Privacy Policy

Last updated:

1. Who we are

Birthday Compass (birthdaycompass.com) is operated by Nastvix Inc., a Delaware corporation, 8 The Green, STE A, Dover, DE 19901, USA (“we”, “us”). This policy explains what personal data we collect when you use the site, why, who else handles it, and the choices you have. It applies to visitors in the United States.

2. What we collect and why

Birth date

You enter your date of birth to take a quiz or use a calculator. We use it to calculate your numbers (Life Path, Birthday number, Personal Year, Sun sign, Chinese zodiac) and to check that you are 18 or older. Free calculators and the free quiz result work in your browser; we don’t receive your birth date for them.

When you start a checkout for a paid report, your browser sends your birth date, your quiz choices and your optional first name to our server. We save them with your order (“report details”), so your report shows your own numbers on any device you open it on (for example from the link in your purchase email), its text is written for what you paid for, and your PDF can be made. If the checkout is never paid, we delete them after 7 days; otherwise 12 months after your latest related purchase. Related purchases are the report and any add-on you buy for it: an add-on you buy later uses the details saved with its report and restarts the 12 months. We show them only to a browser that holds the proof of that paid order (see Cookies), and we never log them or put them in emails or page addresses (URLs). If you open your report after they were deleted, the report asks for your birth date again (or uses the one your browser kept), and we save it with the order again for another 12 months.

Quiz answers and first name

The options you pick (for example your goal or preferred way of working) personalize your result and report. Only preset options are used; nothing you type freely is sent to the AI. The optional first name is shown on your result, report and PDF. It is saved with a paid order as described above and is never sent to the AI.

Email address

If you enter your email in the quiz, it stays in your browser; we don’t receive it at that step and we don’t email you then. When you start a checkout, your browser sends it to our server, which passes it straight to Stripe to pre-fill the checkout page; we don’t store it at that point. Stripe collects the email you pay with. We use it to send your purchase confirmation (your receipt, with your access link and PDF links), to send a new access link when you ask for one on /restore/, and to answer support, refund and privacy requests. Our database doesn’t store your email address: it stores a keyed one-way code of it, so we can find your purchases when you ask for a new link, and we read the address from Stripe each time we send you an email. We don’t send newsletters or marketing emails. If we ever want to, we’ll ask for your separate consent first.

Payment and order records

Stripe collects your card or wallet details, billing information and email, and may collect device and network data to prevent fraud. We receive and keep order records: Stripe reference numbers, what you bought, the amount, the purchase date, and whether a payment was refunded (fully or in part) or disputed. The time you confirmed you are 18 or older and the version of the checkout wording you agreed to are saved with the payment at Stripe. When you view an add-on screen or receipt we may show the card brand and last four digits, read from Stripe. We never see or store your full card number.

Saved payment method

When you buy a main report, Stripe saves your payment method with a Stripe customer record, so you can buy an optional add-on without typing your card again (it is charged only after you confirm). We offer this one-tap charge only in the browser you paid in, while that browser remembers your purchase. In any other browser — for example after you open the link from your purchase email on another device — an add-on goes through a new Stripe checkout where you enter your payment details. The saved payment method stays stored at Stripe until you ask us to remove it — email support@birthdaycompass.com.

Technical data

Like any website, our servers receive your IP address, browser type and the pages you request. We use the IP address briefly to limit abuse (for example too many checkout, report or restore requests in a minute). Our hosting provider, Cloudflare, keeps short-lived request and error logs for security and troubleshooting (up to 7 days). These logs record details of each request, such as the time, the page address — which can contain a payment reference or the code from your personal access link — and may include your IP address, the approximate location derived from it and your browser type. Our own log lines add order reference numbers and may include a partly masked email address. The logs never contain your birth date, quiz answers or report text.

