Privacy Policy

1. Controller

The data controller is Pashur Oy (Business ID / Y-tunnus 1072983-1), Harilantie 280, 17510 Nyystölä. For any privacy question, contact support@sacrednumbers.live.

2. What we collect, and why

The free reading generator collects no personal data about you and requires no email address. We collect personal data only when you buy a paid reading, buy or redeem a gift, or take part in the referral programme.

Specifically:

• Your email address — we collect and store your email address when you buy a reading or redeem a gift. We use it to create your account, send your receipt and give you access to your reading (see section 6 for how long we keep it, and section 4 for the legal basis). When you buy a gift, we use your email to attribute the purchase and to let you view your gift code — no account or login is needed, and we send you no marketing. A gift recipient enters their own email when they redeem the code; the buyer of a gift does not handle the recipient's data. If you later ask us to email you your account link (for example if you lost it), we send that link only to the address already on the account.
• Birth data — for a paid reading you provide your birth date and, optionally, birth time and place. We use it to compute your chart and generate your keepsake PDF.
• The draw itself — the drawn number, timestamp and sky data — so the Service can generate and show your reading. The free draw is not linked to your identity.
• Minimal technical logs (such as IP address and request time) needed for security, abuse-prevention and to keep the Service running.

Privacy-friendly analytics. We use a cookieless, non-identifying analytics tool (Plausible) to see aggregate usage — such as page views, referring sites and country — so we can understand and improve the Service. It sets no cookies, uses no persistent identifier, stores no personal data about you and builds no profile of you; it cannot identify you or track you across other sites, and the free draw stays anonymous. This analytics data is processed within the EU. If you search our angel-number library and it finds nothing, we record the search term alone, with no identifying information, so we can see what we have not written yet.

To customers of the reading service, the only email we send is transactional and at your request — such as your account-access link and your Stripe payment receipt. We run no newsletter and we add no buyer or gift recipient to any marketing list. Separately, we operate a business referral programme, and may send a small number of one-to-one invitations to the public business or creator contact addresses of channels we think would suit it — see section 9. These are individual business messages, not a newsletter or bulk consumer marketing, and each carries a clear opt-out we honour permanently.

3. What we do not do

We do not sell your personal data. We do not run advertising trackers or third-party ad-profiling on this site, and the free draw sets no tracking cookies. The privacy-friendly analytics we use (section 2) are cookieless and build no profile of you.

4. Legal bases

We process your order email and birth data to perform our contract with you — delivering the reading you requested (Art. 6(1)(b) GDPR). When you ask us to email you your account-access link, we send that one transactional message to perform our contract with you (Art. 6(1)(b)) and in our legitimate interest in letting you securely recover access to what you bought (Art. 6(1)(f)). We keep tax and accounting records to comply with a legal obligation (Art. 6(1)(c)). We process minimal technical logs on the basis of our legitimate interest in a secure, functioning service (Art. 6(1)(f)). We use cookieless, non-identifying analytics to understand and improve the Service in our legitimate interest (Art. 6(1)(f)); it sets no cookies and does not identify you.

5. Who processes data on our behalf

• Hetzner — our hosting/infrastructure provider; the servers run within the EU.
• Stripe — payment processing and Merchant of Record; it handles checkout, payment data and VAT under its own privacy terms. Stripe (via Link) issues your payment receipt.
• Cloudflare — content delivery, DNS and TLS for the Service.
• Plausible Analytics — the cookieless analytics tool behind our aggregate usage statistics; it receives no cookies and no data that identifies you, and the analytics data is processed within the EU.
• SMTP2GO — our transactional and partner-programme email provider; it delivers the account-access link you request and our partner-programme invitations, and reports whether a message was delivered or bounced. The account is configured in SMTP2GO's EU region, so this email data is processed within the EU, under SMTP2GO's Data Processing Agreement.
• Microsoft 365 (Microsoft Ireland Operations Ltd) — hosts our support@sacrednumbers.live mailbox, handling replies to and from support; email is processed within the EU under Microsoft's Data Protection Addendum and the EU Data Boundary.

These providers process data within the EU/EEA or, where a provider (such as Stripe or Cloudflare) processes data outside it, under appropriate safeguards such as the EU Standard Contractual Clauses.

6. Retention

The free reading stores no personal data about you.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict and port your data, and to object to certain processing. To exercise any of these, contact us at the address above. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutettu).

8. International transfers & security

Our transactional email is processed by SMTP2GO in the EU, and our support@ mailbox is hosted by Microsoft 365 (Microsoft Ireland Operations Ltd) within the EU under Microsoft's EU Data Boundary. Where any other processor operates outside the EEA, we rely on appropriate safeguards (such as the EU Standard Contractual Clauses). We take reasonable technical and organisational measures to protect your data.

9. Partner (referrer) programme data

This section applies only if you take part as a partner (referrer) who can earn and be paid commission. It covers the data we process for that purpose; the other sections above continue to apply.

Inviting prospective partners. Before you join, we may send a one-to-one invitation to the public business or creator contact email associated with your channel or site. We use your channel name and that address only to send the invitation and, at most, a single follow-up reminder. You can opt out at any time — reply "no thanks" (or ask us) and we suppress your address permanently and send nothing further. Legal basis: our legitimate interest in reaching relevant businesses and creators about a partnership (Art. 6(1)(f) GDPR); we contact business or creator addresses in a professional capacity, keep volume low, and always offer an immediate opt-out.

Delivery status — and what we do not do. Our email provider (SMTP2GO, section 5) reports whether an invitation was delivered or bounced, and we use that operational status to keep our list clean and stop emailing failing addresses. We do not use open-tracking pixels or click-tracking on these emails, we do not record whether or when you opened a message, and we build no profile of you — consistent with section 3.

What we collect. To pay you and to meet our legal reporting duties we collect and store:

• Contact email — the address on your partner record, used to send you your private partner-page link when you request it.
• Payout details — your IBAN and account-holder name (for SEPA) or your PayPal email, so we can pay your commission. On your partner page these are shown masked (last 4 digits only); the full value is stored securely.
• Partner tax data - your legal name, country, address, tax status (individual, sole trader, or company) and, for a business, your business ID and VAT number where applicable. We collect this before your first payout. We do not collect your date of birth or personal identity code.
• Programme activity — the clicks on your links and the orders attributed to you, and the commission accrued and paid. Clicks are counted in aggregate only: we do not set cookies for click-counting and do not store a visitor's IP address or any personal data against a click.

Legal bases. We process your payout and tax data to perform our contract with you - paying the commission you earned and issuing the settlement document (Art. 6(1)(b) GDPR) - and to comply with our legal obligations under Finnish accounting and tax law, including bookkeeping and self-billing invoice records (Art. 6(1)(c) GDPR). We process aggregate programme activity in our legitimate interest in running and settling the programme (Art. 6(1)(f)).

Who receives it. In addition to the processors listed in section 5, partner data may be disclosed to: the Finnish Tax Administration (Verohallinto) and other authorities where the law requires it; our accountant / bookkeeping provider; and your bank or PayPal, as needed to execute the payout you asked for.

Retention. Your partner tax identity and the settlement amounts are kept for the statutory accounting-record period under Finnish law (currently the current year plus six preceding years) and cannot be deleted on request before that period ends. Payout details you no longer use may be updated or removed by you on your partner page, subject to those record-keeping obligations.

Your rights. Your rights of access, rectification, erasure, restriction, portability and objection (section 7) apply to your partner data too, subject to the legal retention obligations above. You can view and correct your own payout and tax details at any time from your private partner page.