Privacy policy

ZodiaPaws makes playful astrology readings for cats and dogs. They're for entertainment only: not science, and never health, diet, medical or behavioural advice. We collect only what a reading needs, we don't sell data, and the only tracker on the site, Meta's advertising cookie, runs only if you say yes to it. This policy explains the details.

Who is responsible

ZodiaPaws (“we”) is the controller of your personal data, based in the European Union. For anything about your data, email hello@zodiapaws.com.

What we collect

When you ask for a reading or buy a report

• About your pet: species, name, gender, breed, and birth date or the day they came home.
• About you: your email address and whether you'd like our offers and news by email.
• If you add them: a photo of your pet, and your own birthday (for the compatibility section).
• When you pay: what you bought, the amount and currency, and the references Stripe gives us. Your card details go straight to Stripe; we never see them.
• Gift vouchers: your email and name (if you give it), the recipient's email and your message.
• Emails: which emails we sent you, and when, so we don't send the same one twice.

When you sign up for the free weekly sign forecast

• What you give us: your email address, whether it's for a dog or a cat, and the sign. If you give a birthday instead of the sign, your browser works the sign out and only the sign is sent to us.
• What we note with it: the wording of the consent box you ticked and when, the page you signed up on, whether you confirmed your address (and when), the currency the site showed you (for the price in our offer), and which weekly emails we sent you.

When you visit

• Bot check: our forms use Cloudflare Turnstile, which looks at technical signals from your browser (such as your IP address) to tell people from bots. We get only a pass or fail.
• Anonymous form statistics: we count how far visitors get through the reading form (for example “started” or “picked a date”), whether the screen is phone- or desktop-sized, and which version of the form was shown. We also count which of our free tools (such as the sign calculator) were used, by the tool's name only: the dates and names you type into a tool stay in your browser. If you then ask for a reading in the same tab, we save the name of the last tool you used with it. A random ID is kept in your browser's session storage and disappears when you close the tab. We don't store names, emails, pet details, IP addresses or browser details with these counts, and we don't use cookies.
• Where you came from: on the first page you open in a browser tab, we note that page's address (with any report link or other code in it left out), the name of the website that sent you (such as google.com, never the full address) and any campaign tags in the link you followed (utm_source, utm_medium, utm_campaign and utm_content, such as “pinterest” or the name of the ad you clicked). The note is kept in your browser's session storage and disappears when you close the tab. We count it as an anonymous visit, and if you ask for a reading or buy something in that tab, we save it with that reading or order, so we can see which pages and channels bring people to ZodiaPaws. We don't share it and don't use cookies for it; it's how we see that a visit came from one of our ads (for example utm_source=meta).
• Visit statistics: Cloudflare Web Analytics counts page views, the page you came from, your country and your device type, so we can see which pages people visit. It uses no cookies, stores nothing in your browser and doesn't identify or follow you across sites.
• Marketing cookies (only if you accept): see Cookies and Meta ads below.
• Server logs: our host, Cloudflare, briefly keeps standard request logs to run and protect the site.

Why we use it, and on what legal basis

• To make and deliver your reading and report, including the portrait, PDF, gift vouchers and weekly forecasts: to perform our contract with you (GDPR art. 6(1)(b)).
• To take payments and keep accounts: contract, and our legal duty to keep financial records (art. 6(1)(c)).
• Service emails (your report, receipts, trial reminders, a reminder if you left checkout or haven't added a photo yet): contract and our legitimate interest in helping you finish what you started (art. 6(1)(f)). Reminders have an unsubscribe link.
• Offers and news by email (for example a discount after your free reading): only if you ticked the box, based on your consent (art. 6(1)(a)). Unsubscribe anytime with the link in each email.
• The free weekly sign forecast, and the offer at the end of each one: only after you ticked the box and confirmed your address from the email we send (double opt-in), based on your consent (art. 6(1)(a)). Unsubscribe anytime with the link in each email.
• Meta advertising cookies and events (the Pixel and the Conversions API): only if you clicked “Accept”, based on your consent (art. 6(1)(a) GDPR and the ePrivacy rules on cookies). Withdraw it anytime under “Cookie settings”.
• Bot checks, statistics (including where you came from) and security: our legitimate interest in keeping the site working and free of abuse, and in knowing which pages and channels bring visitors (art. 6(1)(f)).