3. Who processes your data

We use a small number of service providers who process data on our behalf, under their own terms and privacy policies:

  • Stripe — payments, saved payment methods, receipts and refunds (Stripe Privacy Policy).
  • Cloudflare (Cloudflare Privacy Policy):
    • Workers — runs the site and keeps short-lived request logs;
    • D1 database — orders and their report details (birth date, first name, quiz choices), access and email-lookup records, webhook and email logs, report texts and AI logs;
    • Queues — writes your report text in the background after payment (a queue message holds only an order reference and the product name);
    • Browser Rendering — turns your report into a PDF: your report page, with your numbers and first name, is rendered in Cloudflare’s browser service;
    • R2 storage — keeps finished PDF files so a repeat download is fast, for up to 180 days;
    • Email Service — sends our emails;
    • Email Routing — forwards the messages you send to support@birthdaycompass.com to our support mailbox.
  • Google — our support mailbox runs on Gmail, so emails you send us (support, refund and privacy requests, and any details you include) are stored and processed by Google (Google Privacy Policy).
  • Anthropic — the Claude AI model that writes parts of paid reports (see the next section) (Anthropic Commercial Terms, Anthropic Privacy Policy).

Cloudflare stores our database and files; its global network may process requests in other countries on the way, including outside the United States.

4. AI-written report text

Report text is written with AI (Anthropic Claude) from your numbers and answers. The AI-written parts of paid reports come from Anthropic’s Claude model through its commercial API, usually within a few minutes after payment. We send it:

  • the numbers and signs we calculated from your birth date — Life Path, Birthday number, Personal Year and month numbers, Sun sign, Chinese zodiac element and animal — and the trait scores and standard texts we derive from them;
  • the preset quiz options you chose;
  • for the 12-month launch calendar only, your birthday month and day, so the calendar can mark your birthday month.

We do not send your name, email, IP address or payment details. These values together can reveal your birth date, so we treat the request, the generated text and any code derived from them as personal data. Anthropic’s commercial terms say it does not train its models on data sent through its API by business customers like us; Anthropic keeps that data only for a limited time under its own policies. We don’t use your data to train AI models either.

We keep a log of each AI request — a keyed code of the request (it can’t be turned back into your data without our secret key), not the request itself — and the text it produced, for support and payment-dispute review, with access limited to our team. These logs and the generated report texts are deleted after 180 days. If you open your report after that, its text is written again once and can read differently.

5. Cookies and browser storage

We set only cookies that are needed to deliver what you bought. We don’t use advertising or analytics cookies, so we don’t show a cookie banner.

  • bb_pay — set after you pay. It proves which purchases this browser has made, so your report opens without an account. It is signed so it can’t be altered, can’t be read by page scripts (HttpOnly), is sent only to our server, and holds only payment reference numbers — no name, email, birth date or card details. It lasts up to 90 days after you last paid or used your access link.
  • bb_pay_bind — a random code set when you start a checkout, so only the browser that started it can claim the payment. Lasts up to 24 hours.
  • Stripe cookies — our quiz, result and report pages don’t load any Stripe code. Stripe’s script runs on Stripe’s own checkout page and, on our site, only if your bank asks to verify an add-on payment (3-D Secure). There Stripe may set its own cookies (such as __stripe_mid and __stripe_sid) and collect device and browsing signals to prevent fraud, as described in the Stripe Cookie Policy.

Your browser’s local storage (on your device only) keeps your quiz progress — birth date, quiz answers, optional first name and email — a copy of report text already shown, and a short log of the steps you completed and the ad campaign tags (UTM tags) in the link that brought you. Nothing from this log is sent to us or to anyone else. We use it so the quiz and report pick up where you left off. It stays until you clear this site’s data in your browser settings. If you delete our cookies or storage, your report may stop opening on this device — use the link in your purchase email or restore access.

6. Analytics, advertising and Do Not Track

We don’t use analytics services, advertising pixels (such as Meta or TikTok pixels) or cross-site tracking, and we don’t share your data for targeted advertising. If we add any of these, we’ll update this policy first and explain how to opt out. We treat a Global Privacy Control (GPC) signal as a request to opt out of any such sharing.

