up we also save the source of your visit (the site you came from and the campaign tags in the link), so we know which channels bring customers (legitimate interest).
- Tester questionnaire: answers are stored anonymously, without your email address.
We do not receive or store your card details. They are entered only with Stripe.
3. Why we use it and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Calculating your chart, preparing and delivering reports, horoscopes and the calendar | Performance of a contract, Art. 6(1)(b) |
| Sending your free summary and service emails about your orders | Performance of a contract and steps before it, Art. 6(1)(b) |
| Emails with horoscopes and offers you have not ordered | Your consent, Art. 6(1)(a), which you can withdraw at any time |
| Security, preventing abuse, fixing errors | Legitimate interest, Art. 6(1)(f) |
| Measuring the results of our ads on Facebook and Instagram (Meta pixel and Conversions API) | Your consent, Art. 6(1)(a), given in the cookie banner, which you can withdraw at any time with “Cookie settings” |
| Site statistics (Google Analytics) | Your consent, Art. 6(1)(a), given in the cookie banner, which you can withdraw at any time with “Cookie settings” |
| Anonymous visit statistics without cookies (Cloudflare Web Analytics) | Legitimate interest, Art. 6(1)(f) |
| Keeping accounting records | Legal obligation, Art. 6(1)(c) |
Birth data is not a special category of data under the GDPR, but we treat it with care: it is used only to calculate charts and write your texts.
4. Who processes data for us
We use carefully chosen service providers, bound by data processing agreements:
- Hetzner Online GmbH (Germany): servers where the application and database run.
- Cloudflare, Inc.: delivery and protection of the website. We also use Cloudflare Web Analytics: anonymous visit statistics without cookies (pages visited, the site you came from, browser and device type, country), without storing your IP address.
- Anthropic PBC: artificial intelligence that writes the texts. We send it the calculated chart, your first name and the language, but not your email address.
- Resend: sending emails.
- Stripe (Link): payments. For purchases, Stripe acts through its Link service as the reseller (merchant of record) and processes payment data as an independent controller under its own privacy policy.
- Meta Platforms Ireland Ltd. (Ireland): measuring the results of our ads on Facebook and Instagram, only if you click “Accept all” in the cookie banner. We then send Meta the event (for example a completed purchase) and its value, the browser and ad-click identifiers, your IP address and browser details, and, in hashed (pseudonymised) form, your email address, first name, the country of the language version and a customer identifier that lets Meta link your later events. For collecting and sending this data we are joint controllers with Meta (Art. 26 GDPR), and Meta then processes it as an independent controller under its own privacy policy. Without your consent nothing is sent to Meta.
- Google Ireland Ltd. (Ireland): site statistics with Google Analytics, only if you click “Accept all” in the cookie banner. Google receives the pages you visit, steps in the questionnaire and purchases (product and value), your IP address, which is shortened, and browser details, but not your email address or birth data. Google processes the data as our processor; data may be transferred to the United States under the EU-US Data Privacy Framework.
Some of these providers are based in the United States. Transfers are protected by the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
We do not sell your data and we do not share it with anyone for their own advertising.
5. How long we keep it
- Birth data, reports and orders: as long as you use Mirastela, and at most 3 years after your last activity, unless you ask us to delete them sooner.
- Accounting records about payments: 11 years, as required by Croatian law.
- Server and security logs: up to 30 days.
- Consent for marketing emails: until you withdraw it.
6. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict its processing, to data portability and to object to processing based on legitimate interest. You can withdraw your consent for marketing emails at any time with the link in every email.
To exercise your rights, write to [email protected] from the email address you used with us. If you no longer have access to it, write to us anyway: we will only ask for the information needed to verify your identity. We reply within one month.
On the My reports page you can also download all your data or delete it yourself, after signing in with a link sent to your email.
You also have the right to lodge a complaint with a supervisory authority: in Croatia the Personal Data Protection Agency (AZOP, azop.hr), or the authority in the EU country where you live.
7. Automated processing
The texts are written automatically, but this has no legal or similarly significant effect on you. We do not make automated decisions about you in the sense of Article 22 GDPR.
8. Age
Mirastela is intended for adults. A child’s chart can be ordered only by a parent or legal guardian, who is responsible for entering the child’s data.
9. Changes
We will update this policy when our processing changes. The date at the top shows the current version.