Advanced Tarot Online

Privacy Policy for Advanced Tarot Online (ATO)

Last updated: August 11, 2026

In keeping with our commitment to transparency, below You'll find our Privacy Policy in full. This policy applies to the application as well as web-based version of ATO (the “Services”) operated by ILT Software (Illegal Direct) Piotr Gruszczynski ("us", "we", or "our”). It is meant to help You understand what data we collect, why we collect it, and what we do with it. We ask You to read it thoroughly and contact us if You have any questions. IF YOU DO NOT AGREE WITH THE TERMS OF THIS PRIVACY POLICY, PLEASE DO NOT ACCESS THE SERVICES.

In Summary

Advanced Tarot Online (ATO) is a tool providing a possibility to do automated Tarot readings and interpret the outcome. To give You the best possible experience, we collect and store some certain information that let us tailor the Services best. The transmission of the data is secured with HTTPS and we do our best to secure all data from any third party.

Data We Collect

We collect information to provide better services to You. The information may be collected in the following ways:

  • Information You give us. For example, You may want to sign in with Your Google, Facebook, Apple or e-mail account. When You do so, we’ll use personal information, like Your name or email address in order to better serve Your needs and personalize Your experience.
  • Security. We use bot detection tools on our contact pages. We may collect data including IP addresses, behavioral data, hardware info, and cookie usage to make sure You are human.
  • Analytics and Research. Analytics data let us collect more general information, like device model, OS version. We may also collect more detailed information like: details of how You used the Services, such as the time You spend using the Services, Your IP address, device event information such as crashes, system activity, hardware settings, browser type, browser language, the date and time of Your request and referral URL.
  • Subscriptions and Purchases. When You make a purchase or subscribe to one the plans, You may be asked to share certain personal information in addition to what You have provided upon opening Your account. Additionally, other information may be required to complete the transaction. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processor, Stripe, Google or Apple, depending on the operating system of Your device, and You are encouraged to review their privacy policies and other documents here (Stripe), here (Google), or here (Apple) and contact them directly for responses to Your questions.
  • Emails and messages from You. We'll keep emails or any other kind of communications You send us to be able to assist You and resolve any issue or request as thoroughly as possible.
  • Personalized Advertising. The Services are not intended for children under the age of 18 (and under the age of 19 in the case of the Republic of Korea). We use AdMob from Google to show ads in the free version of the app (excluding premium version) and we use AdSense from Google to show ads in the free web-based version of the Services.
    AdMob collects data and uses a unique identifier on Your device to show relevant ads for You. The personalized advertising is served via the Google Mobile Ads SDK. Google, acting as an independent data controller, may use the advertising ID from Your device to generate interests and demographics and other data to serve better targeted ads to You. You can revoke Your consent for personalized advertising in the app any time by changing ad settings – the link can be found at the bottom of the app's main menu. Alternatively, You can opt out via Google's My Ad Center.
    AdSense uses cookies, IP addresses, web beacons, or other identifiers to serve ads based on a user's prior visits to the Services or other websites and collects information for ad serving. You can opt-out personalized advertising in the web-based version of the Services easily. To do so, withdraw Your consent in ad settings – the link can be found at the bottom of any page serving ads – or visit Google's My Ad Center.
    Learn more about how Google processes personal data in the context of personalized advertising here.
  • Non-personalized Advertising (NPA). You can choose to be served ads not based on Your past behavior in the free version of the app. Still they are targeted using contextual information, including coarse (such as city-level) geo-targeting based on current location, and the app's content.

How We Use the Data We Collect

We use the information we collect from the Services to provide You with a smooth, efficient, and customized experience. Specifically, we may use information collected about You via the Services to: create and manage Your account, email You regarding Your account or order, fulfill and manage purchases, orders, payments, and other transactions related to the Services, increase the efficiency and operation of the Services, prevent fraudulent transactions, monitor and analyze usage and trends to improve Your experience with the Services, notify You of updates, respond to Your requests, give support for the Services and assist law enforcement.

When You contact us, we keep a record of Your communication to help solve any issues You might be facing.

We will ask for Your consent before using information for a purpose other than those that are set out in this Privacy Policy.

Third Party Business Partners

Advanced Tarot Online (ATO) uses third-party vendors, services, and hosting partners, all of whom are GDPR-compliant and provide the necessary safeguards required. We use these third-party services to furnish the necessary hardware, software, networking, storage, and related technology required to run the Services. Although we own the code, databases, and all rights to the Services, You retain all rights to Your data. We will never share Your personal data with a third-party without Your prior authorization, and we will never sell data to third parties.

AdMob allows ads from additional third-party ad technology providers and Google is an independent controller for advertising purposes. Based on Your consent, we share some of Your data with ad technology providers who are allowed to serve and measure ads in the European Economic Area (EEA) and the UK, to support ad delivery, ad measurement, and other functions. In compliance with Google's EU user consent policy a list of all ad technology providers we may share data with can be found in ad settings (use the link at the bottom of the app's main menu) or here.

AdSense also allows ads from additional third-party vendors. Upon Your consent, Google, as an independent controller for advertising purposes, and its partners serve ads to users on the basis of their visits to the Services and/or other websites on the Internet. Your data is shared for the purpose of serving ads, measuring ad performance, personalizing ads, and other features. A list of the third-party ad technology providers/ad partners serving ads through AdSense can be found in ad settings – use the link at the bottom of any page serving ads.

