Privacy Policy

Last updated: 21 October 2026. This policy explains what information xMystic.com collects, why, and the choices you have. We keep data collection to what a reading-focused publication needs, and we do not sell your personal information.

1. Who is responsible

xMystic.com, 2219 Rimland Drive, Suite 301, Bellingham, WA 98226, United States, is the data controller for this website. Contact: [email protected].

2. Information we collect

XMystic does not offer reader member accounts or newsletters. You can read our articles without creating an account or joining a mailing list.

Information you give us

• Contact form: your name, email address, subject and message. Used only to reply to you.
• Comments: your name, email address, optional website, the comment text, and the IP address and browser string at the time of posting (collected by WordPress to help detect spam). Your name and comment are public; your email is not.

Information collected automatically

• Server and security logs: IP address, requested pages, timestamps and browser type, kept by our hosting provider, Cloudflare (content delivery and protection) and Wordfence (security). These help us keep the site available and block attacks.
• Jetpack analytics: Jetpack (Automattic) helps us understand article readership and referrals. Its processing can include IP address, browser information, pages visited, referring page, timestamps, language and country. The reports available to us present readership statistics rather than a list of identifiable visitors. Read the Automattic visitor privacy notice for more information.
• Cloudflare performance measurement: Cloudflare’s measurement beacon records page views and loading-performance information to help us understand how the website works for visitors. Cloudflare describes its Web Analytics service as cookie-free. This is separate from Cloudflare’s content-delivery and security services. See Cloudflare Web Analytics and Cloudflare’s privacy policy.
• Spam protection: Akismet (Automattic) and CAPTCHA checks are used for both comments and contact forms. Akismet may receive submission content and related information such as the sender’s name, email address, IP address and browser information to assess spam. CAPTCHA checks help distinguish human submissions from automated abuse. Please avoid including sensitive personal information in submissions.

3. Cookies

Cookies and similar technologies may support comment preferences, security and enabled third-party features. If you choose to save your details when commenting, WordPress can remember them for a later visit. Jetpack uses measurement technologies as described in Automattic’s visitor notice; Cloudflare Web Analytics does not use cookies for its measurement. Cloudflare security services are separate and may use security cookies. Embedded content can also send information to its provider when it loads. You can manage cookies in your browser; blocking them or scripts may affect forms, commenting or other features.

4. Affiliate links

Some links lead to psychic-reading or wellbeing services that pay us a commission if you sign up. When you follow such a link, the partner or its tracking network may set a cookie in your browser to attribute the referral. We receive aggregate reports (for example, that a sign-up occurred) but not your name, payment details or session history. Each partner has its own privacy policy, which we encourage you to read before registering.

5. How we use information

• To publish and maintain the site and its features.
• To respond to messages and requests.
• To display and moderate comments and to detect spam and abuse.
• To measure readership so we can improve guides.
• To comply with legal obligations and to establish or defend legal claims.

Where a legal basis is required, we rely on our legitimate interest in running a secure, useful publication, on your consent where you choose to contact us or comment, and on legal obligation where applicable.

6. Sharing

We share data only with service providers that help us operate the site (hosting, Cloudflare, Wordfence, Automattic for Jetpack and Akismet, our email provider), with affiliate networks as described above, and when required by law or to protect the rights and safety of our readers or ourselves. We do not sell personal information and we do not share it for cross-context behavioural advertising.

7. Retention

We keep messages and related records for as long as reasonably needed to handle the correspondence, maintain the site, address abuse and meet applicable legal obligations. Comments may remain published until removed through moderation or a deletion request. Log and analytics retention varies by service, purpose and provider settings. We do not promise a fixed retention period for all records. Contact us if you would like information about, or deletion of, a particular record.

8. Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or restrict the use of your personal information, to object to processing, to data portability, and to complain to a supervisory authority. We extend the core rights of access, correction and deletion to every reader regardless of location. To exercise them, email [email protected] from the address you used with us, or write to the postal address above. We will consider your request and respond as required by applicable law. We may need information to verify the request and locate the relevant records. We will not treat you unfairly for making a privacy request.

If you are a California resident, the California Consumer Privacy Act gives you the rights described above. We do not sell or share personal information as those terms are defined in that law.

9. International transfers

The site is hosted in the United States. If you visit from elsewhere, your information will be processed in the United States, where privacy laws may differ from those in your country. Our providers apply safeguards such as standard contractual clauses where required.

10. Children

The site is intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has sent us information, contact us and we will delete it.

11. Security

The site is served over HTTPS and protected by a web application firewall and security monitoring. No system is perfectly secure, so please do not send us sensitive information such as health details, payment data or government identifiers through the contact form.

12. Changes

We may update this policy as the site or the law changes. The date at the top shows the current version. Please review this page for the current policy.

13. Contact