LUACHEIA · PRIVACY
This Privacy Policy explains how LuaCheia collects, uses, stores and protects personal data when you visit LuaCheia.org, create an account, make a purchase or use our digital experiences.
Last updated: September 8, 2026
The Data Controller responsible for the processing of personal data through LuaCheia.org is:
Romina Cinti
Via Montottone 74
00132 Rome, Italy
P.IVA 15314081003
Email: contatti@luacheia.org
This Privacy Policy applies to personal data processed through LuaCheia.org and the digital services and experiences made available through the platform.
It explains what information we may process, why we process it, the legal basis for the processing, how long information may be kept, with whom it may be shared and the rights available to users.
The personal data processed by LuaCheia depends on how you use the website and which services you choose to access.
This may include account and registration information, information provided when using digital experiences, purchase and Stars information, communications sent to us, authentication and session information and limited technical information necessary to operate and protect the service.
We aim to process only personal data that is reasonably necessary for the relevant purpose.
When you create a LuaCheia account, we may process information including your nickname, name, date of birth and email address.
We also record information necessary to document account registration, confirmation that the user meets the applicable age requirement and acceptance of the relevant terms and privacy information.
Your password is not stored by LuaCheia in readable plain text. It is processed using a cryptographic password hashing mechanism so that the original password is not stored in the account database.
When you log in, LuaCheia processes information necessary to authenticate your account and maintain your session.
This may include account identifiers, session identifiers, security tokens in protected or hashed form, session creation and expiry information and session status.
These data are used to provide secure account access, recognize authenticated sessions, support logout functionality and help prevent unauthorized access or misuse.
Different LuaCheia experiences may require different information in order to generate the content requested by the user.
Depending on the experience selected, users may voluntarily provide information such as a name, date of birth, birth time, birth place, questions, selected topics or other information relevant to the requested astrology, tarot, numerology or personal reflection experience.
The exact information requested may vary depending on the experience. We use this information to generate, personalize and deliver the content or service requested by the user.
Users should avoid entering unnecessary sensitive personal information into free-text fields or questions.
Some LuaCheia digital experiences may use automated systems or artificial-intelligence- assisted technologies to generate, organize or present personalized content.
Where information provided by a user is processed by such systems, the processing is carried out for the purpose of providing the experience requested by the user.
LuaCheia experiences are intended for entertainment, informational and personal reflection purposes and are not designed to make legally binding decisions about users or decisions producing similarly significant legal effects.
LuaCheia processes information relating to the Stars associated with your account.
This may include your account identifier, free Stars balance, purchased Stars balance, transaction or movement identifiers, amounts, transaction type, references and dates.
These records are used to maintain the correct account balance, provide purchased services, investigate errors or abuse and maintain appropriate transaction records.
Payments for Stars may be processed through Stripe or another payment service provider identified during checkout.
Payment card details entered directly into the payment provider's checkout environment are processed by that provider. LuaCheia does not directly store complete payment card numbers entered into Stripe's payment system.
LuaCheia may receive and process information necessary to identify and manage a payment, such as transaction identifiers, payment status, amount, currency, purchased package and other information necessary to record or reconcile the transaction.
Stripe processes personal data in accordance with its own privacy documentation and applicable data protection obligations.
When you contact LuaCheia through the Contact page or by email, we process the information necessary to receive, manage and respond to your request.
This may include your name, email address, selected contact category, subject, message, date of submission, response and the status of the request.
If you are logged in when submitting a request, the request may also be associated with your LuaCheia account identifier where necessary for support purposes.
We process personal data where necessary to create and manage accounts, authenticate users, provide digital experiences, manage Stars and purchases, process support requests, maintain the security and technical operation of the service and comply with applicable legal obligations.
We may also process limited information where necessary to prevent fraud, misuse, unauthorized access or technical abuse and to establish, exercise or defend legal claims where required.
Depending on the specific processing activity, LuaCheia relies on one or more legal bases provided by applicable data protection law.
Processing necessary to create an account, provide a requested experience, manage Stars or perform a purchase may be based on the performance of a contract or on steps taken at the user's request before entering into a contract.
Processing necessary to comply with accounting, tax, consumer protection or other statutory obligations may be based on compliance with a legal obligation.
Security, fraud prevention, service protection and the establishment or defence of legal claims may, where appropriate, be based on our legitimate interests, balanced against the rights and interests of users.
