Privacy policy

60.547.640 EDUARDO FURIHATA, CNPJ 60.547.640/0001-48, Sorocaba/SP, Brazil — the company behind the Mayanastro brand — is the controller of your data, under the Brazilian General Data Protection Law (Law 13.709/2018). For any request about it, write to contact@mayanastro.com.

When you calculate the free nawal

Nothing is sent. The date you type is calculated in your browser and stays only there, until you close the tab — that is how the page knows that result is yours. It only leaves your browser if you ask for your result by email.

When you ask for your result by email

Your email, the date you calculated and its nawal, the language of the screen, the country you visited from (it decides the price the email shows), where you came to the site from (the same anonymous funnel signals, below) and the moment you ticked the consent box, with the version of the text you read. That is what we use to send your result and, later, emails from Mayanastro about the Maya calendar and the Chart. Asking for your result again with the same email does not create a second record.

After your result, we send at most ten emails about your nawal and the Chart: the first one a day later, and each one after double the gap before it (1, 2, 4, 8… days). They stop as soon as you buy the Chart or leave the list, with the “Leave the list” link that goes in every one. No email in the series is sent twice.

When you buy the Chart

Name, email and birth date — that is what the Chart is written and delivered with. Alongside it go the calculated nawal, the amount, the currency, the language, the payment method (Pix, card or Mercado Pago account), the payment status and the identifiers Mercado Pago or Stripe return. We never store payment details: you pay on the provider's page, and they stay there. While you pay, the name and email you typed in the order also stay in your browser, only in this tab and until you close it — so they are not lost if you come back from the payment page.

Every order has its own link, permanent and secret, to its page: the status, the Chart to download and the rating. It reaches you when you come back from paying and in the purchase emails, and carries nothing personal in the address — without the link no one reaches the page, and it shows only the first name and a masked email. Anyone with the link can see the order; if it ends up in the wrong hands, ask for a new one at the contact email and the old one stops opening. To resume the purchase if you come back from paying, this browser keeps the link of the open order, with the name and email you typed (in localStorage, not a cookie) — until the payment is confirmed, or for 30 days at most.

If you cancel the purchase from “Cancel a purchase”, we keep when you asked and — only if you tell us — the reason you chose and what you wrote. They are used to issue the refund and to improve the Chart; only whoever runs the site reads them.

When you write from the “Feedback” page

Your message, the topic you chose, the language, the page you were on and the screen size (phone, tablet or computer). The email is optional: if you leave it, it is used only to let you know when what you asked for is planned or ready, and to reply to you — it is not added to the list and gets nothing else. Only the person who runs the site reads it. We do not keep your IP with this message.

When you use the site

We count the steps of the funnel — visit, calculation, share, click on “I want my Chart”, offer opened, payment screen opened — without knowing who you are. What goes with it is where you came from (the utm parameters in the URL, the address of the site that brought you, the page you entered through), the language of the screen and a random identifier for the tab, created in your browser and dying with it. We do not store IP, name, email or any device identifier in those events.

How we measure reading

To know whether the text gets through, we measure how each page is read: how far you scrolled, how long each paragraph sat in the middle of the screen, at which line the reading stopped, where you clicked, what you copied, and whether a form field was opened and the form not sent — never what you typed. With it goes the same random tab identifier, the language and the screen width. The address we keep is the page's, without the date you calculated. No cookie, and without knowing who you are.

The same signals, with no cookie and nothing stored in your browser, also go to PostHog (servers in the European Union), where we see the path between pages, site errors and how fast it loads. The date you calculated is removed from the address before it leaves here. When something fails on our server, the technical record of the failure goes to the same place: the page, the error message and, if the failure was in an order, its number — never your name or email.

Recording your visit — no cookies, and nothing you type

Microsoft Clarity records your visit as it happened on screen — scrolling, clicks, what shows — and builds maps of where people click and how far they read. We use it to see where the site is confusing and to improve it; only the people who run the site see it. No cookies: nothing is stored in your browser to recognise you later; only the same random tab identifier goes along, and it dies with the tab. What you type that is personal is not recorded: name, email and what you write in text fields (the “Feedback” form, the score comment) are masked out of the recording.

If you don't want to be measured, just say so, below: it covers the recording, PostHog and the reading measurement, in this browser. If your browser sends the Global Privacy Control signal, we already don't measure your visit, with nothing for you to do. The funnel steps (visit, calculation, purchase) are still counted without knowing who you are — that is how we know where sales come from.

