Privacy Policy
Last updated 2 September 2026
This explains what we do with your personal data. It is written to be read, not to be impressive. If anything here is unclear, email us and we will explain it properly.
1. Who is responsible
Cosmic Navigation is the controller of your personal data.
KvK 88571769 - VAT NL004626597B84
Email: info@yourworldmap.com
2. What we collect
Your account: the email address you register with, your password (stored only as a cryptographic hash - we cannot read it), and a display name if you give one.
Your birth data: the date, time and place of birth you enter. This is what the whole service is built on - without it there is no map.
Your billing details: name, address and, if you buy as a business, company name and VAT number. Only collected when you buy something.
Your purchases: what you bought, when, how much, the VAT, and the invoice number.
What you do in the app: the charts you save, the courses you open, the cards you draw, and any reflections you write.
Sign-in security: when you sign in we record the IP address, the browser and operating system, and the country that IP resolves to. This is what lets us notice a sign-in from a device or a country you have not used before, and ask for a code from your email before letting it through.
Who is on the site right now: while a page is open we keep, for a couple of minutes, the page you are on and the city and country your connection resolves to, so we can see whether anyone is using the site at a given moment. Your IP address is used to work out the city and is then discarded - it is never stored, never logged, and never shown. The whole record is deleted minutes after you close the tab, and nothing is kept.
We do NOT collect: payment card details - those go straight to our payment provider and never reach us.
3. Why we use it, and on what basis
To give you what you asked for: generating your maps and readings, giving you access to what you bought, and keeping your saved charts. Basis: performance of our contract with you.
To take payment and issue invoices. Basis: performance of the contract, and our legal obligation to keep proper records.
To send transactional email - purchase confirmations, cancellations, and anything else you need to know about your account. Basis: performance of the contract. You cannot opt out of these while you have an account, because they are how we tell you what has happened to your money.
To send the newsletter, if you asked for it. Basis: your consent, which you can withdraw at any time.
To understand how the site is used and to measure our advertising. Basis: your consent - see section 7.
To keep the service secure and working. Basis: our legitimate interest in running a service that is not broken or abused.
To keep your account yours: checking whether a sign-in comes from a device and country you have used before, and emailing you a code when it does not. The basis is our legitimate interest in preventing unauthorised access to your account - and yours in the same thing. If it was not you signing in, that email is how you find out.
4. Your birth data
Your date, time and place of birth are personal data, and we treat them as such. They are stored in our database in the European Union and used to calculate your maps.
We do not sell this data, share it for advertising, or use it to build a profile of you for anyone else's purposes. It exists so the app can do the one thing it is for.
You can delete any saved chart yourself at any time, from your profile.
5. Other people's birth data
The Compatibility feature works by comparing your chart with someone else's, which means entering their birth details. If you do that, please have their agreement first - it is their personal data, not yours.
You can delete any chart you have entered, including someone else's, at any time. If someone contacts us because their data is in our system without their knowledge, we will remove it.
6. Who else sees your data
We use a small number of providers to run the service. Each sees only what it needs, and none of them may use your data for their own purposes.
Mollie (Netherlands) - takes payment. They handle your card details; we never see them.
Supabase (European Union) - our database and file storage.
Reflex Cloud (Amsterdam) - hosting.
Postmark (United States) - sends our email. Transfers outside the EU are covered by the European Commission's standard contractual clauses.
ipwho.is and ipapi.co - turn an IP address into a city and country, and nothing else. Used when you sign in, so we can spot a sign-in from somewhere unusual, and once when you open the site, so we can see where the people using it right now are. We send the IP address; we do not send your name, your email or anything else about you, and we do not keep the address afterwards.
Google and Meta - analytics and advertising measurement, only if you consent. See section 7.
We do not sell your personal data. Not to anyone, ever.
7. Cookies, analytics and advertising
We use a small number of cookies that are strictly necessary for the site to work - keeping you signed in, and remembering your theme. These need no consent, because without them the service cannot function.
We also use Google Analytics to understand how the site is used, and the Meta pixel to measure whether our advertising reaches people who find it useful. Both set cookies and both send data to companies outside the European Union.
Neither of them runs until you say yes. When you first visit you are asked, and nothing is loaded until you choose - refusing is exactly as easy as accepting, and refusing costs you nothing in how the site works.
You can change your mind at any time. Withdrawing consent stops any further collection; it cannot undo what was already gathered while consent was in place.
Google Analytics tells us things like which pages are visited and roughly where visitors are. The Meta pixel tells Meta that someone who saw an advert later visited or bought. Neither receives your birth data. Ever.
8. How long we keep things
Your account and everything in it: for as long as you have an account.
If you delete your account: we remove your data within 30 days. Backups take a little longer to age out, and are not used for anything except restoring the service.
Invoices and the records behind them: seven years. Dutch tax law requires this, and it overrides a deletion request for those specific records - though nothing else is kept with them.
Newsletter: until you unsubscribe. We keep a record that you unsubscribed, so we do not accidentally add you again.
Sign-in security records: a trusted device is remembered for 30 days from its last use, and you can remove one at any time from your profile. Sign-in codes expire in ten minutes and are deleted with the account.
9. Your rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to restrict what we do with it, or object to us using it. You can also ask for it in a portable form.
Where we rely on your consent - the newsletter, analytics, advertising - you can withdraw it at any time, and it is no harder than giving it.
Email info@yourworldmap.com and we will answer within a month. We do not charge for this.
If you think we have handled your data badly, please tell us first - we would rather fix it. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl), or to the authority where you live.
10. Keeping it safe
Data is encrypted in transit. Passwords are stored only as hashes, so nobody here can read yours - if you forget it, we can reset it, not tell you what it was.
Access to the database is limited to the people who need it to run the service. Payment details never touch our systems at all.
No system is perfectly secure. If something happens that puts your data at real risk, we will tell you and the Autoriteit Persoonsgegevens, as the law requires.
11. Children
This service is not for children. You must be at least 18 to have an account. If you believe a child has given us their data, email us and we will remove it.
12. Changes
We will update this policy when what we do changes. The date at the top always shows the current version, and if a change materially affects you we will tell you by email rather than quietly editing the page.
13. Getting in touch
For anything at all about your data, email info@yourworldmap.com.
Cosmic Navigation - Nieuwe Looiersstraat 25A, 1017 VA Amsterdam, The Netherlands