What we collect
Free reading: the date of birth and, optionally, time of birth you enter. This is processed to compute a zodiac sign and is not linked to your identity or stored against your IP beyond what's needed for basic rate limiting (a hashed IP address, kept briefly to prevent abuse).
Paid year report: the date/time of birth above, plus your email address (to deliver the report and invoice) and payment confirmation data from PayPal (we never see or store your card/PayPal credentials - PayPal processes payment on their own systems).
Why we process it
To generate your requested horoscope text (via the OpenAI API), to process your payment (via PayPal), to email you your paid report, and to issue the legally required invoice. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR, in particular for retaining invoice data) for the paid product, and legitimate interest / consent for the free reading.
Third parties
OpenAI, L.L.C. receives only your zodiac sign and, if provided, your time of birth (hour:minute only, no date) to generate the text. OpenAI never receives your name, email address, full date of birth, or payment data - that information never leaves our systems in that direction. PayPal processes your payment on its own systems and receives whatever you enter directly in PayPal's checkout (e.g. email address, name, payment method) - we never see or store your payment details ourselves.
Retention
Free-tier cached horoscope text is generic (per zodiac sign, week, and language) and contains no personal data. All data tied to an order (email address, birth data, report content, invoice data) is retained for 10 years. This period isn't a discretionary choice - it follows from statutory German retention obligations for business records and invoices (§ 147 AO, § 257 HGB).
Your rights
Under GDPR you may request access to, correction of, or deletion of your data - deletion only once the statutory retention period above has elapsed. Contact aioracle+privacy@fabian-blechschmidt.de to exercise these rights.