Privacy policy

Effective date: 2026-10-26

This policy explains what personal data distoria.shop (the "Site") handles, why, where it is kept, for how long, and the rights you have over it. We wrote it to be read: if anything is unclear, write to us.

In short: we collect only what a reading or an order needs. Birth details and orders are stored encrypted. We do not track you, use no analytics and no advertising, and we never sell or share your data.

1. Who we are

The controller of your personal data is Keykibotos Pte. Ltd., a company incorporated in Singapore (UEN 202647762W), registered office 110 ROBINSON ROAD, #08-00, ERH BUILDING, Singapore 068901 ("DISTORIA", "we", "us").

• Data Protection Officer: Ghazi Abdelhamid BEN AHMED, the company’s founder, hello@distoria.shop
• Representative in the European Union (Article 27 GDPR): Ghazi Abdelhamid BEN AHMED, Paris, France

2. What we handle, and why

What	When	Why	Legal basis (GDPR)
The birth details you type for a reading: date, and if you give them time, place, time zone, name (and the name you're known by), gender	Each time you ask for a reading	To calculate it. A reading without an account is calculated and sent back to you, and not stored	Your request (contract, Art. 6(1)(b))
Your account: email address, password (stored only as a salted hash, never readable), whether your email is confirmed, the dates it was created and changed	When you create an account	To let you sign in, keep your readings and orders, and send you what you ask for (a link to confirm your email or reset your password) and the emails about your orders	Contract, Art. 6(1)(b)
Signing in with Google, if you choose "Continue with Google": your email address, that Google has confirmed it, and the number Google uses for your account with us	When you choose it	To let you sign in without a password. We ask Google for nothing else: not your name, not your photo, and no access to your Google account. We keep none of the keys Google sends with your answer	Contract, Art. 6(1)(b)
Signing in with Apple, if you choose "Continue with Apple": your email address, or the address Apple makes for us if you choose to hide yours, that Apple has confirmed it, and the number Apple uses for your account with us	When you choose it	To let you sign in without a password. We ask Apple for nothing else: not your name. We keep none of the keys Apple sends with your answer. An address Apple makes for you forwards our emails to you until you turn it off in your Apple Account	Contract, Art. 6(1)(b)
Passkeys, if you add one on the account page: its public key (the private key never leaves your device), its identifier, the name it shows (yours, or its maker's such as "iCloud Keychain"), a counter, the kind of device, whether it is synced, how it connects, its maker's model number, and the date. Your device labels the passkey with your email address, and your password manager may sync it to your other devices through Apple, Google or the manager's own service, under their terms	When you add one	To let you sign in with your device's lock, without a password	Contract, Art. 6(1)(b)
Sessions: a random token in a cookie, and when it expires	When you sign in	To keep you signed in. We store neither your IP address nor your browser's details with it	Contract, Art. 6(1)(b)
Saved profiles: the birth details of the people you save, and a label you choose (for example "Mum")	When you save a profile	To give you their readings again. The birth details are encrypted; the label is not, so please do not put anything sensitive in it	Your own: contract, Art. 6(1)(b). Someone else's: legitimate interest, Art. 6(1)(f), yours in keeping their reading and ours in providing it
Orders: the moment on the cards (date, time, place, names), the cards and options chosen, a dedication, a gift card's recipient, the shipping address of a print, the price and status	When you order	To make, deliver and support your order, and to email you about it: a confirmation that repeats the moment and the options as you gave them, with the terms you accepted attached, then when it is paid, ready and shipped. Everything but the price, status and dates is encrypted on our servers	Yours: contract, Art. 6(1)(b). The people named on the cards: legitimate interest, Art. 6(1)(f), limited to what the cards print
An online payment: our payment provider's reference for it, the amount, whether it was paid, and the reference of the payment; never your card, your name or your email as you gave them there (section 3)	When you choose "Pay"	To mark your order paid, and to match a refund or a dispute to it	Contract, Art. 6(1)(b)
The record of a paid order: its number, offer, price, status and dates, with nothing else	When a paid order is deleted	To keep the accounting records Singapore's company and tax laws require	Legal obligation, Art. 6(1)(c)
Shared readings: a reading you choose to share, without your birth details	When you create a share link	To show it to whoever has the link	Your request, Art. 6(1)(b)
Technical data: your IP address, briefly, in memory	Each request	To protect the Site from abuse by limiting how many requests one address can make. It is not written to disk, and our logs record only the page asked for and the answer, never your IP address or email	Legitimate interest in the Site's security, Art. 6(1)(f)
Your messages: what you send through the contact form, your email address and, if you give it, your name and an order number. The message, your name and your address are encrypted on our servers; a copy reaches our mailbox (section 3)	When you write to us	To answer you	Legitimate interest, or contract when it concerns an order

What we do not do: we do not track you across sites, and use no analytics, no advertising, no social-media plug-ins and no profiling. The "Continue with Google" and "Continue with Apple" buttons are our own: no page loads anything from Google or Apple, and neither learns anything unless you click its button. We make no automated decision about you with legal or similar effects. We do not sell or share your personal data, as those words are defined in California law or any other.

