Privacy Policy
1. Scope
This Privacy Policy explains how maxisastrology.com ("Maxis", "we") collects, uses, and protects your personal data when you use our astrological calculation tools and consultations. By using the Platform, you accept the practices described here.
Data controller: Mihriban Öztürk (operator of maxisastrology.com) · info@maxisastrology.com
2. Data We Collect
a) Data you provide directly:
- Account data: name, email, password (stored only in irreversibly hashed form — no one, including us, can read the plaintext).
- Birth data: date, time, and place of birth (including coordinates) entered when using calculation tools. This data is also recorded for calculations made without an account. If you enter birth data for someone other than yourself, you confirm you have their informed consent.
- Contact data: your name, email address and message content if you write to us.
b) Data collected automatically:
- Usage records: which page was viewed and when, language preference, and your member number if you are signed in. We do not record IP addresses or browser fingerprints in these usage records. Your IP address is processed transiently only to prevent abuse and is not stored; short-lived entries may exist in the server logs of our hosting and security providers as a technical necessity.
- Cookies: See Section 7.
3. A Note on Birth Data
The combination of birth date, time, and place can identify a person with high probability. We therefore treat birth data with special care: it is processed solely for astrological calculation; it is never sold, rented, or shared with third parties for marketing; and birth data entered without an account is retained for the calculation function in the same way (see Section 6).
4. Purposes and Legal Bases
We process your data to: run calculation tools (performance of contract); create and manage accounts (contract); respond to your enquiries (pre-contractual request); ensure service security and prevent abuse (legitimate interest); measure site usage (legitimate interest — you can turn analytics off via the cookie banner); understand our audience through aggregate demographic estimates (explicit consent — "Accept all" on the banner); and comply with legal obligations (legal obligation).
5. Who We Share Data With
We do not sell your data. We share it only with service providers necessary to deliver the service, and only to the extent required:
- Hosting/infrastructure: our hosting provider — server infrastructure and management panel.
- Traffic security & content delivery: Cloudflare. Your connection details pass through this provider's servers as part of the service.
- Analytics: Google Analytics — runs by default to measure how the site's pages are used. If you use "Turn off analytics" on the cookie banner, no analytics cookie is written and no identifier is created for you; the visit is counted only as an anonymous, aggregate statistic.
- Demographic data (only with your consent): If you choose "Accept all" on the cookie banner, Google provides us with aggregate age-range, gender and interest estimates so we can understand our audience. This data is collected only for those who consent and is not used to show you ads; the site carries no advertising. You can withdraw consent by clearing your cookies.
- Google/Facebook sign-in: data is exchanged for authentication only if you choose that method.
- Content delivery network: serves the site's visual assets (fonts, stylesheets).
We may disclose data to authorities where legally required.
5.1. Emails We Send You
We send you transactional email only: address verification, a welcome message when your account is created, and password resets. We do not send newsletters, campaigns or marketing email; you are not added to a mailing list, and your address is not passed to third parties for marketing. Emails are sent from our own server; we use no external email marketing service. Should we ever begin sending promotional email, it will be on the basis of separate explicit consent and every message will carry an unsubscribe link.
5.2. International Transfers
Some of the providers listed above are established outside Türkiye, and your data may technically pass through their servers abroad. These are principally Cloudflare (traffic security and content delivery), Google (analytics and, if you choose it, Google sign-in) and Meta (only if you choose Facebook sign-in). Your birth data and account details are not transferred to these providers; they remain in our own database. Transfers take place within the framework of KVKK's provisions on transfers abroad and, for users accessing from the EEA and the UK, rely on the relevant providers' standard contractual clauses.
6. Retention
- Account data: while your account is active. You can delete your account yourself from your profile page; deletion is immediate — there is no waiting period and no "freeze" window. Your name, e-mail, charts, saved people and site preferences are permanently removed from the database at the same moment (subject to legal retention duties).
- Calculation records: retained for as long as necessary to provide the service; you may request deletion via the address in Section 8.
- Usage records: retained indefinitely for statistical purposes. These records contain no IP address, browser fingerprint, name or birth data — only which tool was used and when. If you delete your account, your name, e-mail, charts and saved people are permanently deleted. The statistical rows are not deleted; they retain only the member number you had at the time as a bare figure, and because the name, e-mail and other details behind that number are gone, the figure no longer points to anyone.
- Correspondence: for as long as the exchange requires, plus a reasonable archival period.
7. Cookies
We use strictly necessary cookies (session, security, language and theme preference). Alongside these, analytics cookies are used by default so we can improve the service; the legal basis is legitimate interest. This measurement only shows how the site is used (such as how many times a page was viewed). You can switch it off with "Turn off analytics" on the cookie banner shown on your first visit: no analytics cookie is then written and no identifier is created for you, and your visit is counted only as an anonymous, aggregate statistic.
Advertising and demographic cookies are separate and are off by default; they are enabled only if you choose "Accept all" on the banner — that is, with your explicit consent. If you do, Google supplies us with aggregate age-range, gender and interest estimates that help us understand our audience. The site carries no advertising and your data is not used to show you ads. The banner's third option, "Analytics only", keeps measurement on while refusing demographics.
Your choice is stored for 12 months and can be reset by clearing your browser cookies.
8. Your Rights
Depending on your jurisdiction (KVKK/GDPR), you have the right to access, rectify, erase, restrict, object to processing, and data portability. To exercise these rights, contact info@maxisastrology.com. We respond within the legally required period (30 days under KVKK).
9. Security
We apply technical and organizational measures including encryption (password hashing, HTTPS), access controls, and regular security reviews. No system is 100% secure, but we apply industry-standard protections.
10. Children
The Platform is not intended for anyone under 18. We delete data of users we identify as under 18.
11. Changes
We may update this policy. We will notify you of material changes; the current version is always published here.