01 / Temporary chart
No account, no email
The browser recovery state stores generated chart state rather than the original form payload and expires after no more than four hours. It can be removed immediately with Forget this chart.
Important boundary: this four-hour rule is verified for Spatial Press browser continuity. Renderer-side temporary artifact deletion is a separate ANGIE lifecycle control and is not presented here as verified until its deployed cleanup path has been proven.
02 / Saved chart
Account storage keeps the generated work
When you deliberately save a chart, Spatial Press does not put the original birth-input payload into the saved-chart record. It copies the generated preview into private storage, encrypts the stored preview and chart metadata at the application layer, and requires your authenticated account to retrieve the private copy.
Saved chart editions are kept until you delete the chart or account. Deleting a saved chart removes its encrypted account record and private saved preview.
03 / Email delivery
A private delivery edition
When you request a chart by email, the delivery service copies the generated preview into encrypted private storage and emails an opaque private delivery link instead of putting the source preview URL into the emailed link.
Email-delivery editions expire no later than 365 days after creation. Expired links are refused and expired delivery records are eligible for the authenticated cleanup worker.
04 / Orders
Commerce is a separate purpose
Order, payment, shipping, tax, refund, fraud-prevention, and fulfillment records are handled separately from chart-generation inputs. Spatial Press does not use an order as permission to keep the original birth-input request indefinitely.
Spatial Press-controlled production derivatives may be retained for up to one year for reprints, refunds, disputes, and customer support. Transaction records that a payment, commerce, fulfillment, or tax provider must retain can follow that provider’s legal and operational requirements.
05 / Email + analytics
Delivery is not marketing consent
An email address supplied to receive a chart or sign in is used for that service purpose. Newsletter and promotional mail require a separate opt-in. Spatial Press does not sell birth/chart information or use it for cross-context behavioral advertising.
The application is designed not to place raw birth inputs, email addresses, authentication tokens, private artifact links, or full chart payloads into ordinary analytics events.
06 / Transport + access
Private data stays off public account URLs
Account and delivery responses use no-store caching controls. Saved-chart previews are served through authenticated or opaque-capability routes rather than exposed as the account’s durable public Blob URL. The site disables browser geolocation permission and uses HTTPS transport.
Encryption keys are kept in deployment secret storage rather than client JavaScript or saved-chart records. Dedicated account keys can be configured independently and are domain-separated from other service uses.