Rune Whispers privacy policy

1. Summary

• Rune Whispers uses no cookies, no analytics or tracking tools and no ad networks.
• There is no user account, no form and no database. While you ask the runes, Rune Whispers sends nothing to our server or anyone else’s.
• What you ask the runes stays on your device. The journal keeps your readings, also only on your device, and only for as long as you want it to.
• Personal data only reaches us if you send something yourself: an energy exchange via PayPal or an email.

2. Controller

The controller under the General Data Protection Regulation (GDPR) is:
Shannon & Thomas Pfalzgraf, Magic Camelot, Gifhorner Str. 19, 38442 Wolfsburg, Germany
Email: info@magic-camelot.com

We are not required to appoint a data protection officer. If you have questions about privacy, just write to the address above.

3. Website and hosting

The website and the app Rune Whispers are hosted on servers of IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany. We have a data processing agreement with IONOS under Art. 28 GDPR.

When you open a page, your browser sends technically necessary data to the server: IP address, date and time, the address requested, the amount of data transferred, browser and operating system and the page you came from. The server needs this to deliver the page and to detect attacks. The legal basis is Art. 6(1)(f) GDPR; our legitimate interest is secure and stable operation. The logs are deleted automatically after a short time; IONOS sets the period. We do not use them for any other purpose.

The website and the app set no cookies and load nothing from third-party servers. We serve the fonts and images ourselves, and the app makes its music on your device. Links to other providers (such as PayPal) only take effect when you click them.

4. Storage on your device

Rune Whispers stores in your browser’s storage: the language you chose, the graphics level, whether sound and music are on, today’s rune of the day with its date, so it stays the same all day, and the journal of your readings (kind, runes, date and time and, unless you switch it off, your question). Installed as an app, it also keeps the app’s files for offline use.

In the journal itself you can switch it off, leave the questions out, and delete single entries or all of them.

This data does not leave your device. Storing it is strictly necessary for the functions you ask for (Section 25(2) no. 2 TDDDG). You can delete it at any time in your browser settings.

5. Your questions, PDFs and shared links

Beneath the ancient oak you can write down your question if you like. It is never sent to a server. On your device the journal keeps it with the reading unless you switch that off (see above). We do not learn which runes you draw either.

PDF: a reading as a PDF is made entirely in your browser; nothing is sent to us or anyone else.

Sharing as a link: when you share a reading, it lives in the link after the # sign (kind, runes, date). Your question goes in only if you tick that box. Browsers do not send this part of the address to the server, so we do not see it, not even when someone opens the link. You decide where to send it; if you send it by messenger or email, that service’s terms apply.

6. Energy exchange via PayPal

Rune Whispers is free. If you would like to support us voluntarily, a link takes you to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. You only leave our site when you click it. PayPal’s privacy policy applies to the payment.

From PayPal we receive name, email address, amount and any message. We use this data only for processing and our accounts (Art. 6(1)(b) and (c) GDPR) and keep it as long as tax law requires (up to 10 years).

7. Contact by email

If you email us, we process your address and the content to answer your request (Art. 6(1)(b) or (f) GDPR). We delete messages once they have been dealt with and no retention obligations apply.

8. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18) and data portability (Art. 20). You can withdraw consent at any time with effect for the future (Art. 7(3) GDPR).

Right to object: where we process data on the basis of Art. 6(1)(f) GDPR, you can object at any time on grounds relating to your particular situation (Art. 21 GDPR).

An email to info@magic-camelot.com is enough. You can also complain to a data protection authority (Art. 77 GDPR), for example the one where you live or the one responsible for us: Die Landesbeauftragte für den Datenschutz Niedersachsen (data protection authority of Lower Saxony), Prinzenstraße 5, 30159 Hannover, Germany.

There is no automated decision-making or profiling. We do not sell personal information or share it for advertising.