Privacy

Last updated: 30 September 2026. This notice explains how curse.free handles information used for its digital ritual service.

Information you choose to submit

Forms may contain names, a date of birth or founding date, a business website, industry, reasons, intentions, ritual text and an optional photo. Only include information you are entitled to share. Avoid sensitive information about yourself or others.

How information is used

We use submitted details to generate your ritual and certificate, process payments and administer requests. When delivery is enabled, submitted details, optional photos, the certificate PDF shown on your confirmation page and approximate IP-based location (country, region, city and timezone when available) are placed in the service operator's customer-messaging platform, followed by a Ukrainian translation of the message, as internal notes that only the witch and our team can see; paid requests are forwarded after payment confirmation. The notes go into the chat this browser already has with us, on this website or on WhatsApp; if there is none, a chat is made for you in the web chat, so that the witch can reply to you there. While it remains enabled, the same message and certificate PDF are also sent to the service operator's private messaging group. Developer test submissions are delivered the same way and clearly marked as tests without payment.

Our payment provider processes payment details directly. curse.free does not receive your full card number. Our hosting provider hosts the website and processes network information needed to serve and protect it. These providers and the messaging services we use may process information outside your country under their own privacy terms.

Browser storage and retention

Essential session cookies remember language, connect payments to your browser and enforce the free-use limit. Session storage holds drafts. Your certificates, including optional photos, are kept in this browser's local storage for 1 day so that their private links keep working, and are then deleted. No advertising or analytics cookies are used by this application. Closing your browser session normally clears session storage; downloaded certificates remain on your device until you delete them.

When submission delivery is configured, pending request data expires from our delivery store after 1 day. After delivery, that store retains a minimal delivery record for up to 1 day instead of the form details and photo. Copies sent to the messaging group and the customer-messaging platform remain there until deleted. Certificates are never published or posted on social media; the certificates on our social media pages are samples. Payment providers retain their own transaction records.

When enabled, an automatic check by our hosting provider confirms that free and test requests are made by a person rather than an automated program; it processes browser and connection signals under that provider's privacy policy and is usually invisible. To limit repeated free requests, we retain a keyed hash of the connection IP address (for IPv6, of its /64 network prefix) and a pseudonymous claim identifier while the free-use restriction remains active. We do not store the raw IP address in this limit record or send it to the messaging group. This record survives cookie deletion and browser closure; people sharing an IP address share the allowance. Test submissions and paid requests do not consume this allowance. Contact support to request review or deletion of a restriction.

Text generation and translations

AI models run by our hosting provider generate shared ritual text from generic instructions about language and ritual type. Names, photos and form text are not sent to the text-generation model. The Generate button uses cached AI text when available and local templates otherwise; that shared AI text can be machine-translated by the same AI models into the language shown on your certificate. When delivery is enabled, the reason, ritual text, industry and intention you submit are machine-translated into Ukrainian by these AI models for the service operator. Names, dates, websites and photos are not sent for translation, and the translation is kept only with the pending delivery record. Public website copy, including FAQs, footers and these Privacy and Terms pages, is translated by hand; testimonials, and any part without a hand translation yet (for example right after an edit), are translated automatically by these AI models. No other translation service is used. The English version of Privacy and Terms prevails.

Consultations (Ask a Witch)

When you open the chat, with the chat button or Ask a Witch, the chat widget of the customer-messaging platform we use loads from that platform's servers. It stores its own cookies in your browser so that your conversation continues when you return; on later visits the widget then loads by itself. If a chat was made for your ritual request, the widget receives it on your confirmation page and loads there, so that you find the witch's replies in it. In the chat, you choose between a consultation and a question about a ritual or the website. What you write in the chat, including the optional date, time and place of birth for a consultation, any email address you leave with a question so that we can reply, and any name you give, is stored on that platform and read by the witch and our team. A random consultation reference, kept in your browser's local storage, links the chat to your reservation on this website.

If you write to us on WhatsApp, to continue a consultation or with a question, your messages reach the witch's own WhatsApp account, +1 941 646 2613, which is connected to messaging-integration services we use to send and receive WhatsApp messages; a second service takes over when the first is unavailable. When enabled, your one-to-one chat with that number, including the witch's replies, photos, files and voice messages, is copied into our customer-messaging platform, where the witch and our team read and answer it; replies written there reach you on WhatsApp through those services. The copy, with your WhatsApp name and number, stays on the platform until deleted. If you continue a consultation from the web chat on WhatsApp, or the other way round, for example with your consultation reference, both chats are kept under one contact on that platform. Automatic messages are sent only in a new chat with that number, after a message that mentions curse.free, and in chats that contain a consultation reference. In a new chat, or after such a message, they first ask whether you would like a consultation or have a question about a ritual or the website; for a consultation, they then invite you to send your date, time and place of birth, which is optional. For consultations, they also send reservation and booking links. WhatsApp and the integration services process messages under their own terms and privacy policies. If you write to curse.free on Instagram, or to the curse.free page on LinkedIn, your messages reach our accounts there through the same messaging-integration services. Your one-to-one chat, with your Instagram or LinkedIn name and profile, is then copied into our customer-messaging platform in the same way, replies written there reach you in that chat, and automatic messages there tell you how to book or reserve a consultation or ask a question about a ritual or the website. If you continue a consultation there with your consultation reference, its chats are kept under one contact on that platform. Instagram and LinkedIn process messages under their own terms and privacy policies.

When booking is available, the times offered follow the working hours and days off that the witch sets on curse.free. Your booking (its time and consultation reference) is kept with the consultation records, and shortly before the booked time you get a reminder in the chat where you booked.

To reserve a consultation, our payment provider places a hold on your card and keeps the card on file until the consultation is settled, so that minutes beyond the reservation can be charged; the card is then removed. curse.free does not receive your full card number. Consultation records (reference, status, times, minutes and amounts) are kept in our hosting provider's data store for up to 30 days and booking records for up to 9 days, apart from payment records the law requires us to keep. Automatic chat messages are translated into your language by hand, or by our hosting provider's AI models where no hand translation exists; what you write is not sent for translation. The service operator receives short notices about new requests, bookings and charges in a private messaging group.

Your choices and rights

Photos and most fields are optional. You can hide individual fields on your certificate before downloading it; this does not remove information already submitted. Where applicable, you can request access, correction, deletion or restriction, object to processing, request portability, and complain to your local data protection authority. For these requests and any other inquiry, write to the service operator at contact@curse.free. Emails are kept on our customer-messaging platform, under the contact with your email address, and answered from there; the first automatic reply asks whether your message is a technical question about a ritual or the website, and for consultations it sends the same information and links as the chats. If you message our Telegram bot, your message, with your Telegram name, username, user ID and language, is forwarded to the service operator's private group together with a Ukrainian machine translation by our hosting provider's AI models, and your user ID is kept for up to 30 days so that replies reach you; where the bot is connected to our customer-messaging platform instead, your messages and those details are stored on that platform and answered there. Our Telegram bot sends the same automatic replies as our Instagram account and LinkedIn page.

Processing necessary to deliver a requested paid service supports performance of that service; essential security and abuse prevention support our legitimate interests. Applicable legal obligations may require payment records to be retained. This notice does not waive your statutory rights.