Privacy Policy
Effective July 30, 2026 · constellation.you
The short version: your map lives on your device, not on our servers.
There are no accounts. We can't read your map, because we never have it. Analytics are anonymous unless you opt in to more, payments are handled by Stripe, and nothing about you is ever sold. This page itself has no trackers on it.
1. Your map stays on your device
Everything you put into Constellation - stars, notes, dates, connections, photos, documents, imported family trees - is stored in your own browser and, if you choose, in files you save to your own computer. There is no account, no sign-up, and no copy of your map on our servers. We could not look at your map if we wanted to.
Family-tree (GEDCOM) files are parsed entirely on your device and are never uploaded.
2. Secret stars are encrypted
Stars you mark as Secret are encrypted on your device with AES‑256‑GCM, using a key derived from a passphrase only you know. The passphrase never leaves your device and we have no way to recover it - or the stars it protects - for you. In your saved files, secret stars exist only as ciphertext.
3. What we collect on the website
We count visits with our own first-party analytics, designed to be anonymous first:
| What | When | Why |
|---|---|---|
| Page views & basic events | Always | Counting visits and seeing which features get used (e.g. "a map was started"). Includes the page, a random per-session id, browser language, referring site, and which ad or link brought you here. No name, no email, no IP address stored. |
| Country & device type | Always | Aggregate only - "how many visitors from the US on desktop", never individuals. |
| IP address | Only if you click Accept on the consent bar | Stored once with your consent event, as the record that consent was given. |
| Meta Pixel | In the EU/EEA, the UK and Switzerland: only if you click Accept. Elsewhere: on by default, until you decline. |
Tells Meta (Facebook/Instagram) when an ad led to a visit or to someone starting a map, so ads can be measured. Governed by Meta's privacy policy. Wherever you are, clicking Decline switches it off immediately and it stays off on this device - only the anonymous counting above continues. It never sees your map: the events carry no star names, notes or content of any kind. |
We use no third-party analytics services and no advertising cookies of our own.
4. AI features send your map text to Anthropic - only when you use them
When you run an AI feature (detecting patterns, predicting futures, asking questions about your map, naming connections, splitting stars, reviewing your map, or building a map from a document), the text of your map - star titles, notes, dates, categories, and connection labels - is sent to our server, which passes it to Anthropic (the maker of Claude) to generate the result. Uploaded documents are sent the same way for the document feature. Photos and file attachments are not sent.
- We do not store your map content on our servers - it passes through only to fulfil the request.
- Anthropic does not use API data to train its models.
- Stars marked Secret are excluded while they are locked. If you run an AI feature while your secret stars are unlocked and visible on screen, their text is part of the map the AI reads - lock them first if you don't want that.
- AI features are optional. If you never use them, no map content ever leaves your device.
5. Payments are handled by Stripe
Pro subscriptions are processed by Stripe. Your card details go directly to Stripe and never touch our servers. From Stripe we receive your email address and subscription status, which we use to verify your licence and respond to support requests. We also keep a small usage counter (a number) on your Stripe customer record to apply fair-use limits on AI features. That is the entire extent of what we hold about paying customers.
6. What lives in your browser's storage
Constellation uses your browser's local storage for your map, your preferences (like label and colour settings), your consent choice, and - if you're a subscriber - your licence key. A random session id lives in session storage and disappears when the tab closes. None of this is readable by other websites. Clearing your browser data for constellation.you removes all of it, including your map, so export a file first if you want to keep it.
7. Who we share data with
Nobody, except the services that make the product work: Vercel (hosts the website), Anthropic (AI requests you initiate), Stripe (payments), and Meta (only the pixel, only after you accept). We do not sell, rent, or trade any data, and there is no advertising network on the site.
8. Your choices
- Decline the consent bar - the Meta Pixel is switched off and stays off on this device, and no IP is stored; anonymous counting still lets us see that a visit happened. In the EU/EEA, the UK and Switzerland the pixel does not load at all unless you accept first.
- Skip AI features - your map content never leaves your device.
- Export and delete - your map is yours: save it as a file anytime, and erase every trace by clearing site data in your browser.
- Ask us - email us to access or delete what little we hold (your Stripe customer record and support emails), and we'll do it within 30 days.
9. Children
Constellation is not directed at children under 13, and we do not knowingly collect personal information from them.
10. Changes
If this policy changes in a way that matters, we'll update the date at the top and note the change here. We won't quietly weaken it.
11. Contact
Questions about privacy: constellation.you.company@gmail.com. We read every message.