Privacy
What runs where
Astral's chart calculation and birthplace lookup happen locally, inside Astral's own server process, using astronomical and place data files stored on that server. There is no network geocoder and no external calculation service in the request path, so no third party is asked where or when you were born.
What is sent to model providers
Writing a portrait involves two model providers, in this order.
- The chart facts Astral calculated are sent to OpenAI, which composes the English portrait.
- The English portrait is then sent to Google Gemini, which produces the Mongolian version. It receives no chart facts and no birth details of any kind — only the English portrait text.
What is deliberately not sent
Your birth date, your birth time, the birthplace you selected and the name you asked Astral to call you are not included in either provider request. Only the calculated chart facts leave Astral, and only to compose the English portrait.
What is still personal material
Your chart facts and your portrait text are still material about you. The providers named above process them under their own terms and their own retention practices. Astral does not control those practices and does not claim they are limited beyond what those providers publish.
What Astral stores
Your completed portrait is stored on Astral's own server, so that reopening your private link shows the same reading rather than writing a new one. That record holds the birth details you gave, the reading you chose and its price, and the portrait text in both languages.
An order is stored from the moment you ask to pay, which is before any money moves. It holds the birth details you entered, the reading you chose and its price, and the payment codes issued against it. This means an order you started and never paid for still holds the birth details you typed into it.
There is no encryption at rest, and no access control beyond your private link. There is no retention limit either: a reading stays until it is deleted by hand. Astral keeps a nightly backup of its database for fourteen days, held on the same server and nowhere else.
Your private link is what protects your reading, and it sits in the web address. That means it can end up in your browser history, or anywhere you paste it. Astral keeps no record of which links were opened. Treat the link as private: anyone who has it can read the whole portrait.
What Astral does not claim
- Not end-to-end encryption.
- Not absolute confidentiality.
- Not compliance with any particular data-protection regime.
- Not a retention guarantee.
- Not a completed production security review.
Payment
A portrait is paid for before it is written. Payment is by QPay QR code, issued through the payment provider wire.mn. You pay from your own banking app, and the transfer happens between you and your bank.
Astral never receives your card number, your bank credentials or your account details. Nothing of that kind is requested, entered on this site or stored by it. The code you scan is drawn on Astral's own server from a payload the payment provider returns, so displaying it makes no request to any third party from your browser.
What wire.mn is sent, to create a code, is the amount, the currency, a reference identifying the order, and a description naming Astral and which reading was chosen. Your name, your birth date, your birth time and your birthplace are not included in that request, and no chart facts are either.
Asking for a copy, or for deletion
Message Astral.mn on Facebook, or call +976 9595 2001 if you would rather speak to someone. You can ask what is stored about you, ask for a copy of it, ask for a mistake to be corrected, or ask for it to be deleted.
Have your private link ready. Astral has no accounts and no email address for you, so that link is the only thing tying you to a record — without it there is no honest way to tell which reading is yours, and handing someone else's reading to a caller would be the worse failure. Deletion removes the reading and the order behind it, and it is done by hand rather than by a control on this site.
Two things it cannot do. It cannot reach into OpenAI's or Google's systems: what they keep is governed by their own terms, named above. And once a reading is deleted the link stops working for you as well — though a copy may remain in Astral's backups for up to fourteen days before it ages out.
Place data
Place data © GeoNames (https://www.geonames.org), licensed under Creative Commons Attribution 4.0 International (CC BY 4.0).