Cookies

Buying stores no cookie at all: the order travels by its link. Our only cookie is idioma, and it only exists if you use the language switcher — it keeps your choice for a year. If you opt out of measurement, that choice stays in your browser. Clarity and PostHog use no cookies here. We use no advertising or cross-site tracking cookies. On the payment pages of Mercado Pago and Stripe, they may use their own cookies, under their own policies.

• To write and deliver your Chart, charge and confirm the payment, handle the withdrawal, the refund and your questions — performance of the contract you entered into when you bought.
• To keep the record of the sale for as long as the law requires — legal obligation.
• To measure how the site is used, identifying no one — how many people go through each stage, how the pages are read and, in Clarity, how the visit happened on screen, without what you type — legitimate interest (LGPD, art. 7, IX), to improve the site. You can object whenever you like, from the button in the “Recording your visit” section or with your browser's Global Privacy Control.
• To send your result by email and, later, emails from Mayanastro about the Maya calendar and the Chart — with your consent (LGPD, art. 7, I), which you give by ticking the box and withdraw whenever you like, from the “Leave the list” link in any email.

Without that consent, we send no email other than the ones the purchase requires — the receipt and the delivery of the Chart.

• Mercado Pago (Brazil) — processes payment in reais, on its own page: Pix, card or account balance. Receives your email, your name and what you type there (such as your document number).
• Stripe (United States and Ireland) — processes cards outside Brazil. Receives your email and the order number.
• Resend (United States) — sends the emails: the receipt, the delivery and, to people on the list, the result and the news. Receives your email address and what is written in each message.
• Vercel (United States) — hosts the site; the data passes through its servers.
• Neon (São Paulo region) — the database where orders, the list and the reading measurement are stored.
• PostHog (European Union) — receives the anonymous usage signals: the pages, the path between them, errors and speed, and the technical record of server failures. No cookie and no name.
• Microsoft Clarity (United States) — records the visit on screen, with no cookies and nothing you type, as described above.
• Amazon (United States) — on the book pages, the purchase links are affiliate links: we earn a commission when you buy, at no extra cost to you. When you click, we send you to the Amazon store for your country (for example, from Brazil to amazon.com.br), based on your approximate country from your IP; on Amazon, its own policy and cookies apply.

We never sell, rent or hand over your data for advertising or for any other purpose.

Some of those services operate outside Brazil (Vercel, Resend, Stripe and Microsoft, in the United States; PostHog, in the European Union). The transfer happens under those providers' contractual guarantees and security measures, as art. 33 of the LGPD allows. The database is in Brazil.

Order data is kept for up to 5 years after the purchase — the retention period for tax obligations and the period in which a claim about the purchase can still arise. There is no automatic deletion today; if you want your order deleted sooner, just ask, and the deletion covers everything the law does not require us to keep.

Your record on the list is kept while you are on it. If you leave, it is marked as “left” — the proof that you asked to receive nothing more — and no email goes out to you again. If you want even that record deleted, just ask.

Feedback messages are kept for as long as they help improve the site. If you want yours deleted — email included — just ask.

The funnel numbers and the reading measurement identify no one. Reading data is kept up to a storage cap — the oldest go first. In PostHog, signals are kept for up to 1 year. Clarity recordings are kept 30 days (those we mark for study, up to 13 months), and click maps, 13 months. The open order link, kept in your browser to resume the purchase, disappears when the payment is confirmed or after 30 days; everything else that stays in your browser disappears when you close the tab.

The LGPD (art. 18) guarantees that you can, at any time:

• confirm whether we process your data, and access it;
• correct anything incomplete, wrong or out of date;
• ask for anonymisation, blocking or erasure;
• ask for portability to another service;
• know who we share it with;
• object to the measurement of your visit — instantly, from the “Don't measure my visit” button;
• withdraw a consent you have given — the list one instantly, from the “Leave the list” link in any email.

To exercise any of them, write to contact@mayanastro.com from the address used for the purchase or the list; we reply within 15 days. If you think we have not looked after your data properly, you can complain to Brazil's National Data Protection Authority (ANPD).

If you live outside Brazil, the rights your own law grants — the GDPR in Europe, the UK GDPR, state privacy laws in the United States — apply too, and you can turn to your local data protection authority.

The site runs only over HTTPS; cookies are signed; card data never reaches us; access to the database is restricted to whoever writes the Charts. No system is infallible — if there is an incident affecting your data, we tell you and the ANPD, as the law requires.

The purchase and the email list are for people over 18. A Chart can be written for a child — but whoever buys it and provides the details is the responsible adult.

When this page changes, the date at the top changes with it. A change in what we do with your data is announced here before it takes effect. The rules of the purchase are in the Terms.