The Scriptum service (scriptum.lt) is provided by, and the controller of your personal data is, [SERVICE PROVIDER — name/company, code, address]. Privacy contact: [contact email].
Scriptum works as one ecosystem: your account is created on the server, so with the same email and password you can sign in both in the browser and in the app. The server stores your account data: name, email, date, time and place of birth, the people you have added and the generated reports. The server never sees your password — only a cryptographic hash is transmitted and stored. Your device (browser or app) additionally keeps a copy of the data so the service works fast and without an internet connection. Pressing "Delete account" permanently removes your data from both the device and the server.
| Data | Purpose | Legal basis (GDPR) | Where |
|---|---|---|---|
| Name, date/time/place of birth | Numerology, astrology and card calculations | Art. 6(1)(b) (provision of the service) | Server (EU) and your device |
| Email, password hash | Signing in to your account | Art. 6(1)(b) | Server (EU; password — hash only) and your device |
| Email, name (when sending mail) | Welcome letter, password reset code | Art. 6(1)(b) | Server (code — in memory for up to 15 min.) |
| Names, birth dates and relation of the people you add | Compatibility calculations, reports | Art. 6(1)(b) and (f) | Server (EU) and your device |
| Data of the selected people and the situation description | Generating the text of deep reports | Art. 6(1)(b) | Forwarded to the report provider (see sec. 5) |
| IP address, request logs | Security, abuse limiting | Art. 6(1)(f) (legitimate interest) | Server (logs limited, see sec. 7) |
Your birth date and the calculations derived from it are not used for any profiling for marketing purposes and are never sold to anyone.
You can add other people's names and birth dates to your "circles". This data is stored in your account (on the server and on the device) and is used only for your personal self-reflection — you are responsible for having the right to use it (the GDPR does not apply to personal / household use, but you may not publish it or use it commercially without those people's knowledge).
| Recipient | What is transferred | Location |
|---|---|---|
| Anthropic PBC (deep report provider) | When generating a report: names, birth dates, indicators calculated by the system, situation description. Email and password — never. | USA (EU–US Data Privacy Framework / SCCs) |
| Open-Meteo (geocoding) | Only the city name you enter | EU |
| Contabo GmbH (server hosting) | Server infrastructure (logs, sending mail) | Germany (EU) |
| UAB "Interneto vizija" (domain, DNS) | Technical domain servicing | Lithuania (EU) |
We send email from our own server — we do not use third-party mail services. We keep no lists of email addresses and send no marketing email.
Scriptum does not use cookies, advertising or analytics tracking tools. The browser's "localStorage" is used only for the service to work (a copy of your account, language choice) — these are strictly necessary technical records. Google Fonts are loaded from Google's servers (Google may see your IP address).
The service is intended for persons aged 16 and over.
The connection is encrypted with HTTPS. Your password never reaches the server in plain text — a salted hash is transmitted, and on the server it is additionally protected with the PBKDF2 algorithm. Provider keys are kept only on the server. A copy of your account is kept on your device, so the security of your device (screen lock, your own computer) matters too.
When we update this policy, we will change the date at the top. Significant changes will be announced in the app.
For privacy questions: [contact email].
The Scriptum service (scriptum.lt) is provided by, and your data controller is, [SERVICE PROVIDER — name/company, code, address]. Privacy contact: [contact email].
Scriptum works as one ecosystem: your account is created on our server, so the same email and password sign you in both in the browser and in the app. The server stores your account data: name, email, birth data, the people you add, and generated reports. The server never sees your password — only a cryptographic hash is transmitted and stored. Your device additionally keeps a copy so the service is fast and works offline. Pressing "Delete account" permanently removes your data from both the device and the server.
Anthropic PBC (USA; deep report text generation — names, birth data, computed indicators, situation description; never your email or password; EU–US Data Privacy Framework / SCCs), Open-Meteo (EU; city name only, for geocoding), Contabo GmbH (Germany; server hosting), UAB "Interneto vizija" (Lithuania; domain/DNS). We send email from our own server, keep no mailing lists and send no marketing email.
No cookies, no ads, no analytics trackers. localStorage is used only as a strictly necessary technical store. Google Fonts are loaded from Google servers.
Access & portability — "Download a data backup" in your profile (full JSON export). Rectification — edit anything in your profile. Erasure — "Delete account" permanently removes everything from the device and the server. Complaints — Lithuanian State Data Protection Inspectorate (vdai.lrv.lt); we would appreciate hearing from you first.
The service is intended for persons aged 16+. All content — numerology, astrology, karma cards and deep reports — is for entertainment and self-reflection; it is not medical, psychological, legal or financial advice, and deep reports do not predict the future.
[contact email]