Last updated 27 August 2026
This is a notice about one website: astraastrology.com. It is short because the site does very little. There is no account, no sign-in, no form, and nothing you type. It shows a horoscope and counts how many people read one.
The Astra app for Android is a separate product with its own policy — codeensis.com/astra/privacy. Nothing you do in the app is visible here, and nothing you do here is visible in the app.
CodeEnsis Ltd, a company registered in Cyprus, runs this site and is the data controller for everything described below. Questions and requests: [email protected]. A human reads every message.
Two keys, both written by the site itself, and neither of them a cookie.
| Key | Where | What it is, and why | How long |
|---|---|---|---|
_ac | localStorage | A random number, generated in your browser the first time you open a page here. It is not derived from anything about you, your device or your network. It exists so that a reader who comes back tomorrow counts as the same reader rather than a new one. | Until you clear this site’s data, or use the switch below. |
_as | sessionStorage | A visit number and the time of the last page view, so that four pages read one after another count as one visit rather than four. | Until you close the tab, or thirty minutes without a page view — whichever comes first. |
Because they are not cookies, they are not attached to the requests your browser makes, and no other website can read them. Clearing this site’s data removes both.
When a page is shown, your browser posts a short message to this site. It contains:
/en/leo/;utm_source, utm_medium, utm_campaign if the link you followed carried them — that is how a reader who arrived from a video is told apart from one who typed the address.We pass that to Google Analytics 4, together with your browser’s user-agent string, which names the browser and the operating system but not the machine.
What we deliberately do not pass on is your IP address. Google Analytics would normally read your city from it; because we withhold it, our own reports show every reader’s country as unknown. That is a real cost, and we chose to pay it.
Every event is also marked non-personalised, which forbids Google from using it to build advertising profiles or audiences. Nothing here is sold, and there is no recipient other than Google Analytics.
Separately from the counting above, the site runs on Google Cloud, which keeps an ordinary web-server log of every request: IP address, time, path, response status and user-agent. Every web server on earth keeps that log; it is what shows an outage or an attack. Those entries are held for about thirty days and are never joined to the analytics data.
Because a site nobody reads should be either fixed or switched off, and there is no way to tell which without counting. Under the GDPR that is a legitimate interest (Article 6(1)(f)), and the balance is deliberately kept on your side: the identifier is random, your IP is withheld, the data cannot be used for advertising, it goes to nobody else, and the switch below stops all of it.
If your browser sends a Global Privacy Control signal, the site treats that as an objection and never starts counting in the first place. You do not have to do anything for that to work.
Counting is on in this browser.
Your identifier:
The switch writes one more key, _ao, and the counting script reads it before it does anything else. It applies to this browser only, and clearing this site’s data clears it too. Turning it off also deletes the identifier from your device.
Analytics events are kept for up to fourteen months and then deleted automatically. What is kept is a random number, a page path and a timestamp — there is nothing in it that names a person.
The GDPR gives you the right to see the data held about you, to have it corrected or erased, to restrict or object to how it is used, and to complain to a supervisory authority — for us that is the Office of the Commissioner for Personal Data Protection of Cyprus.
One honest caveat about exercising those rights here. We hold a random number and no means of connecting it to you. If you send us the identifier shown in the box above, we can find those events and delete them. Without it we cannot, and we would rather say so than invite a request we could not answer. The fastest erasure is the switch above, which removes the identifier from your device.
The site is not aimed at children and asks for nothing that could identify one.
If any of this changes, the date at the top of the page changes with it. Nothing here works backwards: a change describes what the site does from that date onward.
← All twelve signs