Privacy Policy

Effective date: 10 September 2026. This notice covers tarotfalcim.com. The former community forum at forum.tarotfalcim.com closed on 28 October 2026; the forum sections below describe how forum data was handled while it operated.

Who is responsible and how to contact us

APP SKIES SOFTWARE LTD operates Tarotfalcim and determines how personal data is used. Our correspondence address is Salih Kanat Sk., Özlem Apt. D:2, Girne/KKTC, Mersin 10, Türkiye. For privacy requests, account help or complaints, email appskiesltd@gmail.com with “Tarotfalcim privacy” in the subject. This is a private contact route; do not post a request containing personal information on the public forum.

Free readings in your browser

The free website tools use a public card dataset. Your card selections, reading focus and zodiac choices are processed in page memory. These tools do not ask for your name, email, birth date, location or a free-text question; they do not send your selections to an AI provider, put them in the URL or save them in local storage. Closing or resetting the page clears the reading. Card of the Day uses your device’s local date. Copying or printing a result happens only when you choose it.

Information we receive and why

• Website and security requests: visiting a page sends technical information such as your IP address, browser details, requested URL and time to our hosting services. We use it to serve pages, investigate faults, prevent abuse and protect the service.
• Forum accounts: registration collects your email address, username and password, which Discourse stores in a protected hashed form. Optional profile information, posts, uploads, likes, reading activity, preferences, login IP addresses and moderation records are stored when you use those functions. Your email and password are not shown on your public profile.
• Public contributions: public posts, usernames, profile information you choose to publish and attachments can be read, indexed, copied and shared by other people and search engines worldwide. Do not publish sensitive information, private contact details or another person’s personal data. Deleting content here cannot remove copies independently held by others.
• Private messages and reports: where available, these are stored on the forum and visible to their recipients. Authorized staff may access them for account support, reports, safety investigations or legal obligations. They are not an end-to-end encrypted confidential advice service.
• Service emails: we send account verification, password-reset and requested forum notifications. Brevo processes the recipient address, message content and delivery/bounce information to deliver them. Forum email preferences control optional notifications. Essential account and security messages are separate from marketing.
• Support: contacting us provides your email address, message and any attachments you choose to send. We use these to handle your request and keep a necessary record of its outcome. Never send a password, reset link or identity document unless a proportionate verification step has first been agreed.

Grounds for processing

Information is collected electronically through your browser, registration and forum forms, email and automated server logs. Where the applicable law requires a legal basis, necessary account operation, requested communications and support rely on providing the service you request. Service security, abuse prevention and continuity rely on our legitimate interests, balanced against your rights. We process information when required to meet a legal obligation. Optional cookies and any future identifiable email engagement tracking require a separate consent choice. Reading this notice or creating an account does not give marketing or optional-tracking consent. You may withdraw consent without affecting earlier lawful processing.

You can read the public library without registering. An email address and the required account fields are needed to create and recover a forum account; if you do not provide them, you can continue using public pages.

Cookies, email tracking and AI

The website’s optional statistics and marketing categories start off. No advertising or analytics tags are enabled in the current release. See Cookies and preferences for necessary storage and forum differences. Brevo’s anonymous transactional email reporting is enabled. Brevo still inserts pixels and redirects into HTML messages and processes technical requests when they load; according to its documentation, future open/click events are reported without identifying the recipient. Aggregate statistics and identifiable delivery/bounce records remain. This is anonymized reporting, not a claim that emails contain no tracking technology. We do not use these events for advertising, recipient profiling or marketing follow-up.

The educational library was developed with AI assistance. The free reading tools do not make live AI requests. AI Guide topics are prepared and reviewed with OpenAI Codex using editorial instructions, then published in limited batches initiated by the operator. This original-content workflow does not submit forum members’ posts, profiles, private messages or email addresses to Codex and does not automatically reply to members. The separate background generation engine remains disabled. The publisher stores the reviewed content, review receipt, destination and delivery state to prevent duplicate or unreviewed publication. See AI Guides & Transparency for limits and reporting controls. We do not use these tools to make decisions with legal or similarly significant effects about you.

Services and international processing

Our service uses Namecheap for the website, DNS and domain mail; Hetzner for the self-hosted Discourse forum; and Brevo for transactional email delivery. WordPress, LiteSpeed, Wordfence and Complianz provide website, caching, security and consent functions. UpdraftPlus is installed, but an external backup destination is not configured. Forum default avatars are generated locally; external Gravatar lookups are disabled. OpenAI Codex supports the original-content editorial workflow described above. Staff use Google Gmail to receive the messages you send to our published contact address. These providers receive the information needed for their roles; authorized staff and authorities may also receive information where necessary for a request, security incident or legal obligation.

These operations involve processing outside Northern Cyprus and may involve countries outside your country of residence. Namecheap describes US processing; Hetzner and Brevo are European providers, with infrastructure and support arrangements described in their current policies. Google processes support mail through its international infrastructure. A provider’s incorporation address alone does not establish that every processing operation stays in that country. Public forum content is accessible worldwide.

For provider details, see Namecheap’s processing terms, Hetzner’s privacy information, Brevo’s privacy information and Google’s privacy information. Contact us for information about safeguards applicable to your data. This notice does not ask you to waive local rights or treat continued browsing as consent to international transfers.

How long information is kept

• Reading selections: until the page is reset or closed; a copy or printout you create remains under your control.
• Website consent choices: up to 180 days, unless you change or clear them earlier.
• Accounts and public posts: while the account or contribution serves its community purpose, subject to deletion requests, moderation needs and legal obligations. Inactive confirmed accounts do not currently expire automatically. Unactivated accounts are eligible for automatic cleanup after 14 days.
• Email records: Discourse delivery logs are configured for 90 days; Brevo delivery logs for one month. Brevo is configured not to store previews of newly sent messages. Suppression records may remain while needed to avoid repeat bounces or unwanted delivery.
• Forum backups: the schedule is weekly with up to five backup files retained. This is a count-based rotation, not a promise that every copy is erased after exactly five weeks. Deleted uploads have a 30-day purge grace period. Deletion from live data and expiry from backups happen separately.
• Security logs and support records: retained for diagnosing faults, resolving the request, handling abuse or a dispute, or meeting a legal duty. The applicable incident, request, provider rotation and legal obligation determine the period. We review continued need when closing a request or incident and limit access to retained records.

Your rights and requests

Depending on the law that applies, you may request information about processing, a copy of your data, correction, deletion, restriction or portability, and may object to processing or withdraw consent. Under Türkiye’s KVKK, where applicable, this also includes asking about recipients and overseas transfers, asking for corrections or deletions to be communicated to recipients, objecting to an adverse result from exclusively automated analysis, and seeking compensation for unlawful processing. Rights can be subject to lawful exceptions; we will explain any refusal and available complaint route.

Email the contact above, identify the relevant account and describe the request. We may ask you to confirm control of the account or email address before disclosing or changing information. We aim to respond within one month and will meet any shorter applicable deadline; if a lawful extension is needed, we will explain it. Forum export and account settings may also help you access information, but you can contact us even if a self-service option is unavailable.

You may complain to the relevant authority, including the Northern Cyprus Personal Data Protection Board, Türkiye’s Personal Data Protection Authority, the UK Information Commissioner’s Office or the competent EEA supervisory authority, where their laws apply. This does not limit other remedies available to you.

Children and changes

The forum is for people aged 18 and over. We do not knowingly invite children to register or submit personal information. Contact us if a child has created an account so we can investigate and take appropriate action. We will date changes to this notice and communicate material changes through the website or forum as appropriate.