Who is responsible
AeroLex, a sole proprietorship operated by Noah Aodhán Zepter-Martínez (United States), is the data controller for aerolex.dev. Contact: noah@aerolex.dev.
What this site collects
The public marketing pages and this privacy page use Google Analytics 4 to measure aggregate traffic. These pages have no login, payment flow or forms. Accounts inside The Scene and The Sanctum are separate features, described below.
The game is a separate thing. Playing it is optional, and creating an account inside it is optional again. If you create one, the game stores an email address, a username and your progress so that your progress survives closing the tab. You can delete that account from inside the game, and doing so hands you a copy of the vocabulary you earned before it goes. If you play without an account, nothing about you leaves your own browser.
The Sanctum
The Sanctum is an invite-only astrology and journaling app operated by AeroLex. This section covers its accounts, cloud sync, photos and sharing. The public website's analytics are described in the other sections of this notice.
Your account
Signing up with email uses your email address, chosen display name and password through our authentication provider, Supabase. If you use Google sign-in, Google supplies basic identity and profile information, such as your name, email address and profile image. We use that information to identify and maintain your Sanctum account. The app does not request access to your Gmail messages, Google Drive files or Google Calendar, and does not use Google profile information for advertising.
Your saved work
Charts can include names, birth dates, birth times and birth places. Entries can contain whatever personal information you choose to record, including your notes, readings and practice. Correspondence libraries can include personal associations, stock information, acquisition details and photos. Uploaded library photos are resized and redrawn without camera metadata. The app keeps this work in the browser. Once you sign in and choose to upload existing work, or save new work while signed in, it is also stored with Supabase and synced to your account. Browser storage remembers your sign-in and which account owns the device's copy.
Who handles it
Supabase provides authentication and cloud storage. Resend delivers account confirmation and password-reset emails. Google handles Google sign-in when you choose it. The app's database rules restrict direct access to your saved records to your account. Selected content can also be viewed through a sharing permission you create, as described below. The operator has administrative access to the database; these records are not end-to-end encrypted against the operator.
Sharing you choose
You can grant a specific member a live, read-only view of a chart or individual entry. The sharing preview shows the selected sections. Entry text, private notes, headspace, outcomes and follow-ups are excluded unless selected. A chart's journal is not included. You can change or stop a share. Allowing the recipient to save an independent copy is a separate choice; a copy they already saved remains theirs after sharing stops. A recipient can also manually copy information they can view. Received live views are not stored for offline reading by the app.
Library exchange files contain the selected reference entries as independent editable copies. Stock, owned pieces and acquisition details are excluded. Personal notes, custom fields and entry photos are excluded unless selected. The app downloads the file to you; you choose whether and how to send it. Files and independent copies cannot be recalled by stopping a live share or deleting your account.
Your copies and choices
You can export your work from Charts & files. Signing out can keep this device's copy or clear it. Delete my account removes your active cloud account and its records and clears the browser where you perform the deletion. Downloaded backup files and copies retained in other browsers need to be managed separately. Provider logs and backups may have their own retention periods; this section does not promise their immediate erasure.
For account or privacy questions, contact noah@aerolex.dev.
What the analytics capture
- Page visited and referring URL
- Approximate location, at country and region level
- Device type, browser, screen size, language setting
- Clicks on the email link
- A truncated, anonymised form of the visitor's IP address
They do not capture names, email addresses, typed input, or activity on other sites. There are no advertising pixels, retargeting tags or session recorders. Any material change to this collection will appear on this page before it takes effect.
Cookies and consent
On a first visit, a consent banner appears at the bottom of the page. The choice is recorded in the browser's local storage for 365 days.
With consent granted, Google Analytics sets two cookies (_ga and
_ga_KKEJ0GQJ9Z) used to tell new visitors from returning ones. With consent
declined, no cookies are set; an anonymous page-view count is still recorded, with no
persistent identifier, under Google Consent Mode v2. The site works identically either way.
To change your mind, use Cookie settings in the footer of any page, or clear browser data for aerolex.dev.
Where the data goes
Google Analytics is operated by Google LLC, whose privacy practices are documented at policies.google.com/privacy. AeroLex does not share, sell or transfer this data to any other party, and does not use it for advertising. Game accounts are stored with Supabase, which hosts the database the game saves to; that data is likewise never sold or shared.
How long it is kept
Event-level analytics data is retained for up to 14 months, then deleted. Aggregate reporting persists longer but is not tied to individual visitors. Game accounts are kept until you delete them.
Your rights
Under the GDPR (EU/UK), the CCPA/CPRA (California), and similar state-level laws in Colorado, Virginia, Connecticut, Texas, Utah and elsewhere, you may request access to, correction of, deletion of, or restriction on processing of your data. The only identifier the analytics retain is a randomised cookie ID; declining cookies or clearing browser data for aerolex.dev normally resolves such requests at the source. For anything needing action on our side, or to have a game account removed by hand, contact noah@aerolex.dev.
Links away from here
This site links to an email address, The Scene and The Sanctum. Once you follow a link somewhere else, that destination's own privacy practices apply.
Changes to this notice
Updates are reflected in the "Updated" date at the top of this page. Material changes, such as a new tracker or a new third party handling data, will be announced on the home page for at least two weeks before taking effect.