Updated 28 September 2026
Privacy Policy
This policy explains what personal data Dealt 52 keeps, why, and what you can do about it.
Who is responsible
Dealt 52 is run by [OWNER FULL LEGAL NAME], a sole trader registered in Portugal (tax number [NIF]), [BUSINESS ADDRESS, PORTUGAL]. You can reach us at hello@dealt52.com. For the GDPR, we are the controller of the data described here.
What we keep
- Your birthday and time zone, so we can work out your cards and what “today” is for you.
- Your email address, once you give it, and whether you confirmed it and want letters.
- What you bought: the product, the amount, the date and the birthdays the report is made from. Card numbers are handled by Stripe and never reach us.
- For compatibility reports and gifts, the other person's birthday, and for gifts their email address.
- Which letters we sent you and when.
- Where you came from, such as a video link with a campaign tag, so we know which videos help people find us.
- Basic technical data in server logs, such as IP address and browser, kept for security.
Why we use it
To show your cards and reports, deliver what you bought, send the letters you agreed to, keep your account secure, and understand which parts of Dealt 52 people use. We do not sell your data and do not use it for advertising profiles.
Legal bases
- Contract: showing your cards, your account and the reports you bought.
- Consent: letters about your cards, which you confirm by email and can withdraw at any time.
- Legal obligation: keeping purchase records as tax law requires.
- Legitimate interest: security, preventing abuse and counting visits without tracking you across sites.
Who helps us
A few providers process data for us under data-processing terms:
- Hetzner Online (Germany): the server that runs the site and its database.
- ukraine.com.ua, ADM.TOOLS (Ukraine): sending our emails.
- Cloudflare (EU and US): domain name service and protection against attacks.
- Stripe (EU and US): payments, receipts and, where it is the seller of record, taxes.
Where data leaves the European Economic Area, we rely on the European Commission's standard contractual clauses or another lawful safeguard.
How long we keep it
- Account data: until you delete your account.
- Addresses that were never confirmed: 30 days.
- Records of letters sent: 24 months.
- Purchase records: 10 years, as Portuguese tax law requires.
- Report links you bought keep working after you delete your account, but are no longer tied to it.
- Backups: deleted data leaves our backups within 30 days.
Your rights
You can ask to see, correct, export or delete your data, restrict or object to its use, and withdraw consent to letters. In your account you can download your data, switch letters off or delete everything yourself; for anything else write to hello@dealt52.com.
You may also complain to a data protection authority. In Portugal this is the CNPD (Comissão Nacional de Proteção de Dados); you can also contact the authority where you live.
Children
Dealt 52 is not meant for children. We do not knowingly keep data about anyone under 16; if you think we have, write to us and we will delete it.
Security
Connections are encrypted. Sign-in links and sessions are stored only as hashes, links expire after 30 minutes, and access to the server is limited to the people who run Dealt 52.
Changes
We will post any change here with a new date, and tell you by email if it matters for you.
Contact
Questions and requests: hello@dealt52.com.