Zoltar.online is a for-fun fortune toy operated by Consulto B.V. ("we", "us").
We try to collect as little about you as possible. This page explains exactly what we do collect, why, and the
rights you have. If anything here is unclear, email us — details at the bottom.
The short version: The site works without giving us anything. We only receive your
email address if you choose to save a fortune, and we use it solely to send you that fortune and
the occasional Zoltar message. We don't sell your data, we don't run ad trackers, and you can leave at any time.
Who is responsible
The data controller is Consulto B.V., a company registered in the Netherlands.
Your email address — only when you submit it via "Save my fortune" or the
"leave your email" prompt.
The fortune text tied to that request — so we can send you the reading you asked to keep.
Your question is not stored on our servers. It is turned into a fortune entirely in your
browser and never sent to us (in this version of the site).
Basic technical logs — when any website loads, our hosting provider automatically processes
standard request data (such as IP address, browser type, and timestamp) to deliver the page and protect against
abuse. We do not use this to build a profile of you.
Why we use it, and our legal basis
To send you your fortune and related Zoltar emails — legal basis: your consent
(GDPR Art. 6(1)(a)), given when you submit your email. We use confirmed (double) opt-in where enabled, so you
also confirm via a link before we send anything.
To keep the site running and secure — legal basis: our legitimate interests
(GDPR Art. 6(1)(f)) in operating a functioning, abuse-resistant website.
We do not use your data for advertising, profiling, or automated decisions that have legal effects.
Who processes it on our behalf
We use a small number of trusted providers ("processors") who handle data only on our instructions:
Mailchimp (Intuit Inc.) — stores your email address and sends the fortune emails.
Cloudflare, Inc. — hosts and delivers the website (CDN) and processes the technical logs above.
These providers may process data on servers outside the European Economic Area (e.g. the United States).
Where that happens, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses
and/or the EU–US Data Privacy Framework.
How long we keep it
Your email stays on our list until you unsubscribe or ask us to delete it, after which it is removed
within a reasonable period.
Technical logs are kept only for a short period for security and troubleshooting, then discarded or anonymised.
Cookies & tracking
This site does not set advertising or analytics cookies, and there is no cross-site tracking. Any storage used is
strictly what's needed for the page to function. That's why you won't see a cookie consent banner — there's nothing
to consent to.
Your rights
Under the GDPR you can, at any time:
Access the personal data we hold about you;
Have it corrected or deleted;
Restrict or object to our processing;
Receive your data in a portable format;
Withdraw your consent — every email we send includes a one-click unsubscribe, and you can also email us.
Zoltar.online is meant for a general audience and is not directed at children under 16. We do not knowingly
collect data from children. If you believe a child has given us their email, contact us and we'll remove it.
Security
We keep secrets (like email-service keys) on the server side only, use encrypted connections (HTTPS), and limit
who and what can access your data. No method of transmission is perfectly secure, but we take reasonable measures
to protect it.
Changes to this policy
If we change how we handle data, we'll update this page and revise the "last updated" date above. Material changes
affecting emails you receive will be communicated to subscribers.
Contact
Questions or requests: privacy@zoltar.online, or write to Consulto B.V.
at the registered address above.