This is a translation provided for convenience. The Russian version is the legally binding one; in case of any discrepancy, the Russian version prevails. Russian version
1. General provisions
1.1. This Policy has been prepared in accordance with Federal Law No. 152-FZ “On Personal Data” of 27.07.2006 (the “Law”) and defines which personal data is processed on the website https://svoya-karta.ru (the “Site”), for what purposes, on what basis, how long it is stored and how it is destroyed.
1.2. The personal data operator is Volkova Ekaterina Alekseevna (Волкова Екатерина Алексеевна), an individual applying the special tax regime “Tax on Professional Income” — self-employed (professional income tax payer), INN 662514747286 (the “Operator”). Address for inquiries: svoya.karta@yandex.ru. Postal address: 25 Yubileynaya St., Starobzhegokai aul, Takhtamukaysky District, Republic of Adygea, Russia.
1.3. The Operator organizes the processing of personal data personally. Technical maintenance of the Site is carried out on the Operator’s instruction by an administrator who is obliged to keep personal data confidential; there is no other access to the Site’s server.
1.4. The notification of personal data processing (Article 22 of the Law) was sent to Roskomnadzor on 25.09.2026. The registration number in the register of operators will be stated here after inclusion in the register.
1.5. Consent to personal data processing is set out in a separate document: https://svoya-karta.ru/soglasie/. Consent is given by ticking a box in the form before the calculation begins. The mere fact of visiting the Site is not considered consent.
1.6. The Site is intended for persons over 18 years of age.
2. In brief: how processing works
- Birth data entered for a calculation is not written to a database and is not stored on the server. The calculation is performed in the server’s memory, and the result is passed straight to the user’s browser. The Site has no database.
- Joint calculation via an invitation link: the inviter’s data is passed inside the link in encrypted form and is not stored on the server. The link is valid for 7 days and for a single use — the number of the used link (without any data about people) is kept for 7 days. Each of the two people sees the joint reading of the pair only with their own consent.
- Entered data is remembered in the user’s own browser (localStorage) so that it does not have to be entered again. It is not available to the Operator. It can be erased with the “Forget entered data” button in the footer of the Site.
- Phone and car numbers and the address in the “Lucky Numbers” section are not sent to the server. The browser sends only sums of digits, from which the original number cannot be restored.
- Visit statistics (Yandex.Metrica) are enabled only after consent in the cookie notice.
- The server is located in the Russian Federation. Cross-border transfer of personal data is not carried out.
3. Purposes, data, subjects, bases and terms
Purpose 1. Online calculations and sending the result by email
Providing the Site’s users with a service of online calculations from birth data (Human Design, astrology, Jyotish, numerology, Destiny Matrix, compatibility) and sending the result of the calculation in PDF format to an email address at the user’s request.
| Personal data | first name and, optionally, patronymic and surname (for numerology); date of birth; time of birth or part of the day; place of birth (a locality or geographic coordinates); the place where the user spends their birthday — a locality or geographic coordinates (optional, for the Solar Return calculation); sex (optional); types and dates of life events provided to refine the birth time (chosen from a fixed list, with no text descriptions); degree of kinship or type of relationship with the user (in group calculations); email address (if the reading was requested by email); a child’s birth data (date, time or part of the day, place; name — optional) provided by their parent or other legal representative (for the “Child Chart”) |
| Subjects | visitors to the Site; persons whose birth data the user enters (relatives, partners, friends, colleagues) — see Section 5; children whose data is entered by their legal representative |
| Legal basis | consent of the subject (clause 1 of part 1 of Article 6 of the Law); for a child’s data — consent of their legal representative (Article 9 of the Law) |
| Method | automated processing with transmission over the Internet |
| Term | on the server — only for the time needed to perform the calculation and generate the PDF, after which the data is deleted from memory; a copy of the sent email with the PDF in the Operator’s mailbox — no more than 30 days |
| Destruction | automatically when the calculation is finished; emails in the mailbox are deleted at least once every 30 days |
| Joint calculation via an invitation link | the inviter’s data is passed inside the link in encrypted form and is not stored on the server. The link is valid for 7 days and for a single use — the number of the used link (without any data about people) is kept for 7 days. Each of the two people sees the joint reading of the pair only with their own consent. |
Purpose 2. Performance of the contract (paid readings and subscription)
Concluding and performing a service contract under the public offer (https://svoya-karta.ru/oferta/): generating and delivering the full personal reading in PDF, showing paid on-screen readings (compatibility, group, loved ones, Destiny Matrix, Pythagorean Square, birth time refinement, “Child Chart”), a subscription to them, accepting payment, issuing a receipt and sending the access key by email.
