Cycle Atlas
Privacy Policy
1. Summary
Cycle Atlas is a private, range-first menstrual cycle planning calendar. Your cycle entries never leave your device. We do not create health profiles, we do not sync data to any cloud, and we do not sell or share your personal cycle data with any third party.
2. Data We Do Not Collect
- No account registration required
- No email, name, or personal identifiers collected
- No menstrual cycle dates transmitted to our servers
- No health records, medical history, or symptom data collected
- No precise geolocation data collected
3. Data Stored Locally on Your Device
Only the following data may be stored in your browser's localStorage at your explicit request:
- Period start dates you choose to save via the "Save this start locally" button
- Your preferred cycle length, period length, and variability settings
This data remains entirely in your browser. You can delete it anytime using the "Clear" button in the tool or by clearing browser site data. We cannot access, view, or recover this data.
4. Technical Data Processed by Hosting & Third-Party Services
When you visit the site, standard web hosting and security services may automatically process limited technical information:
| Service | Purpose | Data Processed | Retention |
|---|---|---|---|
| Cloudflare (CDN, WAF, DNS) | Content delivery, DDoS protection, bot mitigation | IP address, request headers, browser fingerprint, country code | Logs: typically < 24h; Analytics: aggregated |
| Google AdSense (after approval) | Ad serving, fraud prevention, frequency capping | IP address, cookies, browsing behavior, consent state | Per Google's retention policies |
| Google Analytics (if enabled) | Site usage analytics | IP (anonymized), page views, session duration, device type | 14–26 months |
We do not link this technical data to your cycle entries.
5. Cookies & Similar Technologies
Cycle Atlas itself sets no cookies. After AdSense approval, Google may set advertising cookies subject to your consent choices. See our Cookie Policy for details.
6. Legal Basis (GDPR / UK GDPR)
- Legitimate interest: Security, fraud prevention, service delivery (Cloudflare)
- Consent: Personalized advertising (Google AdSense), analytics (if enabled)
- No processing of special category data: Your cycle data never reaches our servers
7. Your Rights
Under GDPR (EU/UK) and CCPA (California), you have the right to:
- Access — Request confirmation of what personal data is processed
- Rectification — Correct inaccurate data
- Erasure — Request deletion of your personal data
- Restriction — Limit processing
- Portability — Receive your data in a structured format
- Object — Object to processing based on legitimate interest
- Withdraw consent — For consent-based processing (ads, analytics)
To exercise these rights, email citysoulsound@gmail.com with "Privacy Request" in the subject line. We respond within 30 days.
8. Data Retention
- Cycle data (localStorage): Until you delete it
- Server access logs: Typically under 24 hours (Cloudflare)
- Ad/analytics cookies: Per provider policies (Google: up to 26 months)
9. Children's Privacy
Cycle Atlas is not directed to children under 13 (or 16 in EEA). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us for immediate deletion.
10. International Transfers
Hosting and CDN services (Cloudflare) may process data in the US and other jurisdictions. Transfers rely on Standard Contractual Clauses and Cloudflare's certifications. Your cycle data never leaves your device.
11. Security
We use HTTPS/TLS 1.3, Content Security Policy, and Cloudflare's WAF. Your local cycle data is protected by browser same-origin policy.
12. Changes to This Policy
Material changes will be posted here with an updated effective date. Continued use after changes constitutes acceptance.
13. Contact
Data Controller: Cycle Atlas (citysoulsound@gmail.com)
For privacy questions, data subject requests, or to contact our Data Protection Officer, email citysoulsound@gmail.com.