Last updated: August 13, 2026
1. Who is responsible for your data
TalkToPsychics.com is operated by Ellietainment, established in the Netherlands, which is the controller for the processing described in this policy. You can reach us about anything privacy-related at support@talktopsychics.com.
The short version: we collect what is needed to run an anonymous reading platform and nothing more, your chats are confidential and auto-deleted, we never sell your personal data, and the third parties we use are listed by name in section 6.
2. What we collect
Account data: your email address, a display name you choose, a password (stored hashed), your confirmation that you are 18 or older, and your settings such as newsletter preferences.
Reading and transaction data: which readings you had (reader, start, duration, cost), your credit balance and its history, purchases and payment status. Payment itself happens at our payment providers; we never receive or store your full card or bank details — we receive only a transaction reference, the amount and the status.
Chat content: the messages you exchange with a reader, kept temporarily as described in sections 3 and 7.
Technical data: IP address, browser and device type, pages visited and referrer — partly through cookies, see section 10. If you arrive through an advertisement we record the campaign source (for example a Google click ID) with your later purchase, so we can measure which advertising works.
Support correspondence: messages you send our support team.
We do not collect more than this, and we specifically do not ask for your real name to use the Platform: readings run under your display name.
3. Chat confidentiality and safety moderation
Your conversations with readers are confidential. Staff do not read along with chats as a matter of course, and chat transcripts are automatically deleted 90 days after a chat ends.
As an additional safety layer, our systems automatically flag messages that may indicate a safety risk: crisis situations, involvement of minors, fraud, or attempts to move contact and payment off the platform. Only flagged fragments, with minimal surrounding context, may be reviewed by authorized staff. Handled flags are deleted no later than 90 days after they are dealt with. The legal basis for this moderation is our legitimate interest in protecting users and the integrity of the Platform (art. 6(1)(f) GDPR); it exists for safety, never for marketing.
4. Why we process your data, and on what legal basis
To provide the service — running your account, connecting you with readers, deducting credit per second, paying out readers, handling support: necessary for the performance of our contract with you (art. 6(1)(b) GDPR).
For safety and fraud prevention — the moderation described in section 3, detecting duplicate or abusive accounts, protecting promotions: our legitimate interest (art. 6(1)(f)).
To improve the Platform and measure advertising — aggregated analytics and conversion measurement: legitimate interest for privacy-friendly measurement, and your consent where cookies or similar technologies require it (art. 6(1)(a)).
To send you marketing — newsletters and offers, only with your consent, and every message contains a working unsubscribe link.
To comply with the law — keeping purchase records for tax law (in the Netherlands: 7 years), responding to lawful requests by authorities (art. 6(1)(c)).
5. What we never do
We never sell your personal data. We never share chat content with advertisers. We do not use your data to train AI models, and readings on the Platform are conducted by humans, not by AI. We do not profile you beyond the modest analytics described here, and we do not make automated decisions with legal or similarly significant effects about you.
6. The third parties we work with, by name
We use a small set of processors and partners. Each receives only the data needed for its role, under a data-processing agreement where GDPR requires one.
- Payment providers — Stripe, PayPal and Mollie: process your payment. They handle your card or bank details under their own responsibility as regulated payment institutions; we receive only transaction reference, amount and status.
- Hosting — EU-based hosting providers (currently TransIP B.V., the Netherlands): run the servers and store Platform data inside the European Economic Area.
- Email delivery: a transactional email provider sends account and receipt emails, and — only with your consent — newsletters.
- Analytics — Google Analytics 4: aggregated usage statistics with IP truncation. Loaded only after cookie consent.
- Advertising measurement — Google Ads and Meta: if you arrived through an ad and consented to marketing cookies, we report the conversion (purchase amount, no chat content, no reading details) so campaigns can be measured. You can refuse or withdraw this consent at any time.
- Authorities: only where the law obliges us to, and after review of the request's validity.
7. How long we keep things
Chat transcripts: deleted automatically 90 days after the chat ends. Handled moderation flags: deleted no later than 90 days after handling. Account data: for the life of your account, then deleted or anonymized within 30 days of account deletion. Purchase and invoice records: 7 years, as Dutch tax law requires. Support correspondence: up to 2 years after the case closes. Newsletter data: until you unsubscribe. Technical logs: rotated within 14 days.
8. Where your data lives, and international transfers
Platform data is stored within the European Economic Area. Some partners named in section 6 (such as Google, Meta, Stripe and PayPal) may process limited data in the United States; those transfers rely on the European Commission's adequacy decision for the EU–US Data Privacy Framework where the partner is certified, and on Standard Contractual Clauses with supplementary measures where it is not.
9. Your rights
Under the GDPR (everyone in the EU/EEA and UK): you can request access to your data, correction, deletion, restriction of processing, a portable copy, and you can object to processing based on legitimate interest. Where processing rests on consent you can withdraw it at any time, without affecting earlier processing. You can also complain to your supervisory authority — in the Netherlands the Autoriteit Persoonsgegevens.
If you live in California (CCPA/CPRA): you have the right to know what personal information we collect and how it is used (this policy), to access and delete it, to correct it, and to opt out of “sale” or “sharing” of personal information. We do not sell personal information; the only “sharing” in the CPRA sense is consent-based advertising measurement (section 6), which you can switch off by refusing marketing cookies — we also honor the Global Privacy Control signal as an opt-out. We never discriminate against you for exercising rights, and you may use an authorized agent.
To exercise any right, email support@talktopsychics.com from the address linked to your account (or provide equivalent verification). We respond within 30 days (GDPR) or 45 days (CCPA), and we will always verify requests to protect your account.
10. Cookies
The Platform uses three kinds of cookies and similar technologies. Essential cookies keep you logged in, remember your chat session and secure the Platform; these are always on. Analytics cookies (Google Analytics 4) help us understand how the site is used; loaded only after consent. Marketing cookies (Google Ads, Meta) measure which advertising leads to purchases; loaded only after consent. You choose in the cookie banner on your first visit, you can change your choice at any time via the cookie settings link in the footer, and refusing non-essential cookies never limits your use of the Platform. You can additionally clear or block cookies in your browser settings.
11. How we protect your data
All traffic is encrypted with TLS. Passwords are stored hashed, access to production data is limited to authorized staff on a need-to-know basis, payment data never touches our servers, and moderation access is logged. Should a data breach nonetheless occur that presents a risk to you, we notify the supervisory authority within 72 hours and, where the risk is high, notify you directly without undue delay.
12. Children
The Platform is strictly for adults (18+). We do not knowingly collect data from minors. If we learn that an account belongs to someone under 18 we close it and delete the associated data; parents or guardians who believe their child has an account can contact support@talktopsychics.com.
13. Changes to this policy
When we change this policy we update the date at the top; for material changes we notify you by email or on-platform message before they take effect. Older versions are available on request.
14. Contact
Privacy questions, requests or complaints: support@talktopsychics.com, or use the contact page. Operator details are shown in section 1. You always retain the right to complain to the Autoriteit Persoonsgegevens (autoriteitpersoonsgegevens.nl) or your own supervisory authority.