| Personal data | name (if provided); date, time and place of birth; the place where the birthday is spent (for the Solar Return, if provided); sex (if provided); degree of kinship or type of relationship (in the “How to Be With Loved Ones” reading); types and dates of life events — only in the PDF reading for birth time refinement, which is sent to the customer’s email; they are not passed into the payment; email address; information about the order and payment (order number, name of the service, amount, date and status of payment); for a subscription — a log of the services opened under it: the conditional number of the subscription (computed from the payment number), the type of subscription and the amount paid, the service code, a conditional fingerprint of the calculation and the date of opening, without the email address and birth data (needed to calculate the refund under clause 6.6 of the offer); the partner code in the order; a log of sales by partner codes — the code, service, amount, date and conditional order number (computed from the payment number), without email and birth data — for calculating partners’ remuneration and accounting for refunds; in the “Child Chart” — a child’s birth data provided by their legal representative (date, time or part of the day, place; name — optional) |
| Subjects | customers — persons who paid for the service; persons whose birth data the customer provided in a paid reading (see Section 5); children whose data the customer, as their legal representative, provided in the “Child Chart” |
| Legal basis | performance of a contract to which the subject is a party (clause 5 of part 1 of Article 6 of the Law); performance of the obligation to issue a receipt (Federal Law No. 422-FZ of 27.11.2018) (clause 2 of part 1 of Article 6 of the Law); for a child’s data — consent of their legal representative (Article 9 of the Law) |
| Method | automated processing with transmission over the Internet |
| Term | the email address and birth data from the order are not stored on the Operator’s server: birth data — only for the time of generating the PDF and the calculation. The log of services opened under a subscription — the term of the subscription and 1 year after it, for considering refund applications. The log of sales by partner codes — 3 years. Payment information is kept by the payment service and in the “My Tax” app for the terms established by legislation. A copy of the email with the PDF in the mailbox — no more than 30 days |
| Destruction | automatically after the PDF is generated; emails in the mailbox — at least once every 30 days; subscription log entries — automatically when the storage period expires |
Purpose 3. Visit statistics
Collecting statistics on visits to the Site and analyzing its use in order to improve the Site’s operation with the help of the Yandex.Metrica service.
| Personal data | cookie identifiers; IP address in anonymized form; type of device, operating system and browser; information about transitions and actions on the pages of the Site |
| Subjects | visitors to the Site who have given consent in the cookie notice |
| Legal basis | consent of the subject (clause 1 of part 1 of Article 6 of the Law) |
| Method | automated processing with transmission over the Internet |
| Term | until consent is withdrawn; Metrica cookies are kept in the browser for up to 1 year |
| Destruction | withdrawal of consent — by clearing the Site’s data in the browser (Section 7); deletion of the counter and its data when use of the service ends |
Webvisor is disabled in Metrica: the contents of input fields, including birth dates and places, are not recorded. Keystrokes in input fields are not tracked. Metrica data is not linked to the data that is entered for a calculation.
