Year Map

This page is a translation for your convenience. If there is any difference, the Portuguese version prevails.

Privacy

Privacy

This page explains, in plain language, what Year Map does with your data. The party responsible for the site is Luisa Abech Crippa, CNPJ 41.448.731/0001-81.

Trade name: Uluf Produtos Digitais. Brand: Astrologia da Nova Era — Mapa do Ano.

Business address: Rua Araguaia, 378 · Jardim Maua · Novo Hamburgo/RS · CEP 93548-350.

What we collect

  • In the form: your name, the form of address used in the text (feminine, masculine, or neutral), your date, time, and city of birth, the city where you will spend your birthday, and the year you want to read.
  • For the account: email, WhatsApp, and password. The password stays with the authentication service, stored in encrypted form; no one on the team can read it.
  • At payment: the order, the amount, the payment method, and the status. For cards through Mercado Pago, we ask for CPF/CNPJ to identify who is paying. The document and a temporary token pass through our server to carry out the charge, without being stored on the site in this flow. The card number, expiration date, and security code are typed into the provider's secure fields and do not pass through our server.
  • When you finish signing up and when you buy: the IP address and the browser (user-agent) at that moment, and Meta's _fbp and _fbc cookies, for the ad measurement described below.
  • For the invoice: the full name, CPF, and address of the person who paid, used only to issue the invoice. These tax data are stored separately from the transient data of the card charge.
  • In the story invitation: your Instagram @ and the screenshot of the story, kept for 30 days only for verification and then deleted.
  • From the visit: the campaign tags of the link you arrived through (utm and fbclid) and, on the trackable links that New Era Astrology shares, the link code; the page of origin, the type of device and browser; and your actions on the site (pages viewed, clicks, steps of the form and of the purchase). These records do not carry your name, email, WhatsApp, date of birth, or password.
  • An anonymous session identifier (ano_session_id), stored in your browser for 365 days, which links those actions together before you create the account.

The first step of the form (name and birth) is already saved when you click Continue, before an account exists, so your map is not lost if you stop halfway.

What we use it for

  • Calculating your natal chart and the solar return of the year.
  • Saving the map in your account and delivering the reading, the PDF, and the audio that you buy.
  • Notifying you by email and WhatsApp about the delivery of your map.
  • Sending, by email and WhatsApp, reminders and offers from Year Map: when a purchase is left halfway (a Pix that expired, a declined card, a payment that did not finish), on your birthday (with a discount coupon and the invitation for the following year), in campaigns, and in limited-time offers. Every email has the link “I don't want to receive these anymore”.
  • Identifying who pays and carrying out the charge, using CPF/CNPJ when requested for card payment.
  • Issuing the invoice for the person who paid.
  • Calculating the commission of an ALMA Partners partner when you arrive at the site through her link.
  • Answering questions and support requests.
  • Measuring where visits come from and how the site is used, to improve it and to measure our advertising.

We do not sell your data. We use Meta (Facebook and Instagram) to measure and optimize our ads and Microsoft Clarity to understand how the map page is used, as explained below.

Where the data is kept

  • Supabase: database, accounts, and the PDF and audio files, in the São Paulo region.
  • Cloudflare: hosts the site, performs the map calculation, and generates the PDF. Requests to the site pass through its network.
  • Mercado Pago and Stripe: receive the data needed to charge, such as your email and the order amount. For the card filled in on the site, we also forward to Mercado Pago the CPF/CNPJ of the payer, the temporary token, and the payment options chosen.
  • Resend and Evolution: send the emails and the WhatsApp messages about your map.
  • ElevenLabs and, when it does not respond, OpenAI: receive the text of the reading to narrate the audio, with no personal data other than your first name.
  • ViaCEP: receives the postal code (CEP) you type in the invoice form, to fill in the address.
  • The accountant: receives by email, every week, the sales spreadsheets to issue the invoices, with the name, CPF, address, email, and phone number of the person who paid.
  • ALMA Partners (the partnership program): when you arrive through a partner's link, it receives the code of that click linked to your account, and the purchases made after it are recorded for the commission.
  • Google (Gemini) or OpenAI: the internal dashboard may send aggregated numbers from the site (visits, maps, sales), with no personal data, to generate reports for the team.
  • Meta (Facebook and Instagram): the Meta Pixel runs in your browser and writes the _fbp and _fbc cookies. It receives browsing events (page view, signup, map generated, offer viewed, start of purchase). We also send the completed signup and the purchase from our server (Meta Conversions API), with the email, phone number, first name, your account code, and country converted into a hash (a code that cannot be reversed) and, without a hash, the IP address and the browser at that moment and the _fbp and _fbc cookies, which Meta uses to match the ad to the signup and the purchase.
  • Microsoft Clarity: records, anonymously, how your map page is used (clicks, scrolling, and mouse movements). Typed fields are masked, and the recording does not run on the dashboard or on link-access pages.
  • City search: the name of the city you type is looked up in map services (Open-Meteo, Photon, and Nominatim) to find the coordinates and the time zone.

For how long

The account, the maps, and what was filled in on the form are kept until you ask for deletion: this is what lets you return to your year whenever you want. Payment records are kept to prove the purchase. The technical records of payment notices are deleted after 90 days, and the records of actions in the administrative dashboard, after 180 days. The site's browsing events are kept for 180 days, and the visits and campaign tags, for 365 days. The text of each email we send is kept for 1 hour at most, only to resend it if sending fails; after that only the record of the sending remains. The access code that goes by email is stored only as a hash (a code that cannot be reversed).

Your rights

You can ask for access to your data, for the correction of what is wrong, and for the deletion of the account and the maps, as well as withdraw consent for contact. To clear the Meta and Clarity cookies, just clear them in your browser. Make your request by WhatsApp.

Browser storage

We use Meta's measurement and advertising cookies (_fbp and _fbc), and Clarity may store its own identifiers. The browser also stores what the site needs to work: your account session, the light or dark theme you chose, the start of the payment deadline, the Pix generated and not yet paid (so you can return to it), the campaign tags of the visit, the session identifier ano_session_id (365 days), the code of a partner's click (alma_partner_click_v1, 30 days), the link of the gift you opened (ano_presente_token, until the gift is accepted) and, for up to one hour, what you filled in when you ask for a new password.

Legal basis

We use the data for the performance of the contract (calculating, storing, and delivering the map you asked for, and charging for it) and, for contact by email and WhatsApp, including reminders and offers, with your consent, given when you fill in those fields, which you can withdraw whenever you want. The invoice follows the tax obligation of the seller.