Privacy Policy

How we handle your data

Last updated 7 September 2026

The Human Design is a small, independent site. We collect the minimum needed to do a few things well: calculate your chart, email it to you if you ask, and, if you order a book, make it and send it. Nothing is sold, rented, or shared for marketing. Not to anyone, ever.

What we store, and when

• Calculating a chart on the site sends the birth moment you entered (date, time, place coordinates, timezone) to our own server, which works out the planets and sends the chart straight back. That request is not kept: no chart, and no birth moment, is written to any database by a calculation. Your birth details are kept in your own browser (localStorage) so the forms remember you and so the Your Sky page can redraw your chart when you return; clearing your browser data removes them. The same is true of "Save to my people" on the chart page and "remember these people" on the connection and group pages: that list of names and birth details lives in your browser only, never on our server. The chart page shows it under "Your People", where forgetting any one person takes a single click; clearing your browser data removes the whole list too. The same again for anything you underline or note in the margins of your reading: your marginalia are kept in your browser, per chart, printable from the reading page, and are never sent to us. If you want a safety copy of all of it, the Your Sky page has a "Keep a copy" control that downloads everything this browser holds as a single file, and a matching "Bring a copy back" that restores it; the file is made in your browser and never touches our server.
• Chart links contain the birth details they display; that's what makes them work on any device. Share them as thoughtfully as you'd share the birth data itself.
• Asking for your chart by email stores your email address and the birth details for that chart (date, time, place coordinates, timezone) in our database. They are written when you ask, so the confirmation link knows which chart to send; if you never confirm, nothing is sent and the whole record is deleted after thirty days. If you tick the daily Energy Weather digest or join The Walk (the four-week series of daily letters), we record those preferences too; for The Walk we also record which day of its twenty-eight letters you have been sent, so the series can continue in order. Nothing records whether you open or read anything.
• Changing what we send you always goes through your inbox. Once an address is confirmed, a request to switch it to a different chart, to start or stop the digest, or to begin a Walk is held aside and emailed to you as a single-use "confirm this change" link; until you click it, nothing about your subscription changes, and the request expires on its own after seven days. Knowing your email address is not enough to change what you receive.
• The collector waitlist on the shop page stores only the email address you enter and which edition it was for. It is removed along with everything else by the delete link below, or on request.
• Ordinary server logs (IP address, requested page, time) exist briefly for security and troubleshooting, as on virtually every website. The chart calculators also keep a short-lived tally of requests per network address, so automated abuse cannot crowd out real visitors: the address is stored only in scrambled form, no birth details ride with it, and it expires within the hour.

What we send

Only what you asked for: a confirmation email, your chart email, (if you opted in) the daily Energy Weather digest, and (if you joined it) The Walk, a series of twenty-eight daily letters that ends on its own. Every email footer has an unsubscribe link, and Walk letters also carry a link that stops just the letters. Email delivery runs through SMTP2GO, which processes the message and address on our behalf to deliver it.

When you order a book

The books are the one thing here that costs money, and an order is the one time we hold more than a chart email needs. Here is exactly what happens:

• Payment happens on Stripe's own checkout page. Your card number goes to Stripe and never touches our server; what comes back to us is your email address, the shipping address you gave for a printed book, and word that the payment went through.
• The order record is the names, birth details and cover choice you entered, together with that shipping address. It is kept in a private folder outside the public web root, because your book is composed from exactly those details. Ordering never adds you to any mailing list.
• Printing and shipping are done by Lulu, the printer: they receive the finished book files and the shipping address, print the single copy, and send it to you. Once delivery is confirmed and a short window for damage claims has passed, we remove the book from the printer's systems; your pages do not sit in a print catalog.
• Our own archive keeps one private copy of the exact edition you bought, so a copy damaged in the mail can be replaced as the same book rather than rebuilt as a different one. If you would rather we not keep it once your book has safely arrived, write to us and it is gone.
• The e-book (included with every printed book, or on its own) is sent to the email address from the checkout.
• Receipts: like any business we keep the bare record that a sale happened (what was bought, when, for how much) for as long as the tax rules require. On request we remove the birth details from an order once it is fulfilled; the receipt itself has to stay.

Visit counting

We use Google Analytics to count visits and see which pages are actually useful, so we know what to improve. It collects the kind of technical data analytics tools usually do (page, browser, rough location). On the chart pages we pin the address it reports to the bare page, with no query details, so birth data from chart links never reaches Google. If you buy a book, the purchase itself joins the counts: the title and the price, tied to the order number, never your name and never the birth details in the book. No advertising features, no audience building; just counts.

Your controls

• Unsubscribe: one click in any email stops all sending. Your address and birth details stay on file after that only so the chart links in the emails you already have keep working; the delete link removes them.
• Delete everything: the unsubscribe page offers "delete my data completely", which removes your email address, birth details, preferences and any waitlist entry from our records immediately.
• Questions or manual requests: write to [email protected] and a human will sort it out.

Where it lives

Our database sits on the same server that runs this site, outside the public web root. We keep your details while you're subscribed and, after an unsubscribe, only for the chart links you already hold; an unconfirmed request is deleted after thirty days, and the full-deletion link removes everything at once. Routine server backups can hold a copy for a limited time after a deletion; they are never used to bring a deleted subscriber back.

Our social media app

We maintain a small internal application that can publish our own library images to our own Pinterest boards, so the library reaches people who are looking for it. When it runs, it signs in only to our own Pinterest account, and only ever does two things: read the names of our boards, and create pins on them.

It reads no data about you, about visitors to this site, or about any other Pinterest user, and it stores nothing except the access token that lets it sign in, which is kept on our own server outside the public web root. No information from this site's subscribers or chart visitors is sent to Pinterest at any point.