Purpose 4. Security and operability of the Site
Keeping technical web server logs to protect against attacks and to eliminate failures.
| Personal data | IP address; date and time of the request; method and address of the requested page; server response code; address of the page from which the visitor came; information about the browser and device (User-Agent string). Parameters of requests to the programming interface (in which birth data is passed) are not written to the log |
| Subjects | visitors to the Site |
| Legal basis | exercise of the rights and legitimate interests of the Operator (clause 7 of part 1 of Article 6 of the Law) |
| Method | automated processing |
| Term | 14 days |
| Destruction | automatically, by daily log rotation |
Purpose 5. Emails after a free calculation
Sending the user emails after a free calculation — only with their separate consent (a separate checkbox under the email field, not ticked in advance): three emails — on the day of the calculation, after 2 and after 5 days. The emails contain a short summary of the calculation, “test it on yourself” checks and offers of the Site’s paid readings.
| Personal data | email address; name, if provided; sex, if provided (for the form of words in the emails); date, time and text of the consent. Birth data is not stored for the emails: the first email is composed at the moment of the calculation. For emails after the Destiny Matrix, one code of the center of the chart is stored — a number from 1 to 22, from which the date of birth cannot be restored |
| Subjects | visitors to the Site who have given consent to the emails |
| Legal basis | consent of the subject (clause 1 of part 1 of Article 6 of the Law); for emails offering services — prior consent (part 1 of Article 18 of the Federal Law “On Advertising”) |
| Method | automated processing with transmission over the Internet |
| Actions | collection, recording, storage, use for sending emails, deletion |
| Term | until the third email is sent or until consent is withdrawn — via the “Unsubscribe” link in any email or by email to the Operator |
| Destruction | automatically after the third email or immediately via the “Unsubscribe” link; on an email to the Operator — within 10 business days. Copies of sent emails in the Operator’s mailbox — no more than 30 days |
Feedback messages
The “Feedback” button and the feedback form after downloading a PDF do not ask for a name, email or other contacts. Only the page address and the time of sending are saved with the text; the IP address is not saved. The Operator asks that personal data not be included in messages. If a person has included it anyway, the entry is deleted at their request. Messages are kept for 12 months. Reviews are published only with the author’s separate consent and without a name.
4. Actions with personal data
The Operator performs the following actions with personal data: collection, recording, systematization, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), anonymization, blocking, deletion, destruction — to the extent necessary for each purpose. Dissemination of personal data is not carried out.
Automated decision-making that produces legal consequences for the subject (Article 16 of the Law) is not used.
Special categories of personal data (Article 10 of the Law) and biometric personal data (Article 11 of the Law) are not processed.
5. Data of other people and of minors
5.1. In the “Compatibility”, “You Together”, “Advice for Close Ones” sections and in the compatibility mode of individual calculations, the user enters the birth data of other people. Before the calculation, the user confirms that they have obtained these people’s consent or have another lawful basis to pass on their data.
5.2. The data of other people is processed in the same way as the user’s own data: only for the time of the calculation, without being stored on the server. In the user’s browser it is kept until “Forget entered data” is pressed.
5.3. The birth data of minors is entered only by their parents or other legal representatives.
5.4. The “Child Chart” is a reading of a child for their parent. The child’s data is entered, and the reading paid for, by an adult — a parent or other legal representative: before the calculation they confirm their authority with a separate checkbox and consent to the processing of the child’s data (Article 9 of the Law). The child’s data is processed in the same way as other birth data (Purposes 1 and 2): only for the time of the calculation and generating the PDF, without being stored on the server; in the browser — only in an unfinished order (clause 7.1).
