Privacy Policy

Effective October 12, 2026. This policy explains what personal data we process on Ask the Signs (askthesigns.com), why we process it and what rights you have. The site is run from the European Union, so the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) applies to every visitor, wherever you live. This policy is the information required by Article 13 GDPR.

1. Who is responsible for your data

The controller of your personal data is Valerii Makarenko, ul. Diamentowa 27/1, 05-800 Pruszków, Poland, Polish tax ID (NIP) 5242922390, REGON 389492421 (the “Controller”). For anything related to your personal data, write to hello@askthesigns.com or send a letter to the address above.

The Controller has not appointed a data protection officer, as it is not required to do so.

2. Your questions stay on your device

The questions you type into a reading (for example in Yes or No Tarot) are processed only in your browser. We don’t send them to our server, we don’t store them and we don’t pass them to analytics tools.

3. What we process, why, and on what legal basis

• Technical data in server logs (IP address, date and time, page address, browser type). Purpose: security, preventing abuse and keeping the site running properly. Legal basis: the Controller’s legitimate interest (Art. 6(1)(f) GDPR). Retention: according to the hosting provider’s settings, usually a few weeks.
• Visit statistics (Google Analytics 4), only if you click “Accept” in the banner. Before you consent, Google’s script is not loaded at all. Purpose: understanding which tools visitors use. Legal basis: your consent (Art. 6(1)(a) GDPR) and consent to storing cookies on your device. Retention: up to 14 months in Google Analytics. You can withdraw your consent at any time.
• Email correspondence, if you write to us. Purpose: replying to your message or handling a request or complaint. Legal basis: the Controller’s legitimate interest (Art. 6(1)(f) GDPR). Retention: until the matter is resolved, and then until any possible claims expire.

Providing data is voluntary. Without an email address we can’t reply to a message; every other feature of the site works without giving us any data at all.

We don’t make decisions about you based solely on automated processing, including profiling (Art. 22 GDPR). Readings are random and are for entertainment.

4. Who receives data

Data may be received only by companies that process it on our behalf under a data processing agreement:

• Hostinger International Ltd. (Cyprus): website hosting, database and email;
• Google Ireland Ltd. (Ireland): Google Analytics 4, only after you consent to statistics.

We don’t sell your personal information and we don’t share it for advertising. The site’s fonts, scripts and card illustrations are served from our own server, not from third-party servers.

5. Transfers outside the European Economic Area

With Google Analytics, data may be transferred to Google LLC in the United States. This is based on the European Commission’s adequacy decision for the EU-US Data Privacy Framework, which Google has joined, and on standard contractual clauses. All other data is processed in the EEA.

6. Your rights

You have the right to:

• access your data and receive a copy (Art. 15 GDPR),
• have your data corrected (Art. 16),
• have your data erased (Art. 17),
• restrict processing (Art. 18),
• data portability for data processed on the basis of consent (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal (Art. 7(3)).

To use any of these rights, write to hello@askthesigns.com. We will reply without undue delay and at the latest within one month. You also have the right to lodge a complaint with the supervisory authority, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl), or with the data protection authority where you live.

7. Visitors in the United States and Canada

The same protections apply to you. We do not sell or share personal information for cross-context behavioral advertising, and we don’t knowingly collect personal information from children under 13. If you are in Canada, including Quebec, you can exercise the rights above (access, correction, withdrawal of consent) by writing to the address in section 1.

8. Browser storage and cookies

On your device we store only what the tools you use need (for example your card of the day). This data never reaches us. The full list is in the Cookie Policy. You can delete all of it with the “Clear my data” button in the footer.

9. Security and changes to this policy

The site works only over an encrypted HTTPS connection, and only the Controller has access to the database. If we make important changes to this policy, we will announce them on this page with a new effective date.