Privacy Policy
Last updated October 31, 2026.
Crystal Moonlight (crystalmoonlight.com) is run by Daleo Company, which is responsible for your personal data on this site. Contact: contact@crystalmoonlight.com.
What we keep and why
| Data | Why | How long |
|---|---|---|
| Your email address | To sign you in, send your reports and receipts, and answer you | While your account exists |
| Your crystals and their history | To run your balance, plans and refunds | While your account exists |
| Your readings: spread, cards, I Ching lines or numerology numbers, question, the reading and follow-up questions | Your reading journal | While your account exists, or until you delete them with the account |
| Free readings without an account: spread, cards, question and reading, with a one-way code of your browser cookie and of your IP address | To limit free readings to one a day and to reveal the full reading when you sign in | 24 hours, or moved into your journal when you sign in |
| Report orders: names, dates, times and cities of birth (for a compatibility report, also the other person's), and the PDF | To make and deliver your report | 14 days, then deleted |
| Reports you get with crystals in your account: the PDF, with the names and birth details in it | So you can read it on the site and download it again | While your account exists, or until you delete the report |
| Payment records from Stripe: customer number, plan, amounts, country | Billing, refunds, tax records | As long as tax law requires |
| IP address | Limits on sign-in links, protection against abuse, and the country that sets your currency | Sign-in records up to 30 days; access logs 30 days |
| Invites: your invite code, and which account invited yours | To give the invite crystals; the inviter sees only how many friends joined, never who | While your account exists |
| Affiliate partners: website, how they promote us, PayPal email, clicks, accounts and commissions | To run the program and pay partners | While the partner account exists, and payment records as long as tax law requires |
| Accounts that came through an affiliate's link: which affiliate | To pay that affiliate's commission; the affiliate sees only totals, never who | While your account exists |
| Birth details you save for your weekly guides: date, time and city of birth, never your name | To write your weekly guides | Until you remove them on the weekly guide page or delete your account |
| The Monday email: your choice, the day it was last sent and a random code for the unsubscribe link | To email you when a new week starts, only if you ask for it | Until you stop it (link in every email or on the weekly guide page) or delete your account |
| News emails: your choice, and for each news email whether it was delivered, opened (a 1-pixel image) and clicked | To send news and offers only if you ask for them in your account, and to see which ones are useful | Until you stop them (link in every news email or on your account page) or delete your account |
| Emails we send you: type, address, subject and whether it was delivered | To check that sign-in links, reports and replies arrive | 90 days |
| Messages you send to our support address, and our replies | To answer you | Up to 2 years after the conversation ends |
| Visit statistics: the pages you view, how long each stays on screen, the site or campaign link you came from, your country and the kind of device, under a code that changes every day and cannot be traced back to you | To see which pages help visitors and where they come from; for a new account, the source of its first visit | 13 months; the daily code cannot be linked to you once the day is over, and we keep no IP address for statistics |
| A one-way code (hash) of your email address | So the welcome crystals are given once per address | Kept after the account is deleted |
We use three cookies, all needed for the site to work: the session cookie that keeps you signed in, a random code that limits free readings without an account to one a day and lets you reveal your free reading when you sign in, and, when you open a friend's invite link, that friend's invite code for 30 days. Outside the UK, the EU and Switzerland, opening an affiliate partner's link also stores the partner's code for 60 days, so the partner can be paid if you create an account; we do not set it in those countries. We use no advertising cookies. Our visit statistics, ours and Cloudflare Web Analytics, use no cookies and store nothing on your device.
AI
To write a personal reading, we send your cards, their positions and your question to Anthropic's Claude API; follow-up questions also send the reading. For an I Ching reading we send the lines you cast and your question; for numerology, only your numbers, never your name or date of birth, which the calculator keeps on your device. For reports and weekly guides we send only the calculated positions of the charts and the dates of the transits, never names, dates, times or cities of birth. Your email address is never sent to the AI. Anthropic processes this data for us and does not use it to train its models.
Who processes data for us
- Stripe: payments. Your card details go straight to Stripe; we never see them.
- Anthropic: the AI that writes readings and report chapters.
- Amazon Web Services: our servers and the emails we send.
- Cloudflare: our domain, security and visit statistics.
Our servers are in the United States. Our providers may process data in other countries, with the safeguards the law requires for international transfers.
Your rights
You can see, correct, download and delete your data, and object to how we use it. To delete your account with your crystals and readings, use "Delete your account" on your account page. For anything else, write to us. In the UK you can also complain to the Information Commissioner's Office (ico.org.uk), or in the EU to your local data protection authority.
Legal bases (UK and EU)
We use your data to provide the service you ask for (contract), to keep the site safe, stop abuse and measure visits without cookies (legitimate interest), to send news emails (your consent, which you can withdraw at any time) and to keep tax and payment records (legal obligation).
The site is not meant for anyone under 18. We may update this policy; the date of the last change is at the top of this page.