Privacy Policy

The controller for data processing on arcanapath.net is Reflexions LLC, a Delaware limited liability company (Delaware File No. 7471778), c/o Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA. Contact: hello@arcanapath.net. See also our legal notice.

This website is hosted by Vercel Inc. (San Francisco, USA). When you visit any page, Vercel technically processes your IP address, browser and device information, and the pages you request in order to deliver the site securely and reliably (server logs). We access such logs only for operating and securing the service. Legal basis for visitors from the EU/EEA: legitimate interest (Art. 6(1)(f) GDPR) in providing a secure, functioning website. Log data is retained only for a short period as configured by our host.

If you sign up for our free email course, we process your email address and the signup source to deliver the course and occasional related updates. This happens only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time — every email contains an unsubscribe link, or you can simply write to us. We use Loops (Loops, Inc., USA) as our email service provider to store the address and send the emails. We keep your address until you unsubscribe or ask us to delete it.

The 3-card reading tool runs entirely in your browser. Your draws — which cards appear, and any question you hold in mind — are never transmitted to, seen by, or stored on our servers.

If you email us, we process your address and the content of your message to respond (Art. 6(1)(b) and (f) GDPR). We keep correspondence only as long as needed to handle your request and any follow-ups, or as required by law.

We currently set no cookies, use no analytics tools, and serve no advertising or third-party trackers. If this ever changes, we will update this policy first and, where required, ask for your consent.

Our service providers (Vercel, Loops) are based in the United States. Where personal data of EU/EEA visitors is transferred to the US, providers rely on recognized safeguards such as the EU–U.S. Data Privacy Framework and/or Standard Contractual Clauses.

If you are in the EU/EEA (and in many other jurisdictions), you have the right to:

• access the personal data we hold about you (Art. 15 GDPR),
• have inaccurate data corrected (Art. 16),
• have your data deleted (Art. 17),
• restrict processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw any consent at any time, with effect for the future,
• lodge a complaint with a data protection supervisory authority.

To exercise any of these rights, email hello@arcanapath.net.

We do not sell personal data, do not use it for automated decision-making or profiling, and do not direct this website at children under 16. We may update this policy as the site evolves — the date above always reflects the current version.