Privacy policy

Last updated

The short version: CoolFate has no ads and no trackers. Your charts belong to your account, only you can open them, and you can delete them at any time.

The full policy below explains exactly what we do and your rights under UK law.

1. Who we are

In this policy, “we”, “us” and “our” mean CoolFate.

We are the controller of the personal data described here under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This policy covers the CoolFate website and our iPhone and Android apps (together, the “service”). For any privacy question, email privacy@mycoolfate.com.

2. What we collect

We only collect what you give us to use the service:

  • Your account: your name, your email address and your password, which we store only in a scrambled (hashed) form that we cannot read. We also keep a record of your payments (the amount, date and whether you have used the reading), but never your card details.
  • Birth details: your date of birth, your time of birth or a rough time of day (optional), the place you were born (its name, country, coordinates and time zone), and optionally a first name or nickname and your gender.
  • What we calculate from them: your chart, its written readings, your life timeline and the predictions written for it.
  • Your answers: how you rate each prediction, for example “accurate” or “not accurate”, and when you answered.
  • Your fals: which book you opened, the page you were given and when. The question you hold in mind is never sent to us.
  • Place searches: the text you type to find your birthplace. We use it to look up matching places and do not store it.
  • Technical data: like any website, our hosting provider receives your IP address, browser or device type and the pages requested. We use this only to keep the service secure and working.

You can enter someone else’s birth details, for example a partner’s, but only with their permission. We do not ask for health, religious or other special category data, and we ask you not to type it into the name field.

3. How we use it and our lawful basis

  • To create, save and show your chart in your account. We need this to give you the reading you asked for, so our lawful basis is providing the service to you.
  • To record your answers to predictions so you can see how they compare over time. This is also based on your consent, given when you rate a prediction.
  • To find your birthplace when you search for it. This is necessary to provide the feature you asked for.
  • To improve the readings by looking at prediction ratings in total, without names, for example how often a type of prediction is rated accurate. This is in our legitimate interest in making the service better.
  • To keep the service secure, prevent abuse and fix faults using technical data. This is in our legitimate interest in running a safe service.

We do not sell your data, use it for advertising, build marketing profiles or track you across other apps and websites. Readings are generated automatically, but they are for entertainment and are never used to make decisions about you.

You can delete your chart, and the data that belongs to it, at any time.

4. Who can see it and who we share it with

Your charts are linked to your account and only you can open them, once you are signed in. We never publish charts or list them anywhere.

We use a small number of service providers who act on our instructions:

  • Cloudflare, Inc. hosts the website, apps backend and database, and protects the service from attacks.
  • Stripe processes payments on the website. It receives your payment details and email address directly and tells us only whether the payment succeeded. In the iPhone app, Apple processes the payment the same way.
  • Open-Meteo provides place search. Our server sends it only the place name you type. It never receives your birth date, name, gender or your IP address.

We may also disclose data if the law requires it, to protect people from harm, or to a buyer if the business is ever sold, in which case this policy would continue to apply.

Cloudflare may process data on servers outside the UK, including in the United States. Where that happens, the transfer is protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses or by the UK Extension to the EU-US Data Privacy Framework.

5. Cookies and storage on your device

We do not use advertising or analytics cookies, and there are no third-party trackers on the website or in the apps.

When you sign in, we set a session cookie that keeps you signed in, and our apps keep a sign-in token on your phone. These are strictly necessary for the account you asked for, so they do not need a cookie banner. Signing out removes them.

6. How long we keep it

  • Your account: until you delete it. Charts, their predictions and your answers: until you delete the chart or close your account. Deleting is immediate and permanent.
  • Database backups: deleted data drops out of our backups within 30 days.
  • Technical logs: up to 30 days.
  • Emails you send us: up to 2 years after your question is resolved.

If we ever close the service, we will delete all saved charts. See how to delete your data.

7. Your rights

Under UK data protection law you have the right to:

  • get a copy of the personal data we hold about you
  • have it corrected if it is wrong
  • have it deleted
  • restrict or object to how we use it
  • receive it in a portable format
  • withdraw your consent at any time

To use any of these rights, email privacy@mycoolfate.com. Please write from the email address on your account so we can find your data. We will reply within one month and there is no charge.

If you are unhappy with how we handle your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

8. Children

CoolFate is for people aged 13 and over. We do not knowingly collect data from children under 13. If you believe a child has created a chart, email us and we will delete it.

9. Security

All traffic is encrypted with HTTPS, passwords are stored only in hashed form, your charts open only when you are signed in, and only the people who run the service can access the database. No system is perfectly secure, so we keep what we collect to a minimum.

10. Changes to this policy

If we change how we use your data, we will update this page and the date at the top. For significant changes, such as adding accounts or new service providers, we will show a notice on the website and in the apps before the change applies.

11. Contact us

Email privacy@mycoolfate.com.