Privacy policy
Last updated: 18/10/2026
This policy explains how personal data is processed on obsidian-tarot.com, in accordance with the EU General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018.
Data controller
Infinity Software (Francesc Pàez Falomir), Tax ID 47855949X, Santiago Russinyol 20, Mora Ebre (Tarragona), ESPAÑA. Contact: info@obsidian-tarot.com.
What data we process
| Use of the site | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| Free tarot table | None. Your preferences are stored only in your browser. | — | — |
| Buying an interpretation | Cards drawn, positions, language, your question (optional), date and payment identifier. | Providing the service you bought (Art. 6.1.b GDPR). | 365 days, then deleted automatically. Unpaid readings are deleted after 2 days. |
| Payment | Email, card details and country, collected directly by Stripe. We never see or store your card details. | Charging for the service (Art. 6.1.b) and tax and accounting obligations (Art. 6.1.c). | As required by law (up to 6 years). |
| Security | IP address, turned into an irreversible hashed code, to limit payments per hour. | Legitimate interest in preventing fraud and abuse (Art. 6.1.f). | 2 hours. |
| Contact | Whatever you send us by email. | Answering your enquiry (Art. 6.1.b or consent, Art. 6.1.a). | While the enquiry lasts and legal periods. |
Your question: please don’t include personal data (full names, phone numbers, addresses or health data). If you do, it will only be used to write your interpretation.
Who we share data with
- Stripe Payments Europe, Ltd. (Ireland), to process payments, as an independent controller of payment data. See stripe.com/privacy.
- OpenAI, as processor, which receives the cards, their positions and your question to write the interpretation. This may involve an international transfer to the United States covered by the EU-US Data Privacy Framework or standard contractual clauses. According to its terms, OpenAI does not use data sent through its API to train its models by default.
- Hostsuar.com, web hosting provider, as processor.
We do not sell your data or use it for advertising. No automated decisions with legal effects are made about you.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@obsidian-tarot.com. You may also complain to the Spanish Data Protection Agency (www.aepd.es) or your local supervisory authority.
Minors
Buying interpretations is restricted to people aged 18 or over.