Privacy Policy

"Whisper of Cards" respects the privacy of users. This policy describes what data we collect, why it is needed, how it is stored, and what rights the user has.

By using the site and creating an account, the user accepts the terms of this policy.

During registration and use of the site, the following may be processed:

• username
• email address
• avatar (upload is optional)
• date of birth - if the user provided it themselves, for calculations of the Matrix of Destiny, numerology, and Human Design
• authorization data via Google OAuth
• authorization data via Telegram Login, including the Telegram identifier
• history of transactions with credits and subscriptions
• subscription information (type, validity period)
• texts that the user enters themselves: dream description, personal diary entries, forum messages
• IP address and approximate location (city) - determined on request for weather suggestions and for rate limiting of requests

We do not see or store passwords from third-party services (Google, Telegram).

Personal diary entries are visible only to the user themselves. If the user themselves opens access via a link, the entry becomes available to the person to whom they sent that link.

We do not collect data that is not needed for the operation of the service.

Data is used for:

• creating and maintaining the account
• authorizing the user
• providing access to the site's functions
• performing the calculations that the user requested
• accounting for credits and transaction history
• managing subscriptions
• sending emails to which the user has subscribed, and emails with paid readings
• contacting the user regarding the operation of the service
• ensuring account security and protection against automated requests
• anonymized visit statistics

We do not sell personal data and do not transfer it to advertising companies.

Data is stored in the Supabase cloud infrastructure with encryption in transit and at rest. The site runs on the Vercel platform.

Access to data is delimited at the database level: the user sees only their own records. We take technical and organizational measures to protect data from unauthorized access, modification, or destruction.

No method of storing or transmitting data over the internet can guarantee absolute security.

We do not transfer personal data to third parties for sale or advertising.

Data is processed by external services only to the extent necessary for the operation of the site:

• Supabase - storage of the database and accounts
• Vercel - hosting of the site and processing of requests
• Google and Telegram - authorization, if the user chooses the corresponding login method
• Ko-fi, Ratecore - payment acceptance. Payment details (card number, CVV) are not transferred to us and are not stored on our servers
• Resend - email delivery: weekly newsletter and completed paid readings
• DeepSeek - dream interpretation and preparation of paid Matrix of Destiny readings. The text of the dream or the calculated matrix numbers and date of birth are transferred to the service; name and email address are not transferred
• Google Gemini - preparation of daily horoscopes and descriptions of astro events. Personal data of users is not transferred to this service: the texts are common to all
• Google Analytics - anonymized visit statistics
• Telegram - notifications to the administrator about new orders and entries

Some of these services are located outside the country of residence of the user, and data is processed on their servers according to their own privacy policies.

The site uses cookies necessary for authorization, saving settings, and correct operation of the service.

Google Analytics is connected on the production version of the site. It collects anonymized statistics: which pages are opened, from which devices, and how long they are read. Personal data is not transferred to analytics.

Some settings (the last opened tab, viewed spread layouts, entry draft) are stored in the user's browser and are not sent anywhere.

The user can disable cookies in the browser settings, but some functions of the site will then become unavailable.

The user has the right to:

• request information about their personal data
• receive a copy of their data in a readable form
• request correction of inaccurate data
• request deletion of the account and the data associated with it
• opt out of the newsletter - in the account, in the settings, or via the link in the email itself
• withdraw consent to data processing and stop using the service

The name, avatar, and date of birth can be changed independently in the personal account. To delete the account or receive a copy of the data, it is enough to write on Telegram: @ShepotKart6. The request is fulfilled within 30 days.

After account deletion, personal data is deleted. Anonymized records of payments are retained if required by accounting.

The site is intended for persons over 18 years of age. By registering, the user confirms that they have reached 18 years of age.

If we become aware that the data belongs to a person under 18 years of age, we will delete it.

We may update this policy. The new version is published on the site and takes effect from the moment of publication. The date of the last update is indicated at the top of the page.

For questions about privacy and data processing: Telegram @ShepotKart6