The contact form's check. Before your message is sent, your browser spends about a second on a calculation our server sets, to show it is not a program sending in bulk. It carries nothing about you, uses no cookie and nothing from another company, and is not kept.

Card verification. Each card has a number anyone can check at distoria.shop/verify. The register behind it holds no name, no birth details and no place: only the date the card was made, which cards it holds, the calculation version and a fingerprint of each reading's figures. Checking a number sends it to us in the body of a request, never in a web address, and we keep neither the number nor the details you type.

We do not ask for special categories of data (health, beliefs and the like). Please do not enter them in a name, label or dedication.

The people you name. When you save someone's details, or put them on a card, we have only what you give us, and we do not write to them: telling each of them would be disproportionate (Article 14(5)(b) GDPR). Please give us only what they would expect you to share, and tell them if you think they would want to know.

The Site is not directed to people in mainland China.

3. Where your data is kept, and who receives it

Your data is kept on servers of Hetzner Online GmbH in Falkenstein, Germany, in the European Union, and in the daily backups Hetzner makes of them. Hetzner hosts the Site for us under a data processing agreement: it may use the data only to host it, never for its own purposes, and may not look at it. The details we mark as encrypted in section 2 are stored that way: in a copy of our database, they are unreadable without our keys.

Our team, in Singapore, can access the data needed to make and support orders. Singapore is not covered by an adequacy decision of the European Commission; we protect the data with encryption, access limited to what each task needs, and the obligations of the Singapore Personal Data Protection Act 2012.

Our email provider, Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland, holds our mailbox and sends our emails: the emails you ask for (a link to confirm your email address or to reset your password), the emails about your orders (the confirmation repeats the moment and the options as you gave them, and carries the terms you accepted), our answers, and a copy of each message you send through the contact form, with your name and email address, so that we can read and answer it; and, for our own eyes, a note of each new order and of each payment we must look at, by order number and amount only. It stores them in Switzerland, a country the European Commission recognises as protecting personal data adequately. We send plain-text emails with no tracking: the links are our own, and nobody records whether you opened one. We delete a message from the mailbox when we delete it from our servers, and our copy of an order's emails when the order is deleted, under section 4.

Each receives only what its task needs, under a contract that forbids any other use. We will update this section, and tell account holders, before a new one starts.

Our payment provider, Link, the merchant of record service of Stripe, when you pay online (terms, section 4). You give your card, your email address and your billing country to Link, on its own page, and Link acts for itself as the seller of record of the payment, as its own controller, under its own privacy policy (link.com/privacy), not as our processor. We send it only our order number and the amount; it tells us whether the order is paid, and the reference of the payment, and never your card details. Stripe, which runs Link, processes the payment from the United States, the European Union, Canada, Singapore or Australia, under its own safeguards for transfers.

Google, if you choose "Continue with Google". You then sign in at Google, under Google's own privacy policy, and Google learns that you are signing in to DISTORIA. Google acts for itself here, as its own controller, not as our processor. We send Google nothing about you; it sends us only what section 2 lists.

Apple, if you choose "Continue with Apple", on the same terms: you sign in at Apple, under Apple's own privacy policy; Apple acts for itself, as its own controller, not as our processor; we send Apple nothing about you, and it sends us only what section 2 lists.

We disclose personal data to authorities only when the law requires it.

For users in the Republic of Korea: data stored outside Korea

Under Article 28-8 of Korea's Personal Information Protection Act, here is each transfer of your data outside Korea, which our contract with you needs:

What	To whom, and how to reach them	Where	When and how	Why, and for how long
Everything in section 2 that we keep	Hetzner Online GmbH, Industriestrasse 25, 91710 Gunzenhausen, Germany	Germany	Each time you use the Site, over an encrypted connection	To host the Site and its data, for the periods in section 4
Your email address and the text of an email you ask for or send us; the emails about your orders, the confirmation with the moment and the options you gave and the terms you accepted; a copy of your contact form message, with your name	Proton AG, Route de la Galaise 32, 1228 Plan-les-Ouates, Geneva, Switzerland	Switzerland	When an email is sent or a message reaches us, over an encrypted connection	To deliver it, and to answer you; a message is kept as section 4 sets

Refusing. You may refuse these transfers by not creating an account and not ordering: a reading without an account is calculated and not kept. Without them we cannot keep an account or make an order for you.

