Arcana Chats · ETAYO LANDA S.L.

Privacy policy

Last reviewed: 26 October 2026

1. Controller and contact

ETAYO LANDA S.L., Spanish tax ID B19825041, is the controller for this website. Address: Vía de las Dos Castillas, 33, esc. 7 - 16, 28224 Pozuelo de Alarcón, Madrid, Spain. For privacy and rights requests email admin@astroideal.com.

2. Data and purposes

When you browse, Cloudflare processes connection data such as IP address, browser and requests to deliver and protect the website. Opening the chat activates Turnstile and checks your quota. Sending a message causes our server to process its text and recent context to generate a response through Google Gemini or, where applicable, OpenRouter and the selected model provider. Do not send personal, confidential or sensitive information, or other people’s data.

Responding to your request is based on providing the requested service (GDPR Article 6(1)(b)); fraud, abuse and access protection rely on our legitimate interest in security (Article 6(1)(f)); compliance with legal obligations relies on Article 6(1)(c). Email enquiries are processed using the data needed to address the request. We do not sell your data and have not installed advertising analytics or marketing cookies.

3. Conversation and actual retention

The thread and draft are kept in this tab’s sessionStorage; “New conversation” clears them. Recent context also travels in a signed token held by your browser and sent back to the server: signing prevents changes but does not encrypt the content. The token expires after 6 hours. Our D1 database stores counters, pseudonymous visitor and network identifiers, and technical replay protection state; it does not store chat text. Counter entries older than the previous two days are deleted by activity-triggered cleanup; expired conversation states are also cleaned during use.

Pseudonymisation does not make technical data anonymous. Providers may retain logs for security, operations and legal obligations under their terms. Clearing the browser thread does not delete records already processed by a provider. We do not promise zero retention or professional confidentiality. Email enquiry data is kept as necessary to respond and meet legal obligations.

Eira Premium waitlist

If you join, we use your email, language, date and consent only to manage the list and notify you of the Eira Premium launch, based on your consent (GDPR Article 6(1)(a)). No account or subscription is created. Our server sends your email over HTTPS to a private management conversation in Telegram, accessible to the list manager. It is not sent to AI providers, published, or stored in our database or browser storage.

Telegram stores these messages in its cloud; bot chats are not end-to-end encrypted. We keep the list until the launch announcement or withdrawal of consent, and for no longer than 12 months from signup. Withdraw consent or request access, correction or deletion at admin@astroideal.com. The list manager handles deletion of management messages. D1 stores only HMAC hashes and technical timestamps for duplicate and abuse protection, without plaintext email or IP, cleaned during use (90 days for duplicates and 24 hours for counters).

Telegram · Privacy policy

4. Providers and international transfers

Providers include Cloudflare (hosting, security, D1 and Turnstile), Telegram (waitlist management), Google (Gemini), and, when fallback is used, OpenRouter and its AI provider. Models and routes may change while retaining the purpose of answering your question. Their services can involve processing outside the European Economic Area under applicable safeguards, including adequacy decisions or standard contractual clauses. Retention and model improvement practices depend on the service and provider; do not assume all providers offer the same guarantees.

5. Your rights

You may request access, rectification, erasure, objection, restriction and portability where applicable by emailing the contact above with the subject “GDPR Arcana Chats”. We may request proportionate information to verify your identity. Do not send your entire conversation unless needed. You may complain to the Spanish Data Protection Agency (aepd.es). These readings are not used for automated decisions with legal or similarly significant effects on you. Chat is restricted to adults aged 18 or over.