We use reCAPTCHA based on our legitimate interest in security and fraud prevention. Google processes Your data solely as our data processor.

We use Google Analytics to generate reports on the use of the Services. For this purpose, Google Analytics stores tracking identifiers on Your device based on Your voluntary consent. Because this data integrates with our advertising systems, Google Ireland Limited operates here as an independent data controller and utilizes the telemetry to optimize its advertising networks. For more information on how Google processes personal data, please visit this website. You can opt out of the tracking at any time using the Google Analytics Opt-out tool or You can use our Consent Management Platform (CMP) to disable the analytics cookies.

International Transfers of Your Personal Data

The hosting facilities for the Services are situated in Poland and General Data Protection Regulation (GDPR) applies to the processing of personal data. The processing takes place in the European Union but some of these data may be transferred to the countries outside the European Economic Area (EEA). In such case, the transfers outside the European Economic Area (EEA) will be protected by appropriate safeguards, approved by the competent data protection EU authorities.

Retaining And Deleting Personal Data

Personal data that we process for any purpose shall not be kept for longer than it is necessary.

We will retain Your personal data for such reasons: tax and accounting, analytical, legal claims - for a maximum period of 5 years from the date of deleting Your account.

We may also retain Your personal data where such retention is necessary for compliance with a legal obligation to which we are subject, or in order to protect Your vital interests or the vital interests of another natural person.

Your rights under data protection law

Your principal rights under data protection law are:

  • The right to access – You can ask for copies of Your personal data.
  • The right to rectification – You can ask us to rectify inaccurate personal data and to complete incomplete personal data.
  • The right to erasure – You can ask us to erase Your personal data.
  • The right to restrict processing – You can ask us to restrict the processing of Your personal data.
  • The right to object to processing – You can object to the processing of Your personal data.
  • The right to data portability – You can ask that we transfer Your personal data to another organisation or to You.
  • The right to complain to a supervisory authority. You have the right to file an official complaint regarding our data handling with our lead European supervisory authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland).

You may exercise any of Your rights in relation to Your personal data – please, use the contact details below.

Cookies, anonymous identifiers and SDKs

A cookie is a file containing an identifier (a string of letters and numbers) that is sent by a web server and is stored by Your browser. Cookies may not contain any information that personally identify You, but they can inform us about Your certain preferences (for example the Tarot deck You used last time or the language You have selected). If You block cookies in the website version of the Services You will not be able to use all the features of the Services.

We use cookies on our website for the following purposes:

  • Authentication and status. We identify You and know if You are signed in or not.
  • Security. We use _grecaptcha cookie to protect the Services from spam, abuse, and malicious traffic.
  • Personalization. We store information about Your certain preferences.
  • Analysis. We try to analyse the use and performance of the Services. Because our analytics link with our ad networks, the telemetry collected via Google Analytics cookies may also be utilized by Google to optimize and personalize ad units shown to You.
  • Marketing: We use tracking cookies via Google AdSense to serve, measure, and personalize advertisements tailored to Your interests (this applies strictly to the web-based app version of the Services).
  • Cookie consent. We may store Your preferences in relation to the use of cookies more generally.

In compliance with the GDPR (General Data Protection Regulation), users in the EEA (European Economic Area) will see a message asking for their cookie consent.

As formerly stated, the free version of our app features personalized advertising that is implemented through the use of anonymous identifiers or Mobile Ads SDK from Google or cookies (the website version) and the Services are absolutely not intended for children under the age of 18 (and under the age of 19 in the Republic of Korea). In compliance with GDPR (General Data Protection Regulation) and other international laws (e.g. Privacy Act of 1988 in Australia, Data Protection Act in the UK, PIPEDA in Canada, PDPA in Singapore and Malaysia), users in the EEA (European Economic Area) and other areas will see a message asking for their personalised advertising consent. In compliance with the CCPA (California Consumer Privacy Act), we disable data collection for users in California USA who will only see generic ads.

The free version of our app also features non-personalized advertising (NPA). Although non-personalized ads don’t use mobile ad identifiers, cookies, or other identifiers for ad targeting, they do still use mobile ad identifiers, cookies or other identifiers for frequency capping, aggregated ad reporting, and to combat fraud and abuse. Therefore, in compliance with GDPR (General Data Protection Regulation) and other international laws, users will see a message asking for their consent to store technical cookies required for non-personalised advertising delivery and measurement.

The paid version of the app and the website version do not feature any advertising at all.

Changes

We will not reduce Your rights under this Privacy Policy without Your explicit consent. We will post any privacy policy changes on this page and, if the changes are significant, we will provide a more prominent notice (like an email notification or other public communication).

About Us

The Services are owned and operated by ILT Software (Illegal Direct) Piotr Gruszczynski, Al. Waszyngtona 26/42, 03-910 Warsaw, Poland. You are invited to contact us at any time regarding this Privacy Policy. You can contact us by email: [email protected] or by post.

Data Protection Officer

You can contact our Data Protection Officer at [email protected] or via our postal address.