Privacy policy
Updated: 10 October 2026 · Version 8v129q761
Controller:
Antonios Petropoulosc/o POSTFLEX PFX-158-597Emsdettener Straße 1048268 GrevenGermany
info@astro2match.de
1. Controller
The controller responsible for data processing is:
Antonios Petropoulosc/o POSTFLEX PFX-158-597Emsdettener Straße 1048268 GrevenGermany
E-mail: info@astro2match.de.
2. Which data does Astro2Match process?
| Area | Types of data | Purpose |
|---|---|---|
| Website visit & server logs | IP address, date and time of access, page/URL requested, referrer, browser type, operating system, device type, status codes, amount of data transferred and technical error data | Providing the website, stability, IT security, abuse detection, error analysis and evidence of technical attacks |
| Registration | E-mail, username, password hash, age/date of birth, confirmation token, language, time of registration, consents to terms/privacy/18+, chosen type of use (dating, astrology or both) | Creating the account, age check, e-mail confirmation, security, proof of consent and operation of the platform |
| Profile & matching | Name/display name, gender, gender sought, place of residence, country, profile texts, interests, questionnaire answers, match preferences, search and filter settings, package/visibility settings | Profile display, matching, search, score calculation, showing suitable suggestions and protection against abuse |
| Astrology | Date, time and place of birth, coordinates, time zone, calculated planets/houses/aspects | Astrology readings and match score |
| Photos & gallery | Profile photo, gallery photos, file name, technical image data, thumbnails, approval status, moderation notes | Profile display, image optimisation, review, abuse protection and technical provision |
| Messages | Message content, sender, recipient, time stamp, read status, archive/deletion status per user, system messages, report/moderation reference | Internal communication, delivery, notifications, security, support and abuse checks |
| Customer account & payment | Name, billing address, country, e-mail, package, term, orders, invoices, payment status, transaction references and accounting export data | Checkout, invoice, package activation, contract handling, support, tax and statutory retention obligations |
| Withdrawal and consent history | Time, language, text version, package, order reference, confirmation of the immediate start of digital services | Proof of contract, withdrawal, support and legal documentation |
| E-mail queue | E-mail address, subject, mail content, status, delivery attempts, error log | Reliable sending of confirmation and system e-mails |
| Identity check (voluntary) | Photo of identity card or passport, document type, result of the check, time | Confirming identity, protection against fake profiles and age check |
| Notifications | E-mail address, notification settings, time of sending, partner suggestions notified | Notices about new matching members, new messages and reminders about an incomplete profile |
| Forum & diary | Forum posts with username and time; entries in the personal astro diary | Exchange in the forum; personal notes that only the user can see |
| Support & moderation | Requests, reports, internal notes, suspension/approval decisions, security and abuse notices | Support, checking violations, protecting other users and enforcing the platform rules |
| Backups & logs | Backup data needed for operation, technical logs, security logs, admin action logs and recovery data | Data backup, error analysis, recovery, security and traceability of critical changes |
2a. Data when visiting the website
When you simply visit Astro2Match, technically necessary access data is processed, in particular IP address, date and time, the page requested, referrer URL, browser and device information, operating system, status codes, amount of data transferred and technical error messages. This data is needed so that the website can be delivered and attacks, errors or abuse can be detected. It is not evaluated for advertising and not sold. The legal basis is our legitimate interest in a secure, stable and functioning website.
2b. Data for registration and use of the account
For registration and use of an account, Astro2Match processes the data needed for login, age check, e-mail confirmation, profile display, package assignment, security and support, in particular e-mail address, username, password hash, language, time of registration, consents, profile details, place of residence/country and profile texts entered voluntarily. Passwords are not stored in plain text but as a hash; the operator cannot read the original password.
2c. Profile, matching and astrological data
For the core function of Astro2Match, profile, questionnaire, search, preference and astrological data are processed. This may include date, time and place of birth, coordinates, time zone, calculated planetary positions, houses, aspects, elements, daily/annual readings and match scores. This data is used to display profile areas, calculate astrology readings, determine compatibility values and show suitable suggestions within the platform. The results serve orientation, entertainment and non-binding partner suggestions.
2d. Communication, photos, support and moderation
When users write messages, upload photos, report profiles or contact support, Astro2Match processes the content and metadata needed for this, including message content, sender, recipient, time stamp, read status, uploaded photos, thumbnails, approval status, reports and processing notes. This serves message delivery, profile display, photo review, abuse protection, support and enforcement of the platform rules.
2e. Payment, invoice and contract data
For paid packages the data required for order, package activation, invoice, payment status, support and accounting is processed: name, billing address, e-mail address, package, term, time of order, payment status, transaction references, invoice numbers and PDF invoices. Invoice and accounting data may be stored longer than profile data due to statutory retention obligations.
2f. Security, admin and system logs
To protect the platform, security-relevant events may be logged, such as logins, failed login attempts, admin actions, upload checks, payment status changes, error messages, system e-mails and security-relevant changes. These logs help to fix errors, detect abuse, restore data and make critical actions traceable.
