Privacy Policy
This policy explains what we do with your personal data. We have written it to be read, not to be skimmed past — if something here is not clear, ask us and we will rewrite it.
1. Who is responsible for your data
Destiny Guru is the controller of the personal data described here. For any privacy question or request, write to [email protected].
2. What we collect
| Data | When it appears | Why we have it |
|---|---|---|
| Email address | Registration; also used for password reset and service emails | Identifying your account, giving you access to what you bought |
| Name (as you enter it) | Registration, or a label you give a saved chart | Addressing you, distinguishing your saved charts |
| Password | Registration | Stored only as a cryptographic hash — we cannot read it or recover it for you |
| Google account identifier | Only if you choose to sign in with Google | Letting you log in without a separate password |
| Dates of birth and names you enter — yours, a partner's, a child's | When you calculate a chart, and when you save one to your account | The chart cannot be calculated without them; saving lets you reopen it later |
| Purchase records — amount, currency, payment method, status | When you buy something | Giving you access, supporting you afterwards, meeting accounting obligations |
| IP address | First visit to a pricing page; also in standard server logs | Running the first-visit discount, security, abuse prevention |
| Reviews you submit | Only if you write one | Publishing it on the Site with your first name |
| Usage statistics | While you browse, via analytics tools — see section 6 | Understanding which pages work and which do not |
We do not ask for your address, phone number, government ID, or card details. Card data is handled entirely by our payment providers and never reaches our servers.
A note on dates of birth
A date of birth is personal data, and when you enter someone else's — a partner's for a compatibility reading, a child's for a child matrix — you are sharing another person's data with us. Please only do that where you have a proper basis: your own child, or an adult who is content for you to do so. We have no way to verify this, so it rests with you.
We do not collect data about your health, beliefs, ethnicity, or sexual life. Where an interpretation discusses health or relationships, that text is generated from arithmetic on a birth date — it is not information you gave us and not a record about you.
3. Why we are allowed to process it (GDPR legal bases)
- Performance of a contract — running your account, calculating and storing your charts, giving you the access you paid for, and supporting you afterwards.
- Legal obligation — keeping records of transactions for the period required by accounting and tax law.
- Legitimate interests — keeping the Site secure, preventing abuse and fraud, and operating the first-visit discount. We use the narrowest data that achieves this.
- Consent — analytics and any marketing email. You can withdraw consent at any time, and withdrawing it does not affect what was lawful before.
4. How long we keep it
- Account data and saved charts — until you delete them or close your account.
- Purchase records — for the period required by accounting law, even after account closure, because we are obliged to retain them.
- First-visit IP records — a short window, only as long as the discount logic needs.
- Server logs — a limited retention period, then rotated out.
- Published reviews — until you ask us to remove yours.
5. Who else sees your data
We do not sell your personal data. We do not share it for anyone else's advertising. It is shared only with service providers who help us run the Site, and only to the extent they need:
- Hosting. Our servers are operated by Hetzner Online GmbH in Helsinki, Finland — inside the European Union.
- Payment providers. They receive what is needed to process a payment and handle your card data under their own privacy policies.
- Email delivery. Service emails (verification, password reset, purchase confirmation) are sent from our own mail server.
- Analytics. Google Analytics and Yandex Metrica — see the next section.
We may also disclose data where the law requires it, or to establish or defend a legal claim.
6. Analytics and international transfers
We use two analytics tools: Google Analytics 4 (G-GJWTVJCPBC) and Yandex Metrica (111181773). They tell us which pages people open and where they leave, using cookies and similar technologies. Details, including how to refuse them, are in the Cookie Policy.
Where this data goes. Google Analytics may transfer data to the United States, and Yandex Metrica processes data on servers in the Russian Federation. Neither country is covered by an EU adequacy decision in the same way an EU country is. If you are in the EEA or the UK and you would rather your browsing was not shared with these services, decline analytics cookies or use a browser setting or extension that blocks them — the Site works fully without them.
We keep analytics separate from your account: we do not upload your email, name, or dates of birth to these tools. Note, however, that analytics scripts record the address of the page you are on, so we avoid putting personal details into page addresses — saved charts open by a numeric identifier rather than by name and date.
7. How your data is protected — and its honest limits
- The whole Site runs over HTTPS, so traffic between your browser and our servers is encrypted.
- Passwords are stored as salted cryptographic hashes and cannot be read, by us or by anyone who obtained the database.
- Database queries use prepared statements, and access to the server is restricted.
- A saved chart opens only for the account that owns it. Sending someone the link does not give them access, and personal readings are excluded from search engine indexing.
To be straightforward about one thing: the dates of birth and names in saved charts are stored as ordinary values in our database — they are protected by access controls, not by separate field-level encryption. We prefer to say this plainly rather than claim more than we do. No system is perfectly secure, and we cannot guarantee absolute safety of any data transmitted online.
8. Your rights
If you are in the EEA or the UK, the GDPR gives you the right to:
- access the personal data we hold about you;
- rectify it if it is wrong — most of it you can edit yourself in your account;
- erase it ("right to be forgotten"), subject to records we must keep by law;
- restrict or object to processing based on legitimate interests;
- receive your data in a portable, machine-readable form;
- withdraw consent at any time where processing is based on it;
- complain to your national data protection authority.
If you are a California resident, the CCPA/CPRA gives you the right to know what we collect, to request deletion, to correct inaccurate data, and not to be discriminated against for exercising those rights. We do not sell or share personal information as those terms are defined by California law.
Similar rights exist under the laws of Brazil, Canada, Switzerland, and other countries. We apply the same standard to everyone regardless of where you live: it is simpler, and it is fairer.
To exercise any right, write to [email protected]. We respond within 30 days. We will not charge you for a reasonable request, and we may ask you to confirm your identity — that protection exists for you, so that nobody else can obtain your data by pretending to be you.
9. Deleting your account
You can delete your account from your account settings, or ask us to do it. Deletion removes your profile, your saved charts with the dates and names in them, and your access to purchased readings. Transaction records are retained where accounting law requires. Deletion is permanent — export any PDFs you want to keep first.
10. Children
The Site is not intended for people under 18, and we do not knowingly collect their data. A child matrix is meant to be created by a parent or guardian using the child's date of birth — that is the parent using our service, not the child. If you believe a child has created an account, tell us and we will remove it.
11. Automated decisions
We do not make automated decisions with legal or similarly significant effects about you. A chart is arithmetic on a date of birth, and the interpretation attached to a result is a text written in advance, not a decision made about you as a person.
12. Changes to this policy
If we change how we handle personal data, we will update this page and move the effective date at the top. For material changes we will notify registered users by email. Please look at this page occasionally.
See also our Cookie Policy, Terms of Service, and Disclaimer.