Privacy Policy
Privacy at a glance
Below is a simple overview of what happens to your personal data when you visit this website.
Which data is collected?
The free calculator processes your date of birth in your browser only — that data is not stored or transmitted. When you submit the contact, reading or newsletter form, we transmit the data you enter (e.g. name, email, possibly date of birth) together with your IP address and browser identifier (user agent) to our server, store it in our database, and send the related emails via our provider Resend. For a reading request a short automated email follow-up may also be triggered. The legal basis is your consent or the handling of your request (Art. 6(1)(a)/(b) GDPR).
Cookies
SyuTsai sets only the cookies and local storage entries you selected on your first visit. You can change your selection at any time via the link in the footer.
Legal basis
For strictly necessary storage (sign-in, profile, language) we rely on Art. 6 (1)(b) GDPR (contract performance) and § 25 (2) no. 2 TTDSG (technically required). For all other categories (Comfort, Statistics, Marketing) we rely on Art. 6 (1)(a) GDPR and § 25 (1) TTDSG — i.e. only with your explicit consent.
What we store
The following values are stored exclusively on your device (localStorage, IndexedDB, first-party cookie). Data you actively submit (contact, reading or newsletter form) is transmitted only to handle your request — see “Third parties”.
1 · Necessary (always active)
| Name | Type | Purpose | Duration |
|---|---|---|---|
syutsai_consent | Cookie | Stores your consent selection | 12 months |
syutsai.consent | localStorage | Fallback copy of your consent | until deletion |
syutsai.auth | localStorage | Recognises that you are signed in (email or phone-number echo) | until sign-out |
syutsai.profile | localStorage | Your name, birth date and optional time/place — basis for every calculation | until deletion |
syutsai.lang | localStorage | Your chosen interface language (DE / EN / RU / UA) | until deletion |
2 · Comfort (only with consent)
| Name | Type | Purpose | Duration |
|---|---|---|---|
syutsai.audio | localStorage | Stores whether sound effects are on or off | until deletion |
syutsai.history | IndexedDB | Local history of your drawn tarot cards and oracle answers | until deletion |
3 · Statistics (only with consent)
Only with your consent: Google Analytics 4 measures anonymously (truncated IP) which content works. The script loads only after you agree and can be revoked any time via the cookie settings.
4 · Marketing (only with consent)
Only with your consent: the Meta Pixel (Facebook/Instagram) measures how ads perform. It loads only after you agree and can be revoked any time.
Third parties
The fonts (Cormorant Garamond, Inter) are self-hosted via next/font and served directly from our own server. No connection to Google is made and no IP address is transmitted to Google.
If you sign in via Google Sign-In, the Identity Services script from accounts.google.com is loaded in addition. It only starts when you click “Continue with Google” and transmits only what Google needs for authentication.
When you submit the contact, reading or newsletter form, we process your details (e.g. email, name, date of birth) via our email provider Resend (Resend, Inc., USA) to handle your request or, if you wish, to keep you informed. For booking you can use Calendly; Calendly’s privacy terms apply. Both services load only when you actively use them.
Payments are handled by Stripe (Stripe Payments Europe, Ltd., Ireland; where applicable Stripe, Inc., USA) — the data needed for payment is sent directly to Stripe; we never see your card details. The website is hosted with Vercel (Vercel, Inc., USA), which technically produces server logs (incl. IP address). Member accounts and profiles are stored in a MongoDB Atlas database (MongoDB, Inc.) in an EU data centre. Data-processing agreements (Art. 28 GDPR) are in place with all providers.
Transfers to third countries (USA)
Some of the services named (Google, Meta, Stripe, Vercel, Resend) may transfer personal data to the USA. Where a transfer takes place we rely on an adequacy decision under the EU-US Data Privacy Framework or — where that does not apply — on the EU Commission's Standard Contractual Clauses (Art. 46 GDPR). Statistics and marketing services load only after your explicit consent (Art. 49(1)(a) GDPR).
Withdrawal
You can withdraw your consent for the future at any time — via the footer link “Cookie settings” or by deleting cookies in your browser. Withdrawal does not affect the lawfulness of storage carried out up to that point.
Your rights
You have the right to information, correction, deletion and restriction of the processing of your personal data at any time. Just send me an email.