Zorya · legal
Privacy Policy
What Zorya collects, why, and how to delete it. Short on purpose.
Last updated August 28, 2026
The short version
- You can draw a card without an account, and without telling us anything about yourself.
- If you sign in, we keep your readings so your journal works. Nothing else is done with them.
- We never sell your data and never use it to advertise to you.
- Analytics is off until you agree, and you can withdraw at any time.
- You can delete everything yourself, from Settings, at any moment.
Who runs Zorya
Zorya is an independent studio based in Ukraine, and is the data controller for everything described here.
All contact — questions, privacy requests, anything legal — goes through the support address below. Registered business details are available on request.
support@zoryatarot.comWhat we collect, and why
Everything below is either something you gave us or something the app had to record in order to work. Nothing is collected in case it turns out to be useful later.
| What | Why |
|---|---|
| Your email address and display name, when you sign in — plus a securely hashed password, if you choose to sign in with one | To create your account and recognise you when you return |
| Your readings: which spread, which cards came up and which way up, the question you typed if you typed one, and the date | So your journal, your streak and your card statistics work |
| The readings written for you | So you can reopen one later |
| A daily count of how many draws and readings you have used | To apply the free daily allowance fairly and prevent abuse |
| Your settings: language, whether reversed cards may appear, and — only if you switch reminders on — the hour you chose and your timezone | To draw your cards the way you asked, and to send a reminder at the right hour where you actually are |
| Purchases and Star balance: what was bought, when, the amount and currency | To give you what you paid for, and to keep the tax records the law requires |
| Usage analytics: which screens are opened, which spreads are drawn | To understand what people actually use, and what to fix |
| A count of page views, and ordinary server logs | To know how much traffic the site gets, and to keep it running and secure |
What allows us to do this
Most of it is simply what running the service requires: without your account and your readings there is no journal. Usage counts, traffic figures and keeping the site secure rest on our legitimate interest in operating a working, fair service. Purchase records are kept because tax law obliges us to. Analytics rests on your consent alone, which is why it does nothing until you say yes.
About the questions you type
The question box is free text, and it is the most personal thing on this site. If you type a question it is stored with your reading, and it is sent to the service that writes the interpretation.
Please do not type anything you would not want stored — health details, another person's private information, or anything you would call a secret. A question can be as vague as you like and the reading still works, and you can draw without one at all.
How readings are written
Interpretations are written by an AI service we use as a supplier. It receives the cards, the question if you typed one, and the language to answer in. It does not receive your name, your email or anything that identifies you, and it does not use your text to train its models.
Readings are for reflection and entertainment. No decision about you is ever made automatically.
Emails we send
Some emails are part of having an account and cannot be switched off: confirming your address, resetting your password, and anything we must tell you about a purchase. We do not send marketing email.
The daily reminder is separate and entirely yours to choose. It is off unless you switch it on in Settings, it goes only to the hour you picked, and it is never sent on a day you have already drawn a card. If you stop visiting it quietly steps down to weekly and then monthly rather than arriving every day. Every reminder carries a one-click link that turns it off without signing in, and you can switch it off in Settings at any time.
Email is delivered for us by a specialist email supplier. It receives your address and the message itself, so that it can hand the mail to your provider. It does not receive your readings, your questions or your journal, and it is not permitted to use your address for anything but delivering our mail.
Data leaving Europe
Your account and your readings are stored in the European Union. Some suppliers operate from outside it, so certain data reaches them there. Those transfers rely on the safeguards recognised under EU law, such as Standard Contractual Clauses.
How long we keep it
- Your account, readings and interpretations: until you delete them. We do not expire them on a timer.
- Purchase records: kept for as long as tax and accounting law requires, even after you delete your account — but stripped of any link to you.
- Analytics: held for a limited period by our analytics provider, tied to a random id rather than to your name.
Deleting everything
Settings has a Delete all my data button. It removes your account, every reading and interpretation, your settings, your Star balance and your usage history, immediately and permanently. There is no recovery and no waiting period, so be sure before you confirm.
Two things survive, and only these: records of anything you bought, which tax law requires us to keep and which we disconnect from you in the process, and any unused paid time or Stars, which are forfeited rather than refunded.
Manage your analytics choiceYour rights
If you are in the EU or the UK the GDPR gives you the rights below. We extend them to everyone, wherever you are.
- See what we hold about you, and get a copy.
- Correct anything that is wrong.
- Have it deleted.
- Take it elsewhere in a machine-readable form.
- Object to, or ask us to restrict, what we do with it.
- Withdraw your consent to analytics at any time, in Settings.
- Complain to your national data protection authority if you think we have got this wrong.
How it is kept safe
Traffic to the site is encrypted, access to stored data is restricted to your own account, and we hold no payment card details at any point.
Children
Zorya is not intended for anyone under 16, and we do not knowingly collect data from children. If you believe a child has an account here, write to us and we will remove it.
Changes to this policy
If what we collect changes, this page changes with it and the date at the top moves. Significant changes will be announced in the app.
Zorya is an entertainment and reflection service. Readings are not medical, legal, financial or psychological advice.