4. How long we keep it

What	For how long
A reading without an account	Not kept
Your account, profiles and orders	Until you delete them, or your account
An online payment's references	Never paid: 30 days after the payment page closed. Paid, refunded, or paid after its order was deleted: as long as the record of a paid order below
Our notes about a payment to look at	30 days after they reach our mailbox
The record of a paid order	As long as Singapore's company and tax laws require: at least five years from the end of the year of assessment that follows the order
Passkeys	Until you remove them on the account page, or delete your account (remove it from your device's password manager too)
Sessions	Until you sign out, or 30 days
Links to confirm an email or reset a password	24 hours and 1 hour
Shared readings	90 days, or until you delete them; kept while attached to your account
An order's card files	Deleted with the order
Our copy of the emails about an order, in our mailbox	Deleted with the order; at most 12 months after it is delivered
Your messages	Until we answer, then 12 months; deleted with your account if you sent them signed in
Database backups	The last five copies, made before each update of the Site, then replaced; what you deleted stays in them until then
Daily backups of our server, kept by our host	7 days, each replaced by a newer one; what you deleted stays in them until then

5. Your rights, wherever you live

You can, at any time:

• see and download your data: the account page's "Download my data" gives you your account, profiles, orders, shared readings and the messages you sent while signed in, in a machine-readable file;
• correct it: in your account, or by writing to us;
• delete it: "Delete my account" deletes your account, profiles, readings and orders, and signs you out everywhere; a paid order leaves only the record described in section 2;
• ask us any question about your data, or to exercise any other right, at hello@distoria.shop.

We answer within one month (30 days), free of charge. We may ask you to prove the request comes from you, for example by writing from your account's email address.

In the European Union, the United Kingdom and the EEA

Under the GDPR (and the UK GDPR), you also have the right to restrict our processing, to object to processing based on our legitimate interest, and to data portability. You may complain to the data protection authority where you live or work (in France, the CNIL; in the United Kingdom, the ICO), or to our EU representative.

In Singapore

Under the Personal Data Protection Act 2012, you may ask for access to your data and how it has been used, ask us to correct it, and withdraw your consent, with the consequences we will explain. You may complain to the Personal Data Protection Commission.

In Japan

We handle the personal information of people in Japan under the Act on the Protection of Personal Information. Our name, address and representative are in the Legal notice; the purposes are in section 2, how we keep it safe in section 7. You may ask us to disclose, correct, stop using or delete it, as above, and complain to us or to Japan's Personal Information Protection Commission. Your data is kept in the European Union (section 3).

In the United States

We do not sell or share personal data, and do not use it for targeted advertising or profiling. Wherever you live in the United States, including California, you may ask to know what we hold about you, to correct it and to delete it, as above, and we will not treat you differently for asking.

Do Not Track and Global Privacy Control. We do not track your activity over time or across other sites, and no other party collects it on our Site, so there is nothing for these signals to switch off; we honour them by default.

In Canada

Under the Personal Information Protection and Electronic Documents Act (PIPEDA), and in Quebec the Act respecting the protection of personal information in the private sector, you may access your data and have it corrected. Our Data Protection Officer is the person in charge of the protection of personal information. You may complain to the Office of the Privacy Commissioner of Canada, or in Quebec to the Commission d'accès à l'information.

6. Children

The Site is for adults aged 18 and over, and is not directed to children. We do not knowingly collect data from anyone under 18, and in particular from children under 13. If you believe a child has given us personal data, write to us and we will delete it.

7. Security

Birth details, profiles and orders are encrypted at rest with keys kept apart from the database. Passwords are hashed with Argon2. The Site is served over an encrypted connection. Access to the servers is limited to the people who need it, with keys, not passwords. No system is perfectly secure: if a breach puts your data at risk, we will tell you and the authorities as the law requires, without undue delay.

8. Cookies

We use one cookie to keep you signed in, a second for five minutes while you sign in with Google or Apple, a third for five minutes while you add or use a passkey, and your browser keeps three preferences for you. None of them tracks you. Our Cookie notice lists them.

9. Deleting your account

Deleting your account from the account page deletes, at once and for good: your account, your sessions on every device, your passkeys (your device keeps its own half until you remove it there), your saved profiles and their readings, your shared readings, and your orders. An unpaid order is deleted entirely. A paid order is reduced to its record (number, offer, price, status and dates, with nothing personal), which we must keep as long as section 4 says.

What you delete then stays in our backups until they are replaced: at most 7 days in our host's daily backups, and in the five copies made before an update of the Site until five newer ones replace them (section 4). We use them only to recover the Site after a failure. Each deletion is noted in our own mailbox by its reference numbers alone, so if we ever restore a backup, we delete again what you had deleted since it was made.

10. Changes to this policy

We publish every change here with its effective date. If a change affects how we use data we already hold, we tell account holders by email before it applies.

11. Contact

For any question about your data: hello@distoria.shop. Keykibotos Pte. Ltd., 110 ROBINSON ROAD, #08-00, ERH BUILDING, Singapore 068901. Telephone: (number to follow).