What this house keeps

What a letter is made from

A letter begins with one saved chart, two saved charts together, or one saved chart meeting the broad weather of the year ahead; first names and one short context line travel with that geometry. Birth details — date, time, place — make a single trip to compute the chart and are never stored, logged, or written anywhere: not in the letters, not in the code, not in any record. What the house keeps is the finished letter, the first names, the context line, and the geometry. A full chart is distinctive enough that a determined person with an ephemeris could work backward toward a birth moment, so it is private data even without the original date.

An account also keeps the verified email needed to sign in, credits and payment or referral records, letter status, and the language preference you explicitly save. That preference applies only when a new letter begins; it does not generate or alter old letters. An older English letter gets French only when you choose that individual letter.

Who sees what

The letters are drafted by an AI (Anthropic's Claude, over their API). The English writer receives first names, chart or forecast geometry, and the short context line or live question you ask the letter to hold. The reviewer receives those inputs and the finished draft. If you ask for French, its writer receives the finished English letter, the same geometry, and the same short line or question. None receives your email or original birth details. Place lookups use the Open-Meteo geocoder, which receives only the place name you type.

Doors and passwords

Every letter lives at an unlisted address. Its password is checked by the server before the private source is sent to the browser; the source and password are not kept in the site's Git repository or public bundle. A shared password can still be shared onward, so treat the address and word like the letter itself. The whole site also asks search engines not to index it.

Cookies and tracking

No third-party analytics, advertising, behavioral tracking, or session replay. The house counts a narrow set of content-free transitions—such as an account being verified, a chart being saved, or a letter being begun, released, and opened—so it can see whether the service works. Those counts never contain birth details, chart geometry, context, letter text, or email addresses. Necessary storage keeps your sign-in, a short-lived private-page session, your theme and chart-view preferences, referral attribution, and timeline decisions you choose to keep on this device.

Removal

You can remove saved charts and delete your account from the account page; the maker can remove a single letter. Removal deletes the active private record and closes its page at once. Infrastructure backups may retain encrypted copies for the provider's limited backup-retention period before expiry.