Privacy Policy

Vrachka ("we", "us", "our") is committed to protecting the privacy of your personal information. This privacy policy explains how we collect, use, and protect your data.

The data controller within the meaning of Art. 4(7) GDPR is LEVEL 8 EOOD, UIC 208697165, with its registered office in Varna. Contact for personal data matters: support@vrachka.eu.

We collect the following information when you use our platform:

• Name and email address (upon registration)
• Date and place of birth (for astrological calculations)
• Reading history and platform interactions
• Subscription and payment information
• Technical data (IP address, browser type, device)
• Consent to the emails (time and where it was given; on our site also IP address and browser)
• Consent to the emails after a purchase (email address, time, the text of the tick and the order)

When you open a payment, the site adds notes to your order in Stripe about where you came from. Whatever you chose about cookies, we record:

• the product you are ordering;
• the page of our site you left for the payment, and the order page. We keep only their addresses, without the parameters after them. Long numbers in an address (of a reading, of a payment) are replaced with ":id". Addresses with an email and pages opened with a personal key (unsubscribe, email settings, a prize) are not kept;
• where the link to the order came from (the source and channel of the link, if it has them). We keep only short words, with no email, numbers or long codes.

If you accepted analytics cookies, we also record:

• the source and the campaign of your first visit. They come from the cookie for the first visit (see the Cookie Policy).

If you accepted advertising cookies, we also record:

• the identifiers from Meta's cookies;
• your IP address and browser type.

The advertising records are for measuring our ads. After a paid order we send them to Meta with the amount and your email in coded form, which Meta can match to its own profiles.

The addresses of the pages are not saved on your device. Your browser holds the previous page in memory while you are on the site. It goes to us with the payment request even if you have not accepted cookies.

These records sit in your order in Stripe, next to your email and your profile, so they can be tied to you. We add no card details or birth data to them.

Your information is used to:

• Provide personalized astrological forecasts
• Process payments and manage subscriptions
• Improve our services and user experience
• Communicate about your account and our services
• Counting where orders come from and which pages lead to them
• Measuring our ads on Facebook and Instagram
• Fulfill legal obligations

The product, the pages and the link are recorded so that we can see which pages of the site lead to orders and what to improve. The source and campaign of the first visit have the same purpose. The advertising records serve another one: to see whether our ads on Facebook and Instagram bring orders.

For the product, the pages and the link the legal basis is our legitimate interest (Art. 6(1)(f) GDPR): without them we cannot tell which pages lead to orders. We record only addresses of our own pages and short words from the address, with no email and none of the personal pages, and we keep them in the order, not on your device. For the source and campaign of the first visit the legal basis is your consent to analytics cookies. For the advertising records (Meta's identifiers, the IP address and the browser) it is your consent to advertising cookies (in both cases Art. 6(1)(a) GDPR). Without consent these records are not made.

You can object to the record of the product, the pages and the link (Art. 21 GDPR). Write to us at support@vrachka.eu and tell us which order it is (the email you pay with, and roughly when). We will look at your objection and reply. You can withdraw your consents at any time from "Cookie settings" in the footer. Withdrawing works from then on: the records in an order that has already been placed stay in it.

We use industry-standard security measures to protect your data, including encryption, secure storage, and restricted access. Your information is stored on secure servers with high-level protection.

We do not sell, rent, or share your personal information with third parties, except when necessary to provide our services or when required by law. Third-party processors include:

• Stripe: Payment processing (PCI-DSS compliant)
• Supabase: Database and authentication
• Vercel: Hosting and analytics
• Resend: Transactional and newsletter email delivery
• Google (Gemini), kie.ai: automated generation of the forecast text (anonymized data only)
• AI tools: they help us with sales reports and look at order and payment data for that, only on our instructions and as our processor. Basis: legitimate interest (Art. 6(1)(f) GDPR), so that we can monitor and improve our sales.
• Meta: Ad measurement (only with advertising consent)

You have the right to:

• Access your personal data
• Correct inaccurate data
• Delete your account and data
• Restrict the processing of data
• Object to data processing
• Transfer your data

If you ask us to delete your account while you have a paid order less than 14 days old, we delete it automatically when the 14 days after the purchase end, so that until then you can ask for your money back.

