Who is responsible for your data

Izan de Geer, the owner of Astrah. For anything to do with your data, write to @AstrahApp on X.

What is collected

Only what an account needs: your email address and a password, which is not stored in the clear but hashed. If you sign in with Google, your email and name from that account are received. Nothing else: no age, no phone number, no address.

Browsing the site and using the editors requires no account and collects no personal data. There is no third-party analytics, no social media pixels and no advertising. Fonts are served from this same domain rather than from a third party, precisely so that nobody else gets your IP address when the page loads.

What for

To give you access to your account and to the templates you are entitled to, and to be able to tell you if something about the service changes. The legal basis is performance of the service contract you accept when you sign up.

What stays in your browser

The graphic you are building is kept in your browser's session storage, so that reloading the page does not lose your work. It never reaches a server and is cleared when you close the tab. If you have an account, a session token is also stored, which is what saves you from signing in on every visit. There are no tracking or advertising cookies.

Who it is shared with

• Supabase — the database and the account system. The project is hosted in a European Union region.
• Cloudflare — the hosting for the site and the network that serves it.
• Google — only if you choose to sign in with Google, in which case Google processes your data as its own controller, under its own policy.

Data is not sold or handed to anybody else.

How long

For as long as your account is open. If you delete it, its data is deleted, except for anything a legal obligation requires keeping.

Your rights

You may ask to access your data, correct it, delete it, restrict its processing, object to it or take it elsewhere. Use the contact above. If you think it has not been handled properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Minors

Accounts are not created for anyone under 14.