Zodiac Compass Privacy Policy

Last updated: February 26, 2026

1. Scope

This Privacy Policy explains how Zodiac Compass collects, uses, stores, and discloses data when you use the website.

2. Data We Collect

• Technical data: IP-derived server logs, browser/device metadata, and request diagnostics.
• Local browser data: local identifiers and cached app state in localStorage.
• Rating data: placement coordinates, score, and timestamp for celebrity and friend ratings.
• Friend challenge content: uploaded image, friend name, selected zodiac, optional description, and optional anonymous comment.
• Shared challenge payloads: payload blobs referenced by share IDs/keys (encrypted in secure browser contexts, with encoded fallback where WebCrypto is unavailable).

3. How We Use Data

• Operate ranking, heatmap, score, and sharing features.
• Prevent abuse and detect service errors.
• Improve load speed and reliability.
• Serve ads (if enabled) through AdSense.

4. Sharing and Visibility

Friend challenge links are intended to be shareable. People who open a valid friend link can view challenge data in that encrypted share payload, including anonymous placement comments.

5. Cookies and Ads

If AdSense is enabled, Google may use cookies or similar technologies to serve and measure ads. See Google’s disclosure: How Google uses information from sites or apps that use its services.

6. Retention

• Celebrity rating data is retained to maintain cumulative rankings and heatmaps.
• Friend challenge share payloads are retained on the backend for up to 3 days from creation, then automatically deleted during normal share activity.
• Locally stored app data remains in your browser until you clear site data.

7. Security

We use reasonable administrative and technical safeguards. In production, HTTPS should be enabled for transport security. No system can be guaranteed 100% secure.

8. Children

Zodiac Compass is not directed to children under 13. Do not use the service if you are under 13.

9. Pennsylvania and U.S. Compliance Notes

We align operations with applicable U.S. law and Pennsylvania requirements, including incident-response obligations under Pennsylvania’s Breach of Personal Information Notification Act (73 P.S. § 2301 et seq.) where applicable.

Pennsylvania does not currently have a broad omnibus consumer privacy statute equivalent to California’s CCPA/CPRA, but we still provide clear notice and user-facing controls through this policy.

10. Your Choices

• Do not submit optional comments if you do not want them shared via challenge links.
• Clear browser storage to remove local app state.
• Use browser/ad settings to manage ad personalization and cookies.

11. Contact

For privacy requests or concerns, contact: neronetmachines@gmail.com.

12. Legal Note

This policy is an operational disclosure, not legal advice. For formal legal review, consult counsel licensed in Pennsylvania.