6. Who the data is passed to
The Operator does not sell personal data and does not pass it on for advertising. Data is passed only to those without whom the service cannot be provided:
| OOO “TIMEWEB.CLOUD” | INN 7810945525, OGRN 1227800052215, 420500, Republic of Tatarstan, Innopolis, ul. Universitetskaya, 7, office 605 — hosting the Site on a server (data center in Moscow). Passed: all data passing through the Site |
| OOO “YANDEX” | INN 7736207543, 119021, Moscow, ul. Lva Tolstogo, 16 — email service (sending the PDF by email and emails after a calculation); the Yandex.Metrica service. Passed: email address, name (if provided), the PDF reading and the text of emails; purpose 3 data |
| OOO “ROBOKASSA” (Robokassa payment service) | INN 5047063929, OGRN 1055009302215, 129344, Moscow, ul. Iskry, 16 bldg. 1, room 15A, premises III — accepting payment (payment aggregator), generating and sending the self-employed person’s receipt via NKO “Platezhi i Raschety” (AO) and the “My Tax” app. Passed: email address, order number and amount, name of the service, as well as the birth data of all people in the order (without the event dates for birth time refinement) and the place where the birthday is spent (for the Solar Return, if provided) — they travel inside the payment, and the PDF reading is assembled from them after payment |
Bank card details are entered on the payment service’s page. The Operator does not receive or store them.
Buyers’ data is not passed to the Site’s partners (bloggers) — only the number of payments and the amounts under their code per month.
Personal data may be provided to state authorities only in cases provided for by the legislation of the Russian Federation.
7. Cookies and browser storage
7.1. The Site does not set its own cookies. The Site uses browser storage (localStorage) on the user’s device:
| svoya-karta-birth | the user’s own birth data |
| svoya-karta-others | data of the partner and loved ones for the compatibility, group and advice pages |
| svoya-karta-people | an “address book” of people the user has already calculated (up to 24 people) |
| svoya-karta-rect | events for selecting the birth time |
| consent-pdn-v3, consent-pdn-3p-v3 | a record that consent to processing was given and that authority over other people’s data was confirmed |
| consent-pdn-child-v1 | a mark that a child’s data is entered by their legal representative, who consents to its processing (“Child Chart”) |
| sk-cookie-consent | the answer to the cookie notice |
| sk-access-tokens | access keys to paid readings and the subscription (service code, date fingerprint, term — without personal data) |
| sk-pending-orders | data of an unfinished order (what was entered in the form), so that the reading can be opened after payment; deleted after payment or after one day |
| sk-partner | the code of the partner (blogger) via whose link or with whose code the user came to the Site — only until the first order and until the tab is closed (sessionStorage): with a discount on that order |
| sk-tochnost-v1 | “About me / Not about me” marks in a reading: a hash (fingerprint) of the birth data — the data is not stored in its original form — and the answers; not sent to the server |
| svoya-karta-pdf-sticky-closed (sessionStorage) | that the “Full PDF reading” banner is closed — until the tab is closed |
| sk-prefill-pair (sessionStorage) | two dates from the couple page before moving to the compatibility calculation — deleted immediately when the form is opened |
| sk-utm | tags of the advertising link via which the user came to the Site: source, channel, campaign, ad, keyword (utm tags) — for no longer than 30 days |
This data is stored only on the user’s device and is not available to the Operator, except for the advertising link tags: when an order is placed, they are passed to the Operator together with it and used only to count orders and payments by advertising channel. Until payment is confirmed, but for no longer than 2 days, the tags are kept by the Operator with a conditional order number (computed from the payment number), and afterwards — without any link to the order or the buyer. The storage period in the browser is until “Forget entered data” is pressed or the browser is cleared, and for the tags — no longer than 30 days from following the advertising link. For the transition after payment, the order data is placed in the tab’s storage (sessionStorage) and deleted immediately after the reading is opened. The partner code is also passed to the Operator with the order — for the discount and for calculating the partner’s remuneration.
7.2. Yandex.Metrica cookies (_ym_uid, _ym_d and others) are set only after pressing “Okay” in the cookie notice and are kept for up to 1 year. If “Necessary only” is chosen, the Metrica script is not loaded.
7.3. The decision can be changed at any time: clear the Site’s data in the browser settings or press “Forget entered data”, after which the notice will appear again.
