Privacy notice
In effect since 10 September 2026
This notice explains what personal data we process, why, who we share it with and how you can control it. The controller lives in Serbia, so processing is governed by Serbian data protection law, which is aligned with the European GDPR. The rights described below are the equivalent of Mexico's ARCO rights and we honour them the same way, wherever you live.
01Who is responsible for your data
Bogdan Jovanovic, an individual based in Belgrade, Serbia, is the controller of your personal data.
For anything to do with privacy, write to lunariatarotmexico@gmail.com.
02What data we collect
We only ask for what the reading needs, and it varies by type:
Daily horoscope: your zodiac sign.
Natal chart: your date, time and place of birth.
Love compatibility: two names or nicknames and two dates of birth.
Dream interpretation: the dream text you write and, optionally, a question.
Tarot: the cards you picked and, optionally, a question.
We also store your reading's identifier, the language, the generated text, the payment identifier and status returned by the provider, and — if you bought a follow-up pack — those questions and their answers.
We do not ask for your full name, address, phone number or email address in order to buy. We never receive or store your card details.
03Sensitive data
We do not ask for sensitive personal data, and we ask you not to include information about your health, your sex life, your religious beliefs or your political views when describing a dream or writing a question.
If you include it anyway, that text is treated like the rest: it is used to generate your reading and kept alongside it.
04What we use your data for
Necessary purposes, without which we cannot provide the service: generating and delivering the reading you bought; processing payment and, where applicable, refunds; answering your follow-up questions; handling questions and complaints; and meeting legal, tax and accounting obligations.
Additional purposes, which you may refuse without any effect on your purchase or on the content of your reading: measuring use of the site and the performance of our advertising.
We do not sell your personal data.
05How you can limit the use of your data
The additional purposes depend on your consent and are switched off by default. If you do not give it, no measurement or advertising tools load and no information about you is sent to any ad platform.
You can change your mind at any time from the “Privacy preferences” link at the foot of any page.
06Cookies and similar technologies
Before you choose, the site sets no cookies at all.
When you choose, we store your decision in a cookie named consent.v1 and in your browser's local storage. It is strictly necessary, contains no identifier for you, and lasts six months.
If you accept everything, Meta Pixel and Google Analytics 4 load and set their own cookies (for example _fbp, _fbc, _ga and _gid) to measure visits and conversions. Only in that case do we also record your IP address, your browser details and the page you arrived from.
If you choose essential only, none of that happens and your IP address is not stored.
07Who we share your data with
Providers processing data on our behalf and on our instructions: the artificial intelligence provider that generates the text (Anthropic, in the United States); the hosting and database provider; and, for the natal chart, a geocoding service that turns a birthplace into coordinates.
Transfers that depend on your consent: Meta Platforms and Google, for measurement and advertising, only if you accepted.
We may also disclose data where a competent authority lawfully requires it.
Some of these providers are outside Mexico. By using the service you accept that processing on the terms of this notice.
Dodo Payments processes the payment as merchant of record for the sale. It handles your payment data as its own controller and under its own privacy notice, not ours; we never receive your card details.
08How long we keep your data
We keep your reading and the details it was generated from for 24 months, so that you can reopen your link and so that we can deal with a complaint.
Payment records are kept for as long as tax law requires.
You can ask us to delete your reading before that period ends by writing to lunariatarotmexico@gmail.com with the link: deletion is immediate and permanent.
09Your ARCO rights
You have the right to access your personal data, to rectify it if it is inaccurate, to cancel it where you believe it is not needed, and to object to its use for specific purposes. You may also withdraw your consent at any time.
To exercise any of these, write to lunariatarotmexico@gmail.com saying which right you want to exercise and giving the link or identifier of the reading concerned. That link is what lets us find your data without having to ask you for more personal information.
We will respond within twenty business days at the latest.
If you believe your right was not honoured, you may complain to Serbia's data protection authority (Poverenik za informacije od javnog značaja i zaštitu podataka o ličnosti), which supervises the controller, or to the authority in your country of residence.
10Security
We apply reasonable technical and organisational measures to protect your data. No system is infallible: if a breach occurs that significantly affects your rights, we will tell you.
11Minors
The service is for adults over 18 and we do not knowingly collect data from minors. If we find that we have, we will delete it.
12Changes to this notice
We may update this notice. The version in force, with its date, is always published on this page. If a change is substantial we will announce it on the site.

