Privacy

Your private details should remain private.

Familiar Within is operated by STREX LLC. This policy explains how the current reading and purchase experience handles personal information.

Policy version 1.5. Effective and last updated 7 September 2026.

Audience and age eligibility

Familiar Within is intended for adults aged 18 and over. People under 18 are not eligible to use the reading experience or purchase its products. The initial date-of-birth check runs in the browser to decide eligibility. For an eligible visitor, that date remains only in memory for the open reading experience and is reused as the required astrology birth date, so it does not need to be entered twice. It is not placed in persistent browser storage, sent to analytics or used for marketing. It is cleared when the experience closes or the page refreshes.

Familiar Within does not knowingly collect personal information directly from children under 13. If we learn that a child under 13 has provided personal information without appropriate authorisation, we will stop using and delete it as required. A parent or guardian who believes a child has submitted information may contact contact@familiarwithin.com.

Information used for a free reading

After an adult eligibility result, the reading reuses the same birth date for its astrology calculation and may also use an optional birth time and place, companion details, household and lifestyle answers, disability-related access needs, and privacy choices. The server validates the birth date again for adult eligibility before calculating chart placements. Quiz answers remain in the browser during the free experience. Supported birth details are sent to a Familiar Within server function hosted by Netlify to calculate chart placements. That function returns the calculation and does not intentionally create a user account, public profile or stored free-reading record.

Email and your choices

No email address is required to receive your free result. An email is requested when you choose to purchase or sign in to an optional account. Your checkout address is used for order receipts, download access and order support. These actions do not subscribe you to marketing. Any future marketing subscription will require separate optional consent.

For a personalised reading purchase, we separately request permission to retain the details needed to prepare and support your order. Earlier versions of the free experience collected encrypted email-continuity records. Any remaining records expire under their original retention period, normally 30 days.

Printable collection purchases

The printable journals, cards and planner do not require a reading, birth details or quiz answers. Lemon Squeezy collects the email and billing information needed for payment, tax, receipts and delivery of the purchased PDFs. Familiar Within receives the product selection and the order information needed for customer support. Printable files do not appear in the private reading portal.

Optional Your Familiar Space accounts

Your Familiar Space is optional. You do not need an account to complete the quiz, receive the free result, purchase, recover a receipt or open a valid paid reading. A free reading is saved only when you explicitly choose Save to Your Familiar Space.

Supabase Auth verifies identity through Google or a passwordless email link. Supabase receives the email address, provider identity data and authentication request metadata needed to complete sign in. Familiar Within validates the short-lived Supabase identity response, creates a separate encrypted account record and does not retain Google or Supabase access tokens or refresh tokens. Account sign in is not marketing consent.

The encrypted account record may contain the verified email address, opaque identity indexes, saved reading details and the identifiers needed to find paid purchases associated with the same independently verified email. A customer index can only find possible purchases. Every paid reading is rechecked against the current signed payment and refund entitlement before it opens.

Paid reading details and retention

With your checkout permission, the birth, quiz, chart, result and checkout details needed to prepare and support a paid digital product are encrypted under an opaque reading reference in Netlify Blobs. The raw encrypted draft follows a separate retention period, currently 30 days and always limited to 7 through 90 days. Before checkout opens, Familiar Within also creates an encrypted stripped package that excludes the raw birth date, birth time, birth place, UTC offset and email. An unpaid prepared package is removed after a short 24 through 48 hour window.

A correctly signed Lemon Squeezy payment notification unlocks the stripped reading package. Private portal access normally remains available for 365 days. A correctly signed refund notification revokes portal and file access. Minimal order, payment-state, refund, accounting and support records may be kept longer where reasonably needed for legal obligations, fraud prevention, dispute handling and business records.

Processors and information they receive

Netlify hosts the website and server functions and provides encrypted reading storage through Netlify Blobs. Netlify may process request and security metadata such as IP address, user agent and timestamps as part of operating the service. Familiar Within does not intentionally place full birth dates, birthplaces, email addresses or lifestyle answers in routine application logs.

Supabase provides optional account authentication. It receives the verified email, provider subject and authentication metadata needed for Google or email-link sign in. Quiz answers, saved-reading bodies, payment contents and Lemon Squeezy entitlement records are not sent to Supabase for this account feature.

Lemon Squeezy is the merchant of record and processes checkout, payment, tax, refund and order information. It receives the checkout email, selected product, price, an opaque reading reference and limited fulfilment metadata. Its receipt button links back to the private Familiar Within portal using an opaque high-entropy bearer claim carried in a URL fragment, which browsers do not send in HTTP requests. The raw claim is not stored by Familiar Within and does not authorise access unless the current signed payment entitlement is paid and unrevoked. Familiar Within does not put full birth details, birthplace, disability-related answers or the quiz payload in Lemon Squeezy custom data, and does not receive or store full card details.

STREX LLC accesses the minimum encrypted order and reading information needed for secure preparation, incident recovery, customer support, refunds and legal obligations. Operator access is a recovery path for packages placed in a review-required state, not the normal delivery path.

Analytics, cookies and sharing

The current site does not install a product analytics service, advertising pixel or marketing cookie. When the private receipt claim establishes a portal session, the portal sets a signed, time-limited session cookie with HttpOnly, Secure and SameSite=Lax protections. It contains an opaque reading reference and expiry, not the claim token, birth details, email or reading content. The receipt claim may be reused during the stated access period to establish a session on another device, while every request still checks the current paid entitlement. The blocked underage flow does not send its date value to analytics. The current share action contains only a short result message and does not include birth details, chart placements, quiz answers or email.

International processing

STREX LLC and its service providers may process information in the United States and other countries where they operate. Those countries may have privacy protections that differ from those in your location. We use provider contracts and access controls appropriate to the service and information involved, while recognising that no international transfer or online service is risk free.

Security

We use measures intended to limit access and exposure, including server-side validation, opaque references, authenticated order notifications and encryption of paid reading records. No method of transmission, processing or storage can be guaranteed completely secure. Please do not submit another person's private information unless you have lawful authority to do so.

Your choices and requests

You may ask to access, correct or delete personal information held by Familiar Within, or object to or restrict certain processing where applicable. Send the request from the email connected to the order, describe what you need, and include the order identifier if available. We may need to verify the request and may retain information where law, accounting, fraud prevention or a dispute requires it.

A signed-in person can export the data held in Your Familiar Space and can delete that space by entering the exact confirmation phrase shown there. Deletion removes saved readings and account identity indexes and revokes Familiar Within account sessions. It does not silently destroy legally separate payment, refund, fraud, accounting or support records that must or reasonably need to be retained.

Contact

Privacy questions, parental or guardian concerns, and access, correction or deletion requests can be sent to contact@familiarwithin.com. You can also find Familiar Within on Instagram and TikTok at @familiarwithin.