Skip to content

VEDIC ASTROLOGY · KP · JAIMINI · PRASHNA · NUMEROLOGY

Taare Taraney

Legal

Privacy policy

Last updated: 1 January 2026

What this covers

This policy covers taaretaraney.com and the readings provided through it. It is written to be read rather than to satisfy a lawyer, so it says plainly what is collected and why.

What we collect

Birth details

Date, time and place of birth, and the name you give. These are the inputs a chart needs. Treated as sensitive personal data throughout.

  • If you generate a chart without an account: the full details are used to compute the chart and are not stored. What is kept is a summary — ascendant, Moon sign, nakshatra, the place name and the date — for usage statistics. Nothing in that summary identifies you.
  • If you save a profile while signed in: the details are encrypted with AES-256-GCM before they are written, using a key held in the server environment. The plaintext never lands in the database. Only your own account can decrypt them.

Account details

Your name, email address and a password hash (argon2id — the password itself is never stored and cannot be recovered from the hash). If you sign in with Google we receive your email, name and profile picture URL from Google, and nothing else.

Messages you send

Contact form submissions, questions, review text and chat conversations, with the email address or phone number you provide. These are kept so we can reply to you and so we have a record of what was asked.

Analytics

We run our own first-party analytics. There are no third-party trackers, no advertising pixels and no cross-site identifiers. What is recorded, and only after you allow it in the consent banner:

  • The page path and the referring site’s hostname
  • Device type, browser name and screen size
  • Country and city, from the CDN’s own header
  • A visitor count, derived from a hash of your IP address combined with a salt that rotates every day. Because the salt changes daily, the hash cannot be reversed and cannot be used to recognise you across days.

Declining the banner means the beacon does not run at all — nothing is sent and nothing is recorded.

What we never do

  • Sell, rent or share your personal data with third parties.
  • Add you to any mailing list without an explicit double opt-in.
  • Use your birth details for anything other than the reading you asked for.
  • Store your payment details. Payments are arranged directly.

Third parties we rely on

  • Place lookup. When you search for a birth place, the query is sent to a public geocoding service to resolve coordinates and timezone. Only the place name is sent — never your name, date or time.
  • Google (optional). Only if you choose to sign in with Google.
  • Google Gemini (optional). If the chat assistant is enabled, your messages are sent to Google’s API to generate a reply. Do not put anything in the chat you would not want processed by a third party; for a real reading, use the contact form or WhatsApp.
  • Email delivery. Transactional email is sent through a provider configured by us, which sees your email address and the message content.

How long we keep things

  • Account and saved profiles: until you delete them or delete your account.
  • Messages and enquiries: three years, so we can refer back to past readings.
  • Analytics: aggregated daily totals indefinitely; the per-day hashes expire in 40 days.
  • Sessions: refresh tokens expire after 30 days and rotate on every use.

Your rights

You can do both of these yourself, immediately, from your account settings — no email and no waiting period:

  • Export everything. A single JSON file with your account, every saved profile (decrypted for you), your enquiries, reviews, saved articles and chat transcripts.
  • Delete everything. Permanently removes your account and all associated records. This is not reversible and there is no grace period.

You can also object to processing, ask for a correction, or withdraw consent at any time. Withdraw analytics consent by clearing this site’s storage in your browser; the banner will ask again.

Security

  • HTTPS everywhere, with HSTS.
  • Passwords hashed with argon2id.
  • Birth details encrypted at rest with AES-256-GCM.
  • Session cookies httpOnly, secure and SameSite, with refresh-token rotation and reuse detection.
  • CSRF protection on every cookie-authenticated write.
  • Rate limiting on authentication, forms, chat and the analytics endpoint.
  • Editor-authored HTML sanitised server-side against an allowlist before storage.

No system is perfect. If you find a security issue, please tell us rather than publishing it, and we will fix it and credit you if you would like.

Children

This site is not intended for anyone under 18. We do not knowingly collect data from children. A parent may of course ask about a child’s chart; the account remains the parent’s.

Changes

If this policy changes materially, the date at the top changes and the change is described here. We will not quietly broaden what we collect.

Contact

For anything in this policy, write to hello@taaretaraney.com or use the contact form.