3. Legal bases
- Art. 6(1)(b) GDPR: performance of the contract – registration, packages, messages, payment, invoice.
- Art. 6(1)(c) GDPR: legal obligations, in particular tax retention of invoices.
- Art. 6(1)(f) GDPR: legitimate interest in IT security, abuse protection, server logs, error analysis, support, moderation and protection of other users.
- Art. 6(1)(a) GDPR: consent, where voluntary additional information, the identity check or optional notifications are concerned.
- Art. 9(2)(a) GDPR: explicit consent, insofar as information such as partner preference and gender sought may touch on special categories of personal data (sexual orientation). This consent is only requested if you use dating or both. If you use astrology only, you do not state a partner preference and do not need it. You can withdraw the consent at any time in your customer account; afterwards you no longer take part in partner matching.
4. Packages, rights and visibility
Astro2Match uses package and feature rights to unlock or lock functions. Free users see their matches with match score and the approved main photos of other members, but cannot actively write messages or see the additional gallery. Dating, Astro and Both each unlock additional areas.
Who sees whom: Only members who use dating or both, have made their profile visible themselves, have consented to processing under Art. 9 and match each other according to both sides’ search criteria are shown as partner suggestions. If you decline someone with “Not my type”, you are no longer shown to that member either; the declined person is not told. Profile photos are only shown after review by the operator; without a photo the profile shows “Photo coming soon”.
4a. Birth data of other persons (partner comparisons)
The comparison features (relationship coach, sign comparison, composite and partner comparison) allow the entry of the birth data of another person. This information is processed in memory for the requested calculation only and discarded afterwards. It is not stored in the database, no file is written on the server and no message is sent to the person concerned. If the analysis is downloaded as a PDF, that file is generated for the download only and stays with the user. The user entering third-party data is responsible for the lawfulness of that entry.
5. Messages, archiving and deleting
Messages are stored internally so that conversations can be delivered and displayed. Users can archive, restore or remove conversations from their own view. This only affects their own view and does not automatically delete the other participant’s copy. Data protection deletion requests remain unaffected. System messages from Astro2Match may be sent for welcome, security, e-mail confirmation or information on functions; they cannot be replied to.
6. E-mails and mail queue
Astro2Match sends e-mails, e.g. e-mail confirmation, new message, invoice, warning or system notice. In addition, Astro2Match may inform you when a new member matches your search (match notification) and remind you of an incomplete profile. You can switch off the match notification at any time under “Notifications”. Match e-mails are only sent to confirmed e-mail addresses and only about members who are actually shown to you. E-mails may be stored in a queue and processed one after the other. Delivery status, errors, time stamps and recipient address may be logged so that sending remains traceable.
6a. Voluntary identity check
You can voluntarily have your identity confirmed by uploading a photo of your identity card or passport. The photo is stored securely and only viewed by the operator to compare it with your profile photo and details. After the check – whether approved or rejected – the document photo is irrevocably deleted. Only the result, the document type and the time are stored. After approval other members only see the note “Identity confirmed”. The legal basis is your consent (Art. 6(1)(a) GDPR), which you give by uploading; you can withdraw it until the check, in which case the photo is deleted immediately. We recommend covering fields that are not needed for the check (e.g. access number, serial number) before uploading.
6b. Forum and astro diary
Forum posts are visible to other logged-in members with your username and are stored until they are removed or your account is deleted. The operator can review and remove reported posts. Entries in the astro diary are private: only you can see them; they are deleted together with your account.
6c. Incomplete and inactive accounts
If your profile is incomplete, we may remind you by e-mail. If an account remains unused for a longer time despite reminders, we send a final e-mail announcing the upcoming deletion. The account can be deleted 14 days later at the earliest, after a review by the operator – never automatically. If you log in before then, your account remains. If the e-mail address is not confirmed after registration, the operator may pause or remove the account after a reminder. The legal basis is our legitimate interest in not keeping orphaned accounts and data (Art. 6(1)(f), Art. 5(1)(e) GDPR).
7. Payment providers and invoices
External providers such as PayPal or Stripe may be used for payments (from the end of the founder phase). Only the data required for the payment is transferred. Astro2Match stores payment status, package, term, invoice data and invoices as required for the contract, evidence and statutory retention.
8. Backups and recovery
Astro2Match may create technical backups of the data required for operation. They serve recovery after errors, data loss or server problems, are protected administratively and are not publicly accessible. Retention period and scope are limited to what is necessary.
9. Astrological calculations and profiling
Astrological values and match scores are calculated automatically from profile, questionnaire and birth data. This serves entertainment, orientation and non-binding partner suggestions. The results can influence which profiles or notices are shown within the platform. However, there is no automated decision with legal or similarly significant effect within the meaning of Art. 22 GDPR.
10. Cookies, session, local storage and tracking
Astro2Match uses technically necessary cookies, session data and similar local storage, insofar as required for login, language, CSRF protection, security, fraud prevention, package/session assignment and usability. This may include session cookies, login cookies, security cookies, language settings, local browser storage and a service worker/PWA cache. Optional functions such as “stay logged in” may use additional cookies; you can delete or block cookies in your browser, which may restrict login and other functions.
