Soulmate

Privacy Policy

The short version: we never store your birth data. Searches are computed in memory and immediately discarded. There is no user account, no tracking cookies, and no analytics that identify you.

Controller

Responsible under the GDPR (Art. 4 No. 7): Arvin Zatulovsky, c/o POSTFLEX PFX-219-321, Emsdettener Straße 10, 48268 Greven, Deutschland, [email protected] (see Impressum).

What is processed, by whom, and on what legal basis

• Birth details you enter (date, time, place) are used only to compute your results, in memory, on our server (hosted by Railway as our infrastructure processor). They are not written to any database or log and are discarded after the response. Legal basis: performance of the service you request (Art. 6(1)(b) GDPR).
• City search uses the Open-Meteo geocoding API directly from your browser to convert a city name to coordinates; we never receive or relay it.
• IP address & server logs: when you visit, your IP address is processed because it is technically necessary to deliver the site — by our hosting provider Railway (short-lived server/access logs for security and error diagnosis), by Cloudflare (DNS/proxy in front of the site), and by our in-memory rate limiter that protects the service against abuse. Rate-limit counters are never written to disk and are never linked to your birth details. Legal basis: legitimate interest in a secure, working service (Art. 6(1)(f) GDPR).
• Abuse protection: Cloudflare Turnstile may process technical browser signals (processor: Cloudflare) to distinguish humans from bots — no advertising cookies, no cross-site tracking. Legal basis: legitimate interest in protecting the service (Art. 6(1)(f)).

In short: no accounts, no stored birth data, no payment data, no tracking, and no cookies requiring consent. The only personal data processed is your IP address — transiently, because it is technically required to deliver and protect the site.

International transfers

This site is hosted with Railway in the EU (Amsterdam region). Some of our processors are US companies — Railway, Inc. and Cloudflare, Inc. — so limited technical data (such as IP addresses) may reach the United States. These transfers are safeguarded by the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses (Art. 45/46 GDPR).

Retention

Birth data: not retained (in-memory only). IP addresses: in-memory rate-limit counters (lost on restart) and short-lived infrastructure logs at our hosting provider.

Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection (Art. 15–21 GDPR), and the right to withdraw consent at any time. Since we keep no personal data beyond transient technical processing, there is typically nothing to access or erase — for any question, email [email protected]. You may also complain to a data protection supervisory authority (Art. 77 GDPR).