Where applicable law requires consent for a specific processing activity, we will request that consent separately. Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before withdrawal.
LuaCheia may use carefully selected third-party providers where necessary to operate the website and provide its services.
These may include providers of hosting and cloud infrastructure, database or technical infrastructure, payment processing, email delivery, security and other services necessary for the operation of LuaCheia.
Personal data may also be disclosed where required by law, a competent authority or a valid legal request, or where necessary to establish, exercise or defend legal rights.
We do not sell users' personal data.
Some technology providers used to operate LuaCheia may process or make personal data accessible from countries outside the European Economic Area.
Where personal data is transferred outside the European Economic Area, appropriate safeguards required by applicable data protection law are used where necessary. These may include an adequacy decision adopted by the European Commission, approved contractual safeguards or another legally recognized transfer mechanism.
Personal data is kept only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations.
Account data may generally be retained while the account remains active and for an appropriate period afterwards where necessary to manage account closure, disputes, security or legal obligations.
Payment, transaction and accounting information may be retained for the periods required by applicable tax, accounting and legal obligations.
Contact and support communications may be retained for the period necessary to resolve the request and, where appropriate, for a further period necessary to document the assistance provided or protect legal rights.
Authentication and session information is retained for the period necessary to manage active sessions, security and related technical requirements.
Information associated with individual digital experiences is retained only for as long as necessary to provide the relevant experience and any related account functionality, subject to legal, security or dispute-resolution requirements.
LuaCheia uses technical and organizational measures intended to protect personal data against unauthorized access, loss, misuse, alteration or disclosure.
Measures may include password hashing, protected authentication tokens, access controls and appropriate security practices for the infrastructure used to operate the service.
No online system can guarantee absolute security. Users are also responsible for choosing appropriate passwords and protecting access to their accounts and devices.
LuaCheia accounts and personal experiences are intended only for users aged 18 or over.
We do not knowingly provide registered LuaCheia accounts to children. If we become aware that an account has been created in violation of the age requirement, we may take appropriate steps to restrict the account and address the associated personal data in accordance with applicable law.
Subject to the conditions established by applicable law, you may have the right to request access to your personal data, rectification of inaccurate data, erasure of data, restriction of processing and data portability.
You may also have the right to object to processing based on legitimate interests and, where processing is based on consent, to withdraw that consent at any time.
These rights are not absolute in every circumstance. For example, certain information may need to be retained where required by law or where another lawful basis permits or requires continued processing.
To exercise a data protection right, you may contact us at contatti@luacheia.org or use the Contact page .
We may need to verify your identity before completing certain requests in order to protect your personal data from unauthorized access or deletion.
You may request the deletion of your LuaCheia account and associated personal data by contacting us.
Account deletion does not necessarily require the immediate deletion of every record. Information that must be retained to comply with legal, tax or accounting obligations, to prevent fraud, resolve disputes or establish, exercise or defend legal claims may be retained for the applicable period.
Where information no longer needs to be linked to an identifiable user, it may be deleted or anonymized where appropriate.
If you believe that the processing of your personal data infringes applicable data protection law, you have the right to lodge a complaint with the competent supervisory authority.
In Italy, the supervisory authority is the Garante per la protezione dei dati personali .
You may also contact us first so that we can review and, where possible, resolve your concern.
LuaCheia may use technical storage mechanisms, cookies or similar technologies where necessary for website functionality, account access, security or user preferences.
Any use of non-essential cookies or similar tracking technologies will be managed in accordance with applicable consent requirements.
More information about the technologies used, their purposes and available choices is provided in our Cookie Policy .
LuaCheia may contain links to external websites or use third-party services that have their own privacy policies.
Where you interact directly with an independent third-party service, its processing of personal data may be governed by its own privacy information. We encourage users to review the relevant privacy documentation where appropriate.
We may update this Privacy Policy when necessary to reflect changes to LuaCheia, our processing activities, technology or applicable legal requirements.
The current version will be published on this page together with the date on which it was last updated.
Where required by law, or where a change materially affects how personal data is processed, additional notice will be provided.
For questions about this Privacy Policy, the processing of your personal data or the exercise of your data protection rights, contact:
Romina Cinti Via Montottone 74 00132 Rome, Italy P.IVA 15314081003 contatti@luacheia.org