Astro2Match currently uses no analytics, advertising or tracking services and does not embed external fonts, maps or scripts. The place search and the emoji picker in the chat also run entirely on our own server. Consent to cookies is therefore not required; the cookie notice on your first visit is for information only. Should such services be used in the future, this privacy policy will be updated beforehand and, where legally required, consent will be obtained first.
11. Recipients of data
- Hosting/server provider for technical operation
- SMTP/e-mail service for sending e-mails
- Payment providers such as PayPal or Stripe, where payment is activated (from the end of the founder phase)
- Astro2Match’s own companion sites, only if you sign in there with your Astro2Match account (see addendum 10/2026)
- Administrator/operator for review, moderation, support and security
- Authorities, where there is a lawful request or legal obligation
Personal data is not sold for advertising purposes.
12. Storage period
| Data | Usual storage period |
|---|---|
| Account and profile data | until the account is deleted or as long as required for the contract/security |
| Messages | until deletion/archiving according to platform logic or a deletion request, unless there is an obligation to the contrary |
| Invoices and tax data | statutory retention, usually up to 10 years |
| Server/security logs | only as long as necessary; longer in case of errors, attacks or security incidents until clarified |
| Mail-queue logs | until successful processing and subsequent clean-up |
| ID/passport photo of the identity check | only until the check; deleted immediately afterwards. The result is kept until the account is deleted. |
| Inactive accounts | after reminders and a final notice, deletion 14 days later at the earliest after review by the operator |
| Proof of consent | for the duration of the account and afterwards insofar as needed as evidence (Art. 7(1) GDPR) |
| Backups | according to the configured retention/rotation; deleted data may remain in backups until the next backup clean-up |
13. Security
- Transport encryption via HTTPS/TLS
- Passwords stored only as a hash
- CSRF protection for important forms
- Admin and security logs for critical actions
- Protected backup, cache and log folders
- Photo review and filters against abuse
14. Your rights
Under the GDPR you have in particular the rights of access, rectification, erasure, restriction of processing, data portability, objection and withdrawal of consent given. Requests can be sent to info@astro2match.de.
15. Right to lodge a complaint
You can lodge a complaint with a data protection supervisory authority. For Baden-Württemberg this is the State Commissioner for Data Protection and Freedom of Information Baden-Württemberg.
16. Changes to this privacy policy
This privacy policy may be adapted when functions, providers, the legal situation or technical processes change. The current version is always available on the platform.
Updated: 10 October 2026 · Astro2Match 8v129q761 · Antonios Petropoulos · GrevenConsents (addendum 08/2026, updated 10/2026)
Recording of consents
When you give or withdraw consent – for example the consent under Art. 9 GDPR for partner matching – we record this in order to be able to demonstrate it under Art. 7(1) GDPR. We store your user ID, the time, the version of the consent text and whether it was a grant or a withdrawal. No IP address is stored for this purpose.
The former free demo no longer exists. A comparison of birth data to detect repeated demo use therefore no longer takes place.
Signing in to our companion sites with your Astro2Match account (Addendum 10/2026)
Astro2Match operates its own companion sites (e.g. Sternen-WG, Mein Planet, Sternenglanz, dream interpretation, tarot) under astro2match.de addresses. If you wish, you can sign in there with your Astro2Match account (“Sign in with Astro2Match”) without creating a new password.
We then transfer to the respective site only: your Astro2Match user number, your username, your e-mail address and whether it is confirmed. Your birth data (date, time, place) is only transferred if you explicitly tick the separate box on the permission page. Your password never leaves Astro2Match.
The transfer only takes place at your request and after your permission, which is asked for the first time on each site (legal basis: Art. 6(1)(a) and (b) GDPR; for birth data your explicit consent). The controller remains the same as for Astro2Match. Every sign-in is logged with time and IP address. In your account under “Connected sites” you can disconnect any site at any time; the permission is then deleted.
Puzzle Date – Rätsel-Date (date.astro2match.de) (addition 10/2026)
For the game Rätsel-Date we store your nickname, your gender, who you are looking for and your date of birth. This lets us match you with suitable players and show you both your zodiac sign and age at the end.
These details may allow conclusions about your sexual orientation. We therefore process them only with your explicit consent (Art. 9(2)(a) GDPR), which you give in the game with a separate checkbox.
Your fellow player sees your nickname, age and zodiac sign only once you have solved the room together. We store the chat messages of a room so that both of you can see them and reports can be reviewed; they are deleted after 30 days. Phone numbers, e-mail addresses and messenger names are hidden automatically in the chat. If you report a player, we store the report together with the chat history for review.
You can withdraw your consent at any time by choosing “Delete account” in the game menu. Gender, search and date of birth are then deleted immediately and your nickname is made unrecognisable.
If you sign in with “Sign in with Astro2Match” (see the section above), Rätsel-Date only takes your Astro2Match user number and your name from it, no other profile data.