Privacy Policy


✦ Last updated: September 2026

Person Responsible for Personal Information

The person responsible for the protection of personal information at Astrean can be contacted at:

Email: support@astrean.art

Questions or requests concerning your personal information may be sent to this address.

What We Collect

When you use Astrean, we may collect:

  • Email address, used to sign you in and communicate with you when necessary.
  • Location information you provide, such as latitude and longitude, to generate your requested sky maps and related media.
  • Photos and other content you upload to create Astrean content.
  • Purchase and token usage information, including information necessary to maintain your account and transaction records.
  • Basic technical information needed to operate and secure the website, such as IP address, browser type, operating system, and timestamps.

We collect and use this information only for purposes reasonably related to providing, maintaining, securing, and improving the Service, processing transactions, communicating with users, and meeting legal obligations.

Photos & Generated Creations

Your uploaded photos are used to create the content you request.

We do not intentionally extract or store EXIF metadata from your photos.

Uploaded photos and generated creations are automatically removed from our active systems after 48 hours. Download anything you would like to keep.

Cookies

Astrean uses an essential session cookie to keep you signed in and maintain your session.

The session may also temporarily store information needed for certain features, such as the location you enter when generating a sky map. This cookie is used for authentication, security, and basic website functionality.

The session cookie is not used for advertising or to track you across other websites.

Your session normally remains active for up to 30 days after signing in.

We do not currently use third-party tracking or advertising cookies. If we introduce optional analytics cookies in the future, we will update this policy and provide any applicable consent or opt-out mechanism.

Usage Analytics

We may retain basic information associated with generated content, such as the city and country associated with a generation, to understand how Astrean is being used and improve the Service. This information is used for internal analytics and is not intended to track you across other websites.

We may also collect basic website access logs, such as pages visited, timestamps, referrer information, IP address, and technical information, for security, troubleshooting, and understanding overall traffic patterns.

Where practical, information used for analytics is aggregated or otherwise handled so that it is not used to identify individual users.

Data Storage and International Transfers

Astrean's servers and primary data storage are located in the United States, including data centers in New York.

Some third-party service providers we use, such as Stripe and email providers, may process information in the United States or other countries.

Astrean takes reasonable steps to assess the privacy protections applicable to information transferred outside Québec and to implement appropriate safeguards where required by applicable law.

By using Astrean, you acknowledge that your information may be processed outside Québec where necessary to provide the Service, subject to applicable privacy laws and safeguards.

Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this policy or as required by law.

  • Uploaded photos and generated media: automatically removed from our active systems after 48 hours.
  • Website access logs: generally retained for 30 days for security and debugging purposes, then deleted.
  • Account information: retained while your account remains active. After cancellation, account information is generally deleted within 30 days, subject to information that must be retained by law.
  • Purchase and token usage history: retained for up to 7 years, or longer where required by applicable tax, accounting, or legal obligations.

After the applicable retention period, information is deleted or, where appropriate, converted into information that no longer identifies an individual.

Third-Party Service Providers

We use third-party service providers to operate Astrean. These providers may process information on our behalf and have their own privacy policies.

These providers receive only the information reasonably necessary for their respective functions, subject to their services and applicable legal requirements.

We do not sell or rent your personal information to third parties.

Security

Astrean takes reasonable measures to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure.

However, no internet-based service or method of electronic storage can be guaranteed to be completely secure.

If a privacy incident occurs that requires notification under applicable law, Astrean will take the steps required by law, including notifying affected individuals or authorities where required.

Age of Consent

Astrean does not knowingly collect personal information from children under 14 years of age.

If you are under 14, do not provide personal information to Astrean unless permitted by applicable law and with the consent of a parent or legal guardian where required.

If we learn that we have collected personal information from a child under 14 in circumstances where collection was not permitted, we will take reasonable steps to delete it.

Your Rights

Subject to applicable law, you may have the following rights concerning your personal information:

  • Right to access: You may request access to personal information we hold about you.
  • Right to rectify: You may request correction of inaccurate or incomplete information.
  • Right to delete: You may request deletion of your account and associated personal information, subject to information that must be retained by law.
  • Right to withdraw consent: Where processing is based on consent, you may withdraw your consent, subject to legal or contractual restrictions.
  • Right to data portability: Where applicable, you may request a structured, commonly used, machine-readable copy of your personal information.

You may exercise these rights by emailing support@astrean.art from your registered email address where reasonably possible. We will respond within the time required by applicable law.

Marketing Communications

Astrean may occasionally send optional marketing or informational emails where permitted by law.

You may unsubscribe from optional marketing communications at any time using the unsubscribe mechanism provided in the message.

You may still receive necessary transactional, security, account, or service-related communications.

Changes to This Privacy Policy

Astrean may update this Privacy Policy from time to time to reflect changes to the Service, our practices, or applicable legal requirements.

The latest version will always be posted on this page.

If you have questions about this Privacy Policy or how your personal information is handled, contact us at support@astrean.art.

← Back to home