Privacy Policy

01Who Is Responsible

The controller of your personal information is SOFTCID LLC, trading as sips after midnight, 30 North Gould Street, Sheridan, WY 82801, United States. Contact: privacy@sipsaftermidnight.com.

02Information We Collect About You, the Client

Identity and contact: your first name or nickname and your email address, provided at checkout. If you leave your email address on a free calculator and tick the box there, that address also goes on our mailing list, and every letter from the list carries a link that takes you off it with one press.

Birth details: your date of birth, time of birth if known, and city of birth.

Your questions and context: the questions and any notes you submit with your order.

Your reading brief: the summary you confirm immediately before paying, which holds the names, the birth details, the reading mode and your questions. We keep it so the reading is prepared from what you actually agreed to. Your order confirmation email repeats that brief back to you without the birth details: it carries the service, the reading mode, the names, your questions and the total, so you have your own record of the order, and the dates, times and places stay out of your inbox. The full brief is stored with the providers listed in section 05 and deleted on the schedule in section 06.

Order and payment: order number, product, price, date, and the record of the terms you accepted (timestamp, version, and which boxes you ticked). Card details are collected and processed only by our payment provider, Stripe. We never see or store your card number.

How you found us: stored with your order, we keep which website or campaign brought you here the first time and the last time, and which page of ours you arrived on. This is the same information already described under "Website and free tools" below; storing it with the order lets us tell which of our own posts and pages lead to work, without identifying you to anyone. We keep the name of the referring website or campaign only, never the full address you came from, and never anything you typed into the site you came from.

Delivery of your reading: whether the email carrying your reading was accepted by your mail server, as our email provider (Resend, section 05) reports it for that message: a delivery status, which says nothing about whether or when you opened it. Our letters contain no tracking image and no tracked links; nothing inside a letter reports back to us when you read it. Letters sent before 23 October 2026 carried a single-pixel image on our own domain; that image is no longer counted, and the address it points to now returns a blank picture and records nothing.

Website and free tools: standard technical data such as IP address, browser and device type, pages visited and referring page, collected through our hosting provider and, with your consent, analytics tools. If you ask us to email you the link back to your chart, we also keep the birth details you typed into that calculator, and your first name if you gave one. Nothing from the free tools is kept if you do not ask for that link.

03Information About Other People

If you order a synastry or trio reading, a one-question answer about the two of you, or the instant computed synastry on the calculator, you provide the first name or nickname, date, time and city of birth of one or two other people ("Other People"). We ask you to provide nothing else about them.

Why we process it. We process the birth details of Other People because our client has a legitimate interest in understanding their own relationships through astrological interpretation, and because the reading cannot be prepared without those details. We balance that interest against the rights of the Other People by collecting the minimum, using it only for the reading, never contacting them, never sharing it, describing chart symbolism rather than facts about them, and deleting their details quickly. In legal terms, our basis is legitimate interests (GDPR Article 6(1)(f)) and the equivalent basis under other laws.

What we do with it. We use the details only to calculate a chart and prepare the client's reading. We do not contact Other People. We do not add them to any list. We do not share their details with anyone except the service providers in section 05, which process them on our behalf.

How long we keep it. We delete the birth details of Other People, and the chart files calculated from them, 60 days after the reading is delivered. The delivered reading remains with the client who ordered it; we keep our own copy of the reading for the period in section 06, with the Other People identified only by the first name or nickname the client used.

If you are one of the Other People. You can email us at privacy@sipsaftermidnight.com to ask whether we hold birth details that may relate to you, to ask us to delete them, or to object to our processing them. We will need enough information to find the record, for example the first name and birth date that may have been used, and we may ask you to confirm your identity. We will respond within one month. We will not tell you who ordered the reading unless the law requires us to. Where we cannot inform you directly at the time a reading is ordered, we make this policy publicly available as the way of informing you, as the law allows.

04Why We Process Your Information and On What Basis

To prepare and deliver your reading: performance of our contract with you.

To take payment and keep accounting records: performance of the contract, and our legal obligations.

To send order confirmations, delivery emails and follow-ups about your order: performance of the contract.

To keep a record of the terms you accepted: our legitimate interest in proving what was agreed, and defending claims.

To operate, secure and improve the website: our legitimate interests.

Analytics cookies and any marketing emails: your consent, which you can withdraw at any time.

Keeping the birth details you typed into a free tool, so we can email you the link back to your chart: your consent, given when you ask for that link, and withdrawable at any time.

Birth details of Other People: legitimate interests, as explained in section 03.

05Who We Share Information With

We do not sell, rent or trade personal information, and we do not share it for marketing. We share it only with service providers that process it on our behalf and under contract:

Stripe (payments). Subject to Stripe's Privacy Policy.

Resend (transactional email and the mailing list. Every letter we send passes through it, including the order notification we send ourselves, which carries the full brief of your order, and your own confirmation, which carries the same brief without the birth details). Subject to Resend's Privacy Policy.

Upstash (the store that holds the brief of a paid order, holds your birth details for 30 days when you ask for the link back to your chart, and keeps abuse-prevention counters). Subject to Upstash's Privacy Policy.

OpenStreetMap's Nominatim (a place lookup, asked only for a birth place our own city list does not hold; it receives the place name you typed and nothing else). Subject to the OSM Foundation's Privacy Policy.

Vercel (website hosting and server logs). Subject to Vercel's Privacy Policy.

Google Analytics (website analytics, loaded only after you accept analytics cookies in the banner, wherever you are).

We may also disclose information where required by law, court order or a public authority, or to protect our rights or someone's safety.

06How Long We Keep Information

Your order record and acceptance record: 7 years, for accounting, tax and legal-defence purposes.