Do Not Track. Browsers’ “Do Not Track” signals have no common standard, so our site doesn’t change its behavior when it receives one. Because we don’t track you across sites, there is nothing for it to switch off.

Other companies. No third party collects personal information about your online activities over time and across different websites through our site, except Stripe when you pay, as described in Cookies: Stripe may use device and browsing signals from many websites that use Stripe to prevent fraud.

7. How long we keep data

  • Report details saved with an order (birth date, first name, quiz choices): 12 months after your latest related purchase (the report and any add-on you buy for it), then deleted; 7 days if the checkout was never paid. Saved again for another 12 months if you open your report later and enter your birth date.
  • AI-written report texts and AI request logs: 180 days after they were made, then deleted.
  • Saved PDF files: 180 days after they were made, then deleted (a new PDF is made when you download again).
  • Email sending records (item names and prices, no email address): 180 days, then deleted.
  • Payment webhook records (Stripe event numbers only): 180 days, then deleted.
  • Order records (Stripe references, items, amounts, dates, refund or dispute status) and the email lookup code: as long as we need them to meet accounting and tax laws, and to handle refunds and disputes.
  • Server request and error logs: up to 7 days.
  • Emails you send us: in our support mailbox for as long as we need them to answer you and to handle refunds, disputes and legal requests.
  • Saved payment method: at Stripe until you ask us to remove it.
  • Cookies: up to 90 days (bb_pay) and 24 hours (bb_pay_bind). Personal access link: valid 12 months.
  • Browser storage: on your device until you clear it.
  • Stripe keeps payment data under its own retention rules and legal duties.

8. We don’t sell your data

We don’t sell your personal data, and we don’t “share” it for cross-context behavioral advertising as those terms are used in US state privacy laws. We disclose personal data only to the service providers listed above to run the site; when the law requires it (for example a valid court order); to protect our rights or prevent fraud; or to a buyer of our business, who would have to honor this policy.

9. Your privacy rights

Depending on where you live (for example California, Colorado, Connecticut, Virginia and other states with privacy laws), you may have the right to:

  • know what personal data we hold about you and get a copy;
  • correct it;
  • have it deleted;
  • opt out of the sale or sharing of your data, or targeted advertising (we don’t do these);
  • appeal if we refuse your request;
  • not be treated differently for using these rights.

We offer these choices to all US visitors. To make a request, email support@birthdaycompass.com from the address you used at checkout (or tell us that address and the order reference from your purchase email) so we can find and verify your records. An authorized agent may ask on your behalf with your written permission. We confirm receipt within 10 business days and answer within 45 days. If we can’t do something — for example delete order records we must keep for tax — we’ll tell you why. To appeal a decision, reply to our answer with “Appeal” in the subject; if we deny your appeal, you can contact your state attorney general.

The copy of your quiz progress in browser storage stays on your device; you can delete it by clearing this site’s data in your browser. The report details saved with a paid order are covered by the requests above.

10. Security

We use HTTPS everywhere, signed cookies, keyed one-way codes instead of email addresses and request fingerprints in our database, limited staff access, and rate limits against abuse. Card data is handled only by Stripe. No system is perfectly secure; if a breach affects your personal data, we’ll tell you as the law requires.

11. Children and age

Birthday Compass is only for adults 18 and over. Our date-of-birth step stops anyone under 18, and we don’t knowingly collect personal data from children under 13 or from anyone under 18. If you believe a child has given us personal data, email support@birthdaycompass.com and we’ll delete it.

12. Changes to this policy

If we change this policy, we’ll update the date at the top. If a change materially affects how we use data we already hold, we’ll tell buyers by email before it takes effect.

13. Contact

Email support@birthdaycompass.com — we usually reply within 2 business days.

By mail: Nastvix Inc., 8 The Green, STE A, Dover, DE 19901, USA.