Cosmic Player
App Store

Privacy

Privacy Policy

Last updated 13 August 2026 · Effective 13 August 2026

This says what the app does with data. It is written to match the build, not to sound reassuring: the app needs your birth details, it has an account, and — only if you allow it — it uses advertising identifiers.

1. Who is responsible

The data controller for the Cosmic Player app is:

In this policy “we” means Marcus Laitinen and “the App” means Cosmic Player for iPhone. This policy covers the App and this website.

2. Short version

The App builds an astrological chart from birth details you enter and animates planetary motion against it. To do that it needs those details. It also has an account, a subscription, and advertising identifiers that are used only with your permission. What follows says which is which.

3. What you give us

  • Birth details — date, time and place of birth. These are the input the chart is calculated from. Without them the App has nothing to compute.
  • Charts of other people. The App lets you add people close to you and see the same transits in their charts, which means you are entering another person's birth details. Only add them if that person knows and agrees; you are responsible for having their permission. We treat those details the same way we treat yours and use them for nothing else.
  • Account. Signing in without a password requires an email address or an Apple-provided identifier. We use it to keep your charts and your subscription attached to you across sessions and devices.
  • Messages you send us, including anything you attach.

4. What is collected automatically

  • Subscription and purchase data — the product bought, its period, the price, renewal and cancellation status, and the receipt Apple issues for validation. Payment itself is handled by Apple; we never see your card details.
  • Technical data — device model, iOS version, app version, language and region, IP address, and an installation identifier.
  • Crash and diagnostic reports, so a failure can be found and fixed.
  • Advertising identifiers — the Identifier for Advertisers (IDFA) and a device identifier, used for our own advertising and marketing measurement. This is the tracking declared on the App Store product page, and it happens only with your permission.

5. Tracking and App Tracking Transparency

On iOS, tracking requires your permission. The App asks through Apple's App Tracking Transparency prompt, and if you decline, no IDFA is read and no tracking takes place — the rest of the App works exactly the same. You can change the answer at any time in Settings → Privacy & Security → Tracking. Where consent is required by law, our advertising partners process data only after it has been given.

6. Why we process it, and on what basis

  • Performance of a contract — building your chart, running the animation, keeping your account, delivering and validating the subscription.
  • Your consent — tracking and advertising identifiers, and any marketing email you opt into. You may withdraw it at any time.
  • Our legitimate interests — keeping the App stable and secure, diagnosing crashes, preventing abuse of subscriptions.
  • Legal obligation — keeping transaction records where accounting and tax law requires it.

7. Who data is shared with

We do not sell your data. We share only what each recipient needs to do its job:

  • Apple — distribution through the App Store, payment processing and subscription management.
  • A subscription management provider — validating receipts and keeping subscription state, acting as our processor.
  • An analytics and crash reporting provider — diagnosing failures and stability, acting as our processor.
  • Advertising and attribution partners — marketing measurement, and only where you have consented to tracking.
  • Hosting and email providers, for this website and for correspondence.

The current list of these providers by name, and the data processing agreement in force with each, is available on request at privacy@cosmic-player.com. We may also disclose data where the law requires it, or to establish or defend legal claims.

8. International transfers

Some providers process data outside the European Economic Area, including in the United States. Such transfers rely on the safeguards permitted by Chapter V of the GDPR — in practice the European Commission's Standard Contractual Clauses or, where the recipient is certified, the EU–US Data Privacy Framework. You can ask which mechanism applies to a specific provider.

9. How long data is kept

  • Birth details and charts — while your account exists. Deleting the account deletes them.
  • Account data — until you delete the account, then removed from live systems within 30 days, except where law requires retention.
  • Subscription and transaction records — while the subscription is active and afterwards for as long as accounting and tax law requires, generally six years under Finnish accounting rules.
  • Crash reports — until the fault is diagnosed and the fix confirmed.
  • Advertising identifiers — for the period agreed with each partner, and stopped immediately if you withdraw tracking consent.

10. Deleting your account and your data

You can delete your account, and everything attached to it, from inside the App — Settings → Account → Delete Account. You can also write to privacy@cosmic-player.com and we will do it. Deleting the account does not cancel a subscription: subscriptions live in your Apple Account and must be cancelled there.

11. Your rights

If the GDPR applies to you, you may request access to the personal data we hold about you, ask for it to be corrected or erased, restrict or object to processing, receive it in a portable form, and withdraw consent where processing is based on consent. Write to privacy@cosmic-player.com; we answer within one month and will tell you if we need longer, as the law allows.

If you believe we have handled your data improperly you can complain to the Finnish supervisory authority, the Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi), or to the authority in your own country of residence. We would rather you told us first, at the address above.

12. Children

The App is rated 9+ and is not directed to young children. We do not knowingly collect personal data from children under 13, or under the higher age set by the law of your country. If you believe a child has provided us with personal data, write to privacy@cosmic-player.com and we will delete it.

13. Security

Data sent between the App and the services above travels over encrypted HTTPS connections. Access to provider dashboards is limited to the people who need it and protected by two-factor authentication. No method of transmission or storage is completely secure, and we do not claim otherwise.

14. Changes to this policy

When the App changes — a new feature, a different provider — this policy is updated at or before the release, and the date at the top changes with it. Material changes are also noted in the App Store release notes. The current version always lives at cosmic-player.com/privacy.

15. Contact