Privacy Policy

1. Zero Birth Data Retention & 100% Client-Side Architecture

OmniZodiac.com, operated by Smatire LLC, enforces a strict privacy-by-design policy. All content pages are pre-rendered as static HTML and all astronomical calculations (planetary positions, houses, Maya day signs, Egyptian decans, Chinese Ganzhi, and numerology) execute 100% locally inside your client browser. Zero birth data (dates, times, locations, coordinates, or display names) is ever transmitted to or processed on any server, serverless function, or remote API endpoint.

2. Local Storage Usage & Data Sovereignty

OmniZodiac respects complete user data sovereignty. Any data saved to your device remains strictly within your browser's private local storage (localStorage) and is never synchronized to the cloud:

• Session & Display Preferences: Selected Zodiac sign (omnizodiac_selected_sign), locale preference, and storage consent state.
• Optional Local Profiles: If and only if you explicitly choose to save your natal or fusion profile (via "Save profile locally in this browser"), your profile is stored under omnizodiac_natal_profile or omnizodiac_fusion_profile to power personalized daily transits in My Sky.
• Private Personal Notes & History: Optional personal reflection entries (omnizodiac_reflection_journal) and saved bookmarks reside exclusively on your local device.

User Control: You maintain absolute ownership of your data. You can clear your profile at any time using the built-in "Clear My Data" / "Clear Profile" button on any calculator or your browser's "Clear Site Data" settings.

3. Offline Gazetteer (Zero Network Geocoding)

When searching for your birth city, our autocomplete gazetteer runs entirely offline within your browser using lightweight static data shards derived from GeoNames. Your keystrokes and birth locations are never queried against external geocoding servers or remote network endpoints.

4. Privacy-Preserving Analytics

We collect high-level, anonymous aggregate usage metrics to maintain site reliability. Our analytics payload scrubber rigorously filters out all birth dates, times, geographic coordinates, location names, journal entries, and personal identifiers prior to signal dispatch.

5. Third-Party Advertising & Consent Management

Site hosting and editorial maintenance are supported via display advertising. We comply with GDPR, CCPA, and IAB Europe TCF v2.2 frameworks using Google Consent Mode v2 and an accredited Consent Management Platform (CMP). Advertising partners never receive your birth data, charts, or personal profiles.

6. Section 6: Zero-PII Payment Processing & Local Dossier Compilation

Optional purchases of Premium Archival Dossiers operate on a strict Split-Plane Zero-PII Commerce Architecture:

• Zero Birth Data in Checkout: When you purchase a dossier, our stateless checkout endpoint (/api/checkout/*) receives only the catalog SKU identifier, your active display locale, and statutory age/withdrawal acknowledgments. A fail-closed server firewall automatically rejects any request containing birth dates, birth times, coordinates, city names, or partner profiles with HTTP 422.
• PCI-DSS Level 1 Payment Processing: Billing details, payment credentials, and digital-goods tax calculation are processed directly by Stripe on hosted Stripe Checkout pages. Smatire LLC never receives or stores your credit card number, and Stripe never receives your astrological birth data.
• Stateless Entitlement Tokens & Local Compilation: Upon payment verification, the server mints a stateless Ed25519-signed entitlement token (oz_ent_v1) stored locally in localStorage['oz_a33_entitlements'] (and exportable as an offline .ozlicense.json backup). Your 26–42 page dossier and vector PDF are compiled 100% locally inside your browser.

7. Contact Us

For privacy questions, audits, or data rights inquiries, contact Smatire LLC at privacy@omnizodiac.com.