Privacy Policy
1. Scope
This Privacy Policy explains how maxisastrology.com ("Maxis", "we") collects, uses, and protects your personal data when you use our astrological calculation tools and consultations. By using the Platform, you accept the practices described here.
Data controller: Maxis Astrology — a sole proprietorship registered with the Küçükçekmece Tax Office. Contact: info@maxisastrology.com
2. Data We Collect
a) Data you provide directly:
- Account data: name, email, password (stored only in irreversibly hashed form — no one, including us, can read the plaintext).
- Birth data: date, time, and place of birth (including coordinates) entered when using calculation tools. This data is also recorded for calculations made without an account. If you enter birth data for someone other than yourself, you confirm you have their informed consent.
- Contact data: your name, email address and message content if you write to us.
b) Data collected automatically:
- Usage records: which page was viewed and when, language preference, and your member number if you are signed in. We do not record IP addresses or browser fingerprints in these usage records. Your IP address is processed transiently only to prevent abuse and is not stored; short-lived entries may exist in the server logs of our hosting and security providers as a technical necessity.
- Cookies: See Section 7.
c) Location data (optional):
The Sky/Transit page takes your device's approximate location if you allow it in your browser (rounded to about 2 km). To find the city name, this approximate location is sent directly from your browser to the Nominatim service of the OpenStreetMap Foundation, located abroad; your IP address also reaches this service in the process. Your location is not stored on our servers. If the name you type into the city search box is not in our list, only that name is queried from the same service via our server. If you do not allow location access, you can choose the city manually.
3. A Note on Birth Data
The combination of birth date, time, and place can identify a person with high probability. We therefore treat birth data with special care: it is processed solely for astrological calculation; it is never sold, rented, or shared with third parties for marketing.
The birth data you enter is kept until you delete it, so that you can return to your chart. You can delete it with the "Delete my data" button or by writing to info@maxisastrology.com; deleted data is kept in backup for 30 days and then permanently deleted. Statistics that are separated from your identity and cannot be traced back to any person are derived from the charts.
4. Purposes and Legal Bases
We process your data to: run calculation tools (performance of contract); create and manage accounts (contract); respond to your enquiries (pre-contractual request); ensure service security and prevent abuse (legitimate interest); measure site usage (legitimate interest — you can turn analytics off via the cookie banner); understand our audience through aggregate demographic estimates (explicit consent — "Accept all" on the banner); and comply with legal obligations (legal obligation).
5. Who We Share Data With
We do not sell your data. We share it only with service providers necessary to deliver the service, and only to the extent required:
- Hosting/infrastructure: our hosting provider — server infrastructure and management panel.
- Traffic security & content delivery: Cloudflare. Your connection details pass through this provider's servers as part of the service.
- Analytics: Google Analytics — runs by default to measure how the site's pages are used. If you use "Turn off analytics" on the cookie banner, no analytics cookie is written and no identifier is created for you; the visit is counted only as an anonymous, aggregate statistic.
- Demographic data (only with your consent): If you choose "Accept all" on the cookie banner, Google provides us with aggregate age-range, gender and interest estimates so we can understand our audience. This data is collected only for those who consent and is not used to show you ads; the site carries no advertising. You can withdraw consent by clearing your cookies.
- Google/Facebook sign-in: data is exchanged for authentication only if you choose that method.
- Content delivery network: serves the site's visual assets (fonts, stylesheets).
We may disclose data to authorities where legally required.
5.1. Emails We Send You
We send you transactional email only: address verification, a welcome message when your account is created, and password resets. We do not send newsletters, campaigns or marketing email; you are not added to a mailing list, and your address is not passed to third parties for marketing. Emails are sent from our own server; we use no external email marketing service. Should we ever begin sending promotional email, it will be on the basis of separate explicit consent and every message will carry an unsubscribe link.
5.2. International Transfers
Some of the providers listed above are established outside Türkiye, and your data may technically pass through their servers abroad. These are principally Cloudflare (traffic security and content delivery), Google (analytics and, if you choose it, Google sign-in) and Meta (only if you choose Facebook sign-in). Your birth data and account details are kept in our own database and are not transferred to third-party service providers. The only exceptions are your approximate location sent to OpenStreetMap to find the city name, the city name you type into the search box, and — when the time zone cannot otherwise be determined — the coordinates of your birth place, which are queried from the timeapi.io service to find the time zone. Transfers take place within the framework of KVKK's provisions on transfers abroad and, for users accessing from the EEA and the UK, rely on the relevant providers' standard contractual clauses.
5.3. Payments
Payments are processed by [ÖDEME KURULUŞU]. Your card details never reach our servers and are not stored by us. The payment institution acts as a data controller under its own privacy notice.
6. Retention
- Account data: while your account is active. You can delete your account yourself from your profile page; deletion is immediate — there is no waiting period and no "freeze" window. Your name, e-mail, charts, saved people and site preferences are permanently removed from the database at the same moment (subject to legal retention duties).
- Calculation records: kept until you delete them; after deletion they are kept in backup for 30 days and then permanently deleted. You can use the "Delete my data" button or write to the address in Section 8.
- Usage records: retained indefinitely for statistical purposes. These records contain no IP address, browser fingerprint, name or birth data — only which tool was used and when. If you delete your account, your name, e-mail, charts and saved people are permanently deleted. The statistical rows are not deleted; they retain only the member number you had at the time as a bare figure, and because the name, e-mail and other details behind that number are gone, the figure no longer points to anyone.
- Correspondence: for as long as the exchange requires, plus a reasonable archival period.
7. Cookies
We use strictly necessary cookies (session, security, language and theme preference). Alongside these, analytics cookies are used by default so we can improve the service; the legal basis is legitimate interest. This measurement only shows how the site is used (such as how many times a page was viewed). You can switch it off with "Turn off analytics" on the cookie banner shown on your first visit: no analytics cookie is then written and no identifier is created for you, and your visit is counted only as an anonymous, aggregate statistic.
Advertising and demographic cookies are separate and are off by default; they are enabled only if you choose "Accept all" on the banner — that is, with your explicit consent. If you do, Google supplies us with aggregate age-range, gender and interest estimates that help us understand our audience. The site carries no advertising and your data is not used to show you ads. The banner's third option, "Analytics only", keeps measurement on while refusing demographics.
Your choice is stored for 12 months and can be reset by clearing your browser cookies.
Guest cookie (mx_misafir): When you calculate a chart without an account, this cookie is set to link your guest charts to this device. It holds only a random identifier and contains no name, e-mail or birth data. It lasts 400 days and is renewed each time a new chart is saved. It is deleted together with your charts when you use the "Delete my data" button.
7.1. Data About Other People
You are responsible for any birth data belonging to another person that you enter into the synastry and comparison tools. Before entering it, you must have informed that person and obtained their consent. Partner data is not used for anything other than the calculation and is not stored when the tools are used without an account.
8. Your Rights
Depending on your jurisdiction (KVKK/GDPR), you have the right to access, rectify, erase, restrict, object to processing, and data portability. To exercise these rights, contact info@maxisastrology.com. We respond within the legally required period (30 days under KVKK).
9. Security
We apply technical and organizational measures including encryption (password hashing, HTTPS), access controls, and regular security reviews. No system is 100% secure, but we apply industry-standard protections.
10. Children
The Platform is not intended for anyone under 18. We delete data of users we identify as under 18.
11. Changes
We may update this policy. We will notify you of material changes; the current version is always published here.