Your birth details, questions, reading brief and our copy of your reading: 12 months after delivery, then deleted. The brief of an order that includes Other People is deleted on the shorter period in the next line. The deletion time is written into the brief itself when it is created, so that copy expires whether or not anybody runs anything; the copy held with the payment record is deleted by a scheduled daily run.

Birth details of Other People and their chart files: 60 days after delivery, then deleted. Your own confirmation email does not repeat their birth details, so nothing about them sits in your inbox beyond the first name or nickname you gave. The order notification we send ourselves does carry them, and that one is an email, so it is kept for the period in the line below rather than for 60 days. We would rather write that down than let you find it.

Free-tool inputs: not stored, with two exceptions you choose. Birth details entered into the birth chart calculator and the synastry and rival checker are used to compute your result and are not saved by us. If you give us your email address so we can send you the link back to your chart, we keep the birth details you entered for 30 days, so that link can open the same chart again, and they are then deleted automatically. If you buy the instant result offered on a calculator, the birth details it was computed from become part of that order and are kept for as long as order records are, as described below. You can ignore that block and nothing is kept. That record holds the date, time and place you typed, and your first name if you gave one. For the synastry and rival checker we keep only your own details this way, never the other person's. To have it deleted before the 30 days are up, email us from the address you signed up with and we will remove it.

Emails with you: 24 months, then deleted.

07International Transfers

We operate from the United States and our service providers are located there. If you are in the European Economic Area, the United Kingdom or Switzerland, your information is transferred to the United States. For providers certified under the EU-US Data Privacy Framework (and its UK and Swiss extensions), we rely on that certification. Otherwise we rely on standard contractual clauses approved by the European Commission or the UK authorities. You can ask us for details.

08Security

Your information is stored in access-controlled accounts available only to the owner of sips after midnight and the providers listed above. The website uses HTTPS. Payment data is handled entirely by Stripe, which is PCI DSS Level 1 certified. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

09Your Rights

Depending on where you live, you may have the right to access the personal information we hold about you, to correct it, to have it deleted, to restrict or object to our processing, to receive a copy in a portable format, and to withdraw consent where processing is based on consent. Withdrawing consent does not affect processing already carried out. To exercise any right, email privacy@sipsaftermidnight.com. We will respond within one month, and we may ask you to confirm your identity.

If you are in the EEA or the UK, you also have the right to lodge a complaint with your local data-protection authority. We would appreciate the chance to resolve your concern first.

United States. If you live in a state with a consumer privacy law, such as California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Hampshire, New Jersey, Iowa, Nebraska, Kentucky, Maryland, Minnesota, Tennessee, Indiana or Rhode Island, you may have the right to know what personal information we hold about you, to correct it, to delete it, to receive a copy of it, and to opt out of its sale, of its sharing or use for targeted advertising, and of profiling that produces legal or similarly significant effects. We do not sell personal information, we do not share or use it for targeted advertising, and we do not profile anyone, so there is nothing to opt out of; we have not done any of these things in the twelve months before the date at the top of this page, and we do not knowingly hold any sensitive personal information other than what you type into a form yourself. The other rights are exercised by email as above. We will answer within the month promised above, we will not treat you differently for using a right, and if we refuse a request you may appeal by replying to our answer, after which we will explain our decision in writing. An authorised agent may act for you if they can show your signed permission.

Global Privacy Control. We treat a browser that sends the Global Privacy Control signal as having declined analytics cookies, without asking, unless you have chosen "that's fine" on this site yourself, which you can undo from the footer at any time. Because we do not sell or share personal information, the signal has nothing else to switch off.

California, Civil Code section 1798.83. We do not disclose personal information to third parties for their own direct marketing, so there is nothing to report under that section. Nevada. We do not sell covered information as that law defines it.

To stop receiving our emails, use the unsubscribe link in any email or the unsubscribe page.

10Cookies and Analytics

The website sets two cookies of its own, only after a payment and whatever you chose in the banner. One lasts 15 minutes and opens a paid instant result in the browser that bought it. The other lasts 5 minutes and carries the product and price of a payment that has just gone through, so the sale can be counted; it holds nothing that identifies you, and it reaches Google Analytics only if you have chosen "that's fine". Neither is used for advertising.

Your browser also keeps a few things in its own storage rather than in a cookie: a note of which website or campaign first and last brought you here, described in section 02, which leaves your browser only when you start a checkout; the name and birth details you last typed into a calculator, for 30 days, so the next form can fill them in; and your answer to the cookie question. None of it is sent anywhere unless you send it in a form, and clearing this site's data removes all of it.

Analytics cookies come from Google Analytics and help us understand, in aggregate, which pages people reach. They are set only after you choose "that's fine" in the cookie banner, wherever in the world you are. Before that choice nothing from Google is loaded: no script, no connection, no cookie. If you decline, or make no choice, nothing is set. A browser that sends the Global Privacy Control signal is treated as a decline without being asked, unless you chose "that's fine" on this site yourself. Analytics never receives your name, your email address, your birth details or anything about a chart.

You can change your answer at any time from the "cookie choices" link in the footer of every page. Choosing "no thanks" after an earlier "that's fine" stops the analytics tool and removes its cookies immediately.

We use no advertising pixels, no social-network trackers, no session-replay or heat-map tools, and no fingerprinting.

11Children

The Services are for adults. We do not knowingly collect information from anyone under 18, and every person whose details are used in a synastry or trio reading must be 18 or older. If we learn that we hold information about a child, other than a natal reading requested by the child's own parent or guardian, we will delete it.

12Changes to This Policy

We may update this policy from time to time. Updates will be posted on this page with a new "Last updated" date and version number. Where a change materially affects how we use your information, we will tell you by email if we have your address.

13Contact

sips after midnight
30 North Gould Street, Sheridan, WY 82801, United States
Email: privacy@sipsaftermidnight.com