If you believe we process your personal data in breach of the law, you have the right to lodge a complaint with the Bulgarian Commission for Personal Data Protection (www.cpdp.bg).

We use cookies and similar technologies to improve user experience, analyze traffic, and personalize content. You can control cookie usage through your browser settings. For more details, see our Cookie Policy.

If you turn on notifications and allow them in your browser, we store:

• the address at which your browser receives notifications, and the two keys that encrypt the message;
• the type of browser and device;
• the sign you want the horoscope for, and the language;
• your account, if you are signed in.

We send you the daily horoscope for your sign. If you are signed in, we also tell you when your reading is ready and send you your personal offers. Occasionally we send news from Vrachka. The legal basis is your consent (Art. 6(1)(a) GDPR).

The notification passes through your browser's push service: Google, Mozilla, Apple or Microsoft, depending on the browser. The message travels encrypted, and that service cannot read it.

You can turn notifications off at any time in your profile settings or in your browser. If you turn them off, or your browser tells us it no longer accepts them, we delete the record within 30 days. When you delete your account, we delete its notification records with it.

If you subscribe to the weekly horoscope by email, we record:

• your email address;
• the time of your consent and where you gave it;
• your IP address and browser type, when you subscribe on our site.

If you subscribe through a Meta form (Facebook, Instagram), we keep the data Meta passes on with it.

They let us show that the consent is yours (Art. 7(1) GDPR). The legal basis for the emails is your consent (Art. 6(1)(a) GDPR).

You unsubscribe with the link in every email or from your profile. We keep the proof while you are subscribed and for up to three years after you unsubscribe, then we delete it. If you decline, we record only the refusal and its time, so that we do not ask again.

If you tick the box for emails after a purchase at checkout, we record your email address, the time, the text you saw next to the box and which order it was. The consent covers one thing only: a single request for a review, which we send about a week after the purchase. It does not make you a subscriber: you will not receive horoscopes, offers or a newsletter because of it. The emails about the order itself (for example that your reading is ready) are sent without the box.

The legal basis is your consent (Art. 6(1)(a) GDPR), and the record is our proof of it (Art. 7(1)). You withdraw with the link in every email. We keep the record while your profile is active and delete it when you delete your profile.

Under your reading we ask two short questions: whether the reading helped, and whether anything made you hesitate before you paid. You answer with one tap, and only if you want to. We store the answer, the page language, the product and the day, without the time. We don't store your name, email, birth date, profile, or the number of your reading or order. We set no cookie and keep nothing in your browser. We do this under our legitimate interest in improving our readings and pages (Art. 6(1)(f) GDPR). To stop abuse, we accept at most 30 answers an hour from one IP address; we don't keep the address with your answer. We delete each answer after 12 months. Because an answer isn't linked to you, we can't find yours if you ask us to delete it sooner. For questions or objections, write to support@vrachka.eu.

We retain your personal data for as long as your account is active or as needed to provide services. After account deletion, we may retain certain data for up to 90 days for legal and security purposes, then permanently delete it. Payment documents are kept for as long as accounting law requires. If you delete your profile, the emails stop at once, and we keep the proof of consent for up to three years so that we can defend ourselves against a complaint, then we delete it.

The records added to an order are part of the record of the order in Stripe. We do not delete them separately from it: they stay as long as the record itself is kept. This includes the IP address and the browser recorded with advertising consent. Deleting your profile does not remove them, because the order stays for our accounts.

We reserve the right to update this privacy policy at any time. We will notify you of significant changes via email or platform notification.

For questions about this privacy policy, please contact us at: support@vrachka.eu