Privacy policy

Who is responsible for this site

T4rot is operated by Callbit Serviços de Tecnologia Ltda, a company registered in Brazil under CNPJ no. 67.046.281/0001-94 — the data controller, in the vocabulary of the LGPD and the GDPR.

For anything concerning your data — access, correction, deletion, a question — write to [email protected], and the answer goes back to the address you wrote from.

What we collect

What you type on screen: the question you ask the oracle and, in the oracles that require it, the name you give and your birth data (date, time and city). Without those there is no calculation and no reading.

A technical access log: IP address, browser, page requested, timestamp and response code. It is what lets us see the service is up and spot abuse — someone firing off thousands of readings, for instance.

Alongside it, where the visit came from, when there is such a thing: the campaign of the link you clicked (the utm_ parameters) or the domain of the site that sent you. It is a closed list of fields, never the full address, and it answers one question: of those who arrive, how many use the oracle? Typing the address directly produces none of it.

Preferences that stay on your device: the language you chose and the last sign you looked up. They never leave your browser.

There is no account, no password, no profile, no mandatory email address and no way for us to recognise you from one visit to the next.

What we use it for

To generate your reading and keep it reachable at the secret address you receive; to run the service safely; and to count, in aggregate, how many readings were made — how many, never by whom.

None of it is used for advertising, we build no behavioural profile, and we neither sell nor rent data to anyone.

Who else touches this data

Google (Gemini): the content of your reading — your question and what was drawn or calculated — is sent to Google’s API so the interpretation can be written. It is the only transfer of content to a third party, and it is what makes the product exist.

Cloudflare: delivers the site and protects it from attack; your traffic, IP address included, passes through it.

InfinitePay: when payment is enabled, checkout happens on their domain. Card or Pix details are typed there and never reach our servers — we only get back the confirmation that a given order was paid.

Beyond that, we hand over data only where the law requires, and only as far as it requires.

How long it is kept

A reading is kept for as long as the service exists, so your link keeps opening. If you want yours deleted, write to us with the link (or the order code) and it is removed.

The technical access log is kept for up to 14 days and then discarded.

Your rights

Brazil’s LGPD (Law 13.709/2018) grants you the right to confirm whether we process any data of yours, access it, correct it, request deletion, request portability and know who it was shared with. If you are in the European Union, the GDPR grants you equivalent rights.

To exercise any of them, write to [email protected]. We answer within 15 days.

The legal basis

Processing your question and birth data rests on performing the service you asked for. The access log rests on the legitimate interest of keeping the service running and free of abuse.

Security — and one precaution that is yours

Traffic is encrypted, and a reading can only be reached through a long, secret address that appears in no search engine and no listing.

The honest consequence: whoever holds the link sees the reading. Think twice before passing it on, because there is no password behind it.

Minors

The service is intended for people aged 18 or over and does not knowingly collect data from children.

Changes to this policy

If the service changes — a new provider, a new feature — this text changes with it and the date at the top moves up. The version published here is the one that applies.