Privacy Policy
Version of 12.10.2026
1. Controller
Marina Schmidt, self-employed (professional income tax regime, Russian Federation), INN 772595354106. Contact for data protection requests: mysteriavitar@gmail.com. Website: ostrowa.com, Telegram bot: @ostrow_pokoya_bot.
This policy complies with Russian Federal Law No. 152-FZ "On Personal Data" and, for users in the EU/EEA, with Regulation (EU) 2016/679 (GDPR).
2. Data we process
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Handling reading requests and providing services | name, email, contact (Telegram or phone), date of birth, request text, chosen service and currency | consent (Art. 6(1)(a)); contract (Art. 6(1)(b)) | 3 years after the service or until consent is withdrawn |
| Chakra calculator | date of birth | consent | not stored on the server; kept in your browser's localStorage until you clear it |
| Telegram bot and daily personal forecast | Telegram ID, username, profile name, language, entered name, date of birth, city/time zone, consent records, dialogue step, channel subscription status, source tag, activity log in the bot | consent | until consent is withdrawn + 30 days |
| Promotional messages (e.g. VIP group offers) | Telegram ID, language | separate consent | until withdrawn |
| Website statistics | IP address, country and city derived from IP, pages visited, device and browser type, random visitor ID | consent (cookie banner) | 12 months |
| Admin panel security | IP address and time of login attempts | legitimate interest (Art. 6(1)(f)) | 12 months |
| Replies to social media messages and comments (including keyword auto-replies by direct message) | name/handle and ID on the platform, message text | consent | 12 months |
| Payments | email, amount, order number (card data is handled only by the payment provider) | contract; legal obligation | 5 years (tax law) |
We do not process special categories of data (health, beliefs, etc.) or biometric data. Please do not include such information in your request. No decisions with legal effect are made solely by automated means: forecasts are for information only.
3. Storage location
Personal data of Russian citizens is recorded and stored in databases located in the Russian Federation (Moscow). A backup copy is kept on a server in Frankfurt am Main, Germany (provider Aeza). For users in the EU, Russia is a third country without an adequacy decision; the transfer is based on your explicit consent (Art. 49(1)(a) GDPR) and is necessary to provide the service you requested (Art. 49(1)(b)).
4. Recipients
Hosting providers (Russia, Germany); Telegram (inherent to using the bot); YooKassa and Stripe (email and amount for payment); the Russian Federal Tax Service via the "Moy Nalog" app (receipts where required by law). We do not sell data. Google Gemini is used to draft public social media texts; no client personal data is sent to it.
5. Cookies and localStorage
We use essential cookies (admin panel, spam protection for the form) and localStorage (a random visitor ID for our own statistics, and the date of birth saved in the calculator). No advertising or third-party analytics cookies. The statistics ID is stored only after you accept in the banner.
6. Your rights
You may request access to, correction, restriction or erasure of your data; withdraw consent at any time without affecting earlier processing; object to marketing; receive your data in a portable format; and complain to a supervisory authority (in Russia: Roskomnadzor; in the EU: the authority of your country of residence).
How: bot commands /unsubscribe, /stop, /revoke, /delete, /mydata, or email mysteriavitar@gmail.com. We reply within 10 working days (and in any case within one month for EU users).
7. Security
Access is limited to the controller and contracted server administrators; HTTPS encryption; password-protected admin panel with login logging; separate backups. Data breaches are reported to the competent authorities within the deadlines required by law (Roskomnadzor: 24/72 hours; EU: 72 hours).
8. Age
Our services are intended for persons aged 18 and over.
9. Changes
The current version is always available at ostrowa.com/en/privacy/. Bot users are notified of material changes in the bot.