Privacy policy
Updated 24 October 2026
Data controller
The owner of Varta. Contact us about privacy.
Data and purposes
For your account and subscription we store your email, protected password hash, plan and access dates. Reminders use watched countries, delivery preferences, status profiles, dates, household details, deadlines and notes. Optional details you provide (employment, pension status, car, income from Ukraine and passport expiry) help select reminders. You can change or remove them. Document scans and numbers are not needed; do not enter them in notes or support messages.
Telegram, email and support
When Telegram is connected, we store the chat ID, language, connection date and delivery status. Notification history and retries store the text, time, channel, result and technical error. Email delivery passes the required data to Brevo. Support forms contain your message, page and optional email; the message is also forwarded to the service owner via Telegram.
Payments and providers
Ko-fi processes payments. Varta receives the payer email, transaction identifiers, plan, amount, currency and processing result, but no card details. Hetzner hosts the server and primary backups; additional encrypted copies are kept on the owner’s computer. Brevo delivers email and Telegram delivers messages. Providers receive data needed for their function. Telegram and Ko-fi may process data outside the EEA under their own policies.
Legal bases
Accounts, payment, support and requested reminders are necessary to perform our contract. Optional profile information and notification channels follow your choices and can be disabled in settings. Technical records serve our legitimate interest in account protection, troubleshooting and reliable delivery. Reminder matching uses the country, dates and flags you enter; it does not decide your legal status or benefit eligibility.
Cookies and local storage
Cookies support login and language preferences, plus two short payment markers that hold nothing about you: which plan you chose on the pricing page (7 days) and that you just went to pay in Ko-fi (15 minutes, so the payment button is not shown twice). We do not retain advertising click or campaign identifiers in accounts or export them to advertising platforms; legacy attribution cookies are removed when you visit. The anonymous counters (see below) use no cookies. Transition navigator answers and checklist progress stay in your browser; deadlines you explicitly add are saved to your account. Clear browser site data to remove local progress. The cancellation page sets two more short service cookies for the statement — see “Cancellation and withdrawal statements”.
Anonymous counters
To learn whether the site helps, we count a few events: opening the pricing or sign-up page, an offer card being shown, clicking a “Deadline reminders” button, choosing a plan and using “Send to family” (only which messenger was chosen, never the link or text). Your browser sends only the event name, the place on the site (for example “menu” or “date check”), the page’s country code and the language. The database keeps just a daily number — for example, “on 23 October the pricing page was opened 12 times from the menu”. No cookies are set or read for this, we do not record your IP address or browser details, and these numbers are not linked to your account. Requests from known bots are discarded. If your browser sends Do Not Track or Global Privacy Control, the counters send nothing. When you register, your account keeps only the name of the place on the site you came from — never other sites’ addresses or advertising tags. In the owner’s daily report, sign-ups, payments, Telegram connections and delivered reminders appear only as daily totals. Individual account and payment records (including this sign-up place and alerts about payments that need attention) remain available to the service owner for support and payment handling, as described above. The legal basis is our legitimate interest in knowing which pages are useful.
Partner links and our channels
A partner link (for example, Wise for money transfers) goes through a /go address on the Varta site. That click is counted by the same anonymous counter: the day, the partner, the place on the site (your account or the transition navigator) and the page’s country code — no IP address, browser details or account. The partner receives only the name of the place on the site, nothing about you; once you follow the link, the partner’s rules and those of its affiliate network Partnerize apply, including their cookies. In the same way we count how many visits came from our Telegram channel or bot: only the source, the language and the day; the site removes the source tag from the address straight away, so it never ends up in a link you share. If your browser sends Do Not Track or Global Privacy Control, these visits are not counted and the links work as usual. The legal basis is our legitimate interest in knowing which pages and channels are useful.
Retention and deletion
Profile, deadline, delivery and Varta payment records remain while your account exists. Password-confirmed deletion removes the account and related records from the working database. Recovery backups may retain earlier data for up to 56 days. Support messages are kept separately while needed to answer your request or resolve a dispute; contact us to locate and delete them. Ko-fi and Telegram records follow their own policies. Account deletion does not cancel recurring Ko-fi payments: you can cancel them without signing in on the “Cancel subscription” page.
Cancellation and withdrawal statements
When you cancel the subscription or withdraw from the contract on the “Cancel subscription” page, we keep the statement itself: the email you paid from, your name and payment reference if you gave them, the type of statement, the reason for an early cancellation (if any), the language, the time of submission and the reference number. We also record whether a subscription was found for this address or payment reference, what was done with it, its state before the statement (so that the “It wasn’t me” link in the email can restore it) and whether the confirmation email was sent. If only the payment reference matched, the email with the details goes to the address the subscription was paid from, and we record that address in the statement too. We do not keep your IP address or browser details. The confirmation goes to the address you gave via Brevo, and a short notice about the statement reaches the service owner via Telegram. The legal basis is performing the contract and our legal obligation to accept the statement and acknowledge its receipt. Statements are kept for 3 years from submission (the general limitation period for contract disputes), even if the account is deleted, and are then deleted automatically. While you fill in the form, the site keeps two service cookies: the draft statement (30 minutes) and the confirmation shown on screen (2 hours); both are signed and not readable by page scripts.
Your rights
You can access and export your data, correct it, request erasure or restricted processing, object to processing, and withdraw consent where it is the legal basis. Use the support form; we may need to verify that the data belongs to you. You may also complain to the data protection authority in your country of residence.