8. Place of processing
The Site’s server is located in a data center in Moscow. Recording, systematization, accumulation, storage, clarification and retrieval of personal data of citizens of the Russian Federation are carried out using databases located in the territory of the Russian Federation (part 5 of Article 18 of the Law). Cross-border transfer of personal data is not carried out.
9. Protection measures
The level of personal data security is UZ-4 (Resolution of the Government of the Russian Federation No. 1119 of 01.11.2012). The Operator applies the following measures:
- data is exchanged between the browser and the Site only over the HTTPS (TLS) protocol;
- birth data is not stored on the server, there is no database;
- request parameters with birth data are not written to logs;
- server access is only by SSH key, password login is disabled, and brute-force protection (fail2ban) is in place;
- rate limiting of requests to the programming interface;
- collection is limited to what is necessary: birth time and place are not requested where the date is enough for the calculation;
- Webvisor is disabled in Metrica, and IP addresses are anonymized.
Certified means of cryptographic information protection are not used.
10. Incidents
Upon detecting an unlawful or accidental transfer (provision, dissemination, access) of personal data that has infringed the rights of subjects, the Operator, in accordance with part 3.1 of Article 21 of the Law, notifies Roskomnadzor:
- within 24 hours — of the incident, its presumed causes, the harm and the measures taken;
- within 72 hours — of the results of the internal investigation and of the persons whose actions caused the incident (if any).
11. Rights of the subject and response terms
11.1. The personal data subject has the right to:
- obtain information about the processing of their personal data (Article 14 of the Law);
- demand clarification, blocking or destruction of the data if it is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
- withdraw consent to processing;
- demand that processing be stopped;
- appeal the Operator’s actions to Roskomnadzor or to a court.
11.2. Requests and withdrawal of consent are sent to svoya.karta@yandex.ru or to the postal address in clause 1.2. The request should state the email address from which the order was made or the PDF was requested, and the approximate date — otherwise the request cannot be matched to the data.
11.3. Terms:
| information about processing | 10 business days; may be extended by 5 business days with notice to the subject of the reasons (part 3 of Article 14, part 1 of Article 20 of the Law) |
| clarification of incomplete or inaccurate data | 7 business days (part 3 of Article 20 of the Law) |
| stopping unlawful processing | 3 business days; destruction, if lawfulness cannot be ensured — 10 business days (part 3 of Article 21 of the Law) |
| demand to stop processing | 10 business days; may be extended by 5 business days (part 5.1 of Article 21 of the Law) |
| withdrawal of consent | stopping processing and destroying the data — 30 days (part 5 of Article 21 of the Law), except for data that the Operator is required by law to keep |
11.4. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
12. Destruction procedure
Data is destroyed when the purpose is achieved, when the terms in Section 3 expire, when consent is withdrawn or at the subject’s demand. Destruction at the subject’s demand or on withdrawal of consent is confirmed by a destruction certificate and an extract from the log in accordance with Order No. 179 of Roskomnadzor of 28.10.2022. Data stored only in the user’s browser is deleted by the user themselves (Section 7).
13. Mobile app
13.1. The My Seven Charts mobile app for Android shows the same pages and performs the same calculations as the svoya-karta.ru site. When there is internet, birth data is sent to our server for calculation — on the same terms as on the site. When there is no internet, the calculation is performed on the device itself, and the data entered is not sent anywhere.
13.2. Payment opens in the phone’s browser on the Robokassa page: the app does not receive or store bank card data.
13.3. The app requests only access to the internet; it does not request access to contacts, camera, microphone or location. Yandex.Metrica in the app is enabled only after consent — as on the site (Section 7).
14. Final provisions
14.1. The Policy is effective from the date of publication. The Operator may amend it. The current version is always posted at https://svoya-karta.ru/privacy/, and the date of the version is stated at the beginning.
14.2. The legislation of the Russian Federation applies to relations concerning the processing of personal data.