Privacy Policy
Last updated: August 30, 2026
Data controller
The controller of your personal data is the entity listed below.
- Company
- Recode Software Przemysław Szejna
- Address
- ul. Popiełuszki 11/2094-052 ŁódźPoland
Introduction
Zorynthia ("we", "us", "our") respects your privacy. This Privacy Policy explains what data we collect, how we use it, and your rights when using our AI tarot reading application at zorynthia.eu.
Data We Collect
We collect the following data: • Account data: name, email address, encrypted password • Birth data (optional, used only for astrology): date of birth, country, gender • Reading data: questions, drawn cards, AI interpretations, astrological data • Technical data: IP address, browser type, device type • Analytics data (only with your consent): anonymous usage statistics, in-app events (such as account creation, reading start, token purchase), a pseudonymous device identifier from the _ga cookie, time on page, and referral source. This data is sent to Google Analytics 4 with IP anonymization enabled. • Payment data: transaction amount and status, partial card details (last 4 digits, card type), and billing country, all handled by Stripe; we do not store your full card number. We also keep the billing country on our side to determine the correct VAT rate. • Newsletter data: email address, chosen language and the date consent was given, used solely to send the weekly horoscope. You can withdraw consent from the link in every issue or in your account settings; we pass the address to nobody.
How We Use Your Data
We use your data to: • Provide AI tarot and astrology reading services • Personalize astrology readings based on birth data • Store reading history • Send essential service notifications • Improve our service and user experience • Processing payments and managing subscriptions
Cookies
We use cookies for authentication (auth_token), CSRF protection (csrf_token), language preferences, and cookie consent. See our Cookie Policy for details.
Third-Party Services
We use the following third-party services: • OpenAI: Your questions and birth data are sent to the OpenAI API to generate interpretations. Data is anonymized (we do not send your name or email address). • Google OAuth: authentication with your Google account (name, email). • Google reCAPTCHA v3: bot protection (behavioral data). • Google Analytics 4 and Google Tag Manager (only with your consent): traffic and behavior analytics. Data is collected pseudonymously (identifier from the _ga cookie, IP anonymized) and used solely for aggregate statistics and service improvements. We implement Consent Mode v2. Analytics collects nothing without your consent. • Stripe: payment processing. Your card details are sent directly to Stripe (PCI DSS certified); we do not store them. Stripe passes us the billing country you provide at checkout, we use it solely to determine the correct VAT rate. When a payment is confirmed server-side, we send a purchase event to Google Analytics 4 (Measurement Protocol), it includes amount, currency, and transaction ID. • Sentry: application error monitoring. When something breaks we send the error message along with your account identifier, email address, IP address and which feature you were using. The data is held on servers in the European Union and is used solely to diagnose and fix the fault.
AI Data Processing
Questions, birth data, and astrological context are sent to the OpenAI API to generate interpretations. We do not send identifying data (email address, name). OpenAI processes data according to its own privacy policy. Generated interpretations are stored on our servers as reading history.
reCAPTCHA
We use Google reCAPTCHA v3 to protect against automated access and bots. reCAPTCHA may collect data about your device and behavior. It is subject to Google's Privacy Policy (policies.google.com/privacy).
Data Retention
We retain account data as long as your account is active. Reading history is stored according to your plan. You can delete individual readings at any time. Upon account deletion, all data is permanently removed within 30 days.
Your Rights
Under GDPR you have the right to: • Access your personal data • Rectify inaccurate data • Erase your data ("right to be forgotten") • Data portability • Withdraw consent at any time To exercise these rights, contact us at support@zorynthia.eu.
Children
Zorynthia is not intended for anyone under 16 years of age. We do not knowingly collect data from children.
Changes to This Policy
We may update this Privacy Policy. We will notify you of significant changes via email or in-app notification.
Contact
For privacy-related questions, contact us: Email: support@zorynthia.eu