Cookies and Meta ads

We advertise on Facebook and Instagram. The first time you visit, a banner asks whether we may use Meta's advertising cookie. “Accept” and “Reject” are equally easy, and the site works the same either way. Until you choose, and if you reject, nothing from Meta loads and no marketing cookie is set.

If you accept:

• In your browser: the Meta Pixel loads and sets Meta's cookies (_fbp, and _fbc if you came from one of our ads). It tells Meta which page you're on (with any report link or other code in the address left out), and when you ask for a free reading, start a checkout or pay, with the amount and currency.
• From our server: when you ask for a free reading or pay, we send Meta the same event through its Conversions API, with your email address as a scrambled one-way code (a SHA-256 hash, not the address itself), Meta's cookie values and your browser's user agent; for a free reading also your IP address. Meta uses it to match the event to a Facebook or Instagram account, so we can see which ads work and show ours to people likely to enjoy ZodiaPaws. We never send your pet's details, your birthday or your report.
• What we keep: that you accepted, when, and which banner wording you saw, with the cookie values and user agent, saved with your reading or order.

Your choice is kept in our own cookie (zp_consent) for six months, then we ask again. Change your mind anytime with “Cookie settings” at the bottom of every page: if you reject, we remove Meta's cookies and send nothing more. Cloudflare's visit statistics stay cookie-free whatever you choose.

Meta Platforms Ireland Ltd. receives this data. For collecting it through the Pixel and sending it to Meta, we and Meta are jointly responsible; what Meta then does with it is up to Meta, under its own privacy policy (facebook.com/privacy/policy). Meta may transfer data to the US under the EU-US Data Privacy Framework.

Your pet's photo

We use the photo only to make your Story card and, if you buy the full report or the Cosmic Calendar, the cosmic portraits (the calendar adds four seasonal ones). The original photo is deleted 30 days after you upload it, together with the Story cards made from it. The portraits and the portrait Story cards stay with your report and calendar.

Your report link

Every reading has its own private link. It isn't listed anywhere and search engines are asked not to show it, but anyone who has the link can see the report, including your pet's name, photo and portrait. Keep it like a key, and share it only with people you'd show the report to. If a link has been shared further than you wanted, email us.

The weekly forecast is managed with a separate, time-limited link that we email to the owner's address, so having the report link alone isn't enough to change or cancel a subscription.

Who helps us

These companies process data for us under data processing agreements, only to provide their service. Where data leaves the European Economic Area, the transfer is covered by the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

We don't sell your data. The one thing shared for advertising is what's described under Cookies and Meta ads, and only if you accepted.

How long we keep it

• Original pet photos: 30 days.
• Readings, reports and portraits: until you ask us to delete them, so your link keeps working whenever you come back to it.
• Orders and payment records: as long as tax and accounting law requires us to keep them (usually 5 to 10 years).
• Marketing consent: until you unsubscribe; we then keep a note that you did, so we don't email you again.
• Free sign forecast signups: an address that isn't confirmed within 30 days is deleted. A confirmed one is kept until you unsubscribe; we then keep the address marked as unsubscribed, with when you consented and when you stopped, so we can show your choice and never email it again. Ask us and we'll delete it completely.
• Anonymous form statistics: they can't be linked to you, so we keep them for as long as they're useful.
• Meta advertising data (if you accepted): with the reading or order it was saved with. Your cookie choice: six months in your browser.
• Where you came from: the anonymous visit count for as long as it's useful; the copy saved with a reading or order for as long as we keep that reading or order.

Your rights

Under the GDPR you can ask us to:

• tell you what data we hold about you and give you a copy;
• correct it, or delete it;
• limit how we use it, or object to our use based on legitimate interests;
• send it to you or another service in a common format;
• stop marketing emails: withdrawing consent doesn't affect what we did before.

Email hello@zodiapaws.com from the address you used with us, and we'll reply within one month. You can also complain to the data protection authority in the EU country where you live or work, or where you think your rights were infringed.

Children

ZodiaPaws is meant for adults. We don't knowingly collect data from children under 16.

Changes

If we change this policy, we'll update the date at the top, and tell you by email if the change matters to you. See also our Terms.