Cookie Policy

Cookies Set by AstroMystra

• Sign-in session (authjs.session-token, with a __Secure- prefix on HTTPS): an encrypted token that keeps you signed in. It is set only when you sign in, is removed when you sign out, and lasts up to 30 days.
• Sign-in helpers (authjs.csrf-token and authjs.callback-url): set while you sign in. One protects the sign-in form against cross-site request forgery; the other returns you to the page you came from.
• astromystra_lang: the language you chose, so your account pages open in English or Hindi. Public pages use the address instead (Hindi pages are under /hi). It lasts one year.
• astromystra_lang_chosen: records that you have already picked a language, so the language picker does not open on every visit. It lasts one year.

Browser Storage (localStorage)

• AstroMystra_lang: your language preference.
• AstroMystra_theme: whether you chose the light or dark theme, so the page does not flash the wrong colours while loading.
• AstroMystra_chat_session: the ID of your current chat conversation, so it reopens after a refresh. It is replaced when a new conversation starts.
• astromystra_vedic_chart_style: whether you prefer the North Indian or South Indian chart layout.

Some preferences are kept in your browser's localStorage instead of cookies. This data stays on your device and is not sent with every request.

Analytics

We use PostHog to see which pages and tools are used. It runs only on the live site, stores its identifiers in localStorage rather than in cookies, and sends data through our own domain. If your browser sends a Do Not Track signal, PostHog does not record your visit. When you are signed in, events are linked to your account so we can see how free and paid features are used.

Payments, Google Sign-in and Advertising

When you open checkout, Razorpay (payments in rupees) or PayPal (payments in US dollars) may set cookies on their own domains. If you sign in with Google, Google sets its own cookies. Those cookies are covered by those companies' policies, not by this page.

The AdSense entry above describes cookies Google would set if ads were shown. At the moment the site includes only Google's site-verification tag; the ad script is not loaded, so no advertising cookies are set. This page will be updated before ads are switched on.