Privacy Policy

1. Who we are

Astrolab ("Astrolab," "we," "us," or "our") is an online service operated by an individual based in Italy. This Privacy Policy explains how we collect, use, store, and protect your personal data when you use our website at radixdixit.com (the "Service").

For the purposes of the EU General Data Protection Regulation (GDPR), the data controller is the individual operating Astrolab. You can contact us regarding any privacy matter at:

Email: [email protected]

Full legal identification details of the controller are available upon request to competent data protection authorities or to users exercising their rights under Section 8 below.

2. Age requirement

The Service is intended for users 18 years of age or older. By creating an account, you confirm that you are at least 18 years old. We do not knowingly collect personal data from anyone under 18. If we become aware that a user under 18 has registered, we will delete the associated account and data without delay.

3. What data we collect

We collect the minimum data necessary to operate the Service:

Account data (via Google Sign-In)
- Your name, as provided by your Google account
- Your email address
- Your Google account identifier
- Your profile picture (if made available by Google)

Usage data
- Credits balance and credit transaction history (grants, usage, redemptions)
- Products/reports generated through the Service and related timestamps
- Basic technical logs necessary for security and abuse prevention (e.g., IP address, timestamps, error logs)

Language preference
- Your selected display language, stored via a strictly necessary cookie (see Section 6).

We do not use Google Analytics, advertising trackers, or any third-party analytics or marketing tools.

4. How we use your data

We use your personal data only for the following purposes:

• To create and manage your account (via Google Sign-In)
• To operate the credits system, including granting free monthly credits and tracking their use
• To generate and deliver the products/reports you request
• To maintain the security, integrity, and proper functioning of the Service
• To communicate with you about your account or the Service, where necessary
• To comply with legal obligations, if and when applicable

5. Legal basis for processing

We process your personal data on the following legal bases under the GDPR:

• Performance of a contract (Art. 6(1)(b)): to provide you with the account, credits, and products you request.
• Consent (Art. 6(1)(a)): where you actively choose to sign in with Google and create an account.
• Legitimate interest (Art. 6(1)(f)): to secure the Service and prevent fraud or abuse, in a way that does not override your rights and freedoms.

6. Cookies

We use only one strictly necessary cookie, used to remember your selected display language. This cookie does not track you, does not collect personal data beyond your language preference, and does not require consent under applicable ePrivacy rules, as it is strictly necessary for the Service to function as you expect.

We do not use analytics cookies, advertising cookies, or any third-party tracking cookies.

7. Sharing your data with third parties

We do not sell your personal data. We share limited data only with the following service providers, strictly as necessary to operate the Service:

Provider	Purpose	Data shared
Google (Google Sign-In)	Authentication	Name, email, Google account ID, profile picture
Infomaniak	Hosting of the Service and its database	All account and usage data described in Section 3

These providers act as data processors and are contractually bound to process data only on our instructions and in compliance with applicable data protection law.

We may also disclose data where required by law, regulation, or a valid legal request from a competent authority.

8. Where your data is stored

Your data is stored on servers located in Switzerland (CH). [If outside the EU/EEA: This location benefits from an EU adequacy decision, meaning it is recognized as providing a level of data protection equivalent to that of the EU, so no additional transfer safeguards are required.]

9. Data retention

• Account and credits data: retained for as long as your account remains active.
• Generated products/reports: retained for as long as your account remains active, so you can access your history.
• Technical/security logs: retained for a limited period necessary for security purposes, then deleted or anonymized.

If you delete your account, we will delete or anonymize your personal data within a reasonable time, except where retention is required by law.

10. Your rights

Under the GDPR, you have the right to:

• Access the personal data we hold about you
• Rectify inaccurate or incomplete data
• Erase your data ("right to be forgotten"), subject to legal exceptions
• Restrict processing in certain circumstances
• Object to processing based on legitimate interest
• Data portability, i.e., receive your data in a structured, machine-readable format
• Withdraw consent at any time, where processing is based on consent
• Lodge a complaint with your national data protection authority. In Italy, this is the Garante per la protezione dei dati personali (www.garanteprivacy.it)

To exercise any of these rights, contact us at [email protected]. We will respond within the timeframes required by applicable law.

11. Security

We apply reasonable technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the Service or by other appropriate means before the changes take effect. The "Last updated" date at the top of this page reflects the most recent revision.

13. Contact

For any question about this Privacy Policy or how we handle your data, contact us at:

[email protected]