Privacy Policy

Last updated: 3 October 2026

✦

This Privacy Policy explains how In-Betweens ("we", "us", or "our") collects, uses, and protects your personal information when you use In-Betweens (the "Service") at in-betweens.cc.

You can use In-Betweens without an account. Creating an account is optional — it is what lets us save your spreads and sync them across your devices (see Section 2).

We respect your privacy and handle personal data in accordance with Taiwan's Personal Data Protection Act (PDPA) and, where applicable, the EU General Data Protection Regulation (GDPR).

By using the Service, you agree to the collection and use of information as described in this Policy. If you do not agree, please do not use the Service.

1. Who We Are (Data Controller)

The party responsible for your personal data is:

In-Betweens Contact form: in-betweens.cc/contact Website: in-betweens.cc

For any privacy question or to exercise your rights, please use the contact form on the Service at in-betweens.cc/contact.

2. What Information We Collect

We collect the following categories of information:

a. Account information (via Google Sign-In)

We use Google Sign-In for account creation and login. When you sign in with your Google account, Google provides us with:

  • Your name
  • Your email address
  • Your Google profile picture (if available)
  • A unique Google account identifier

We only request basic profile information. We never receive or store your Google password. Your use of Google Sign-In is also governed by Google's own Privacy Policy and Terms of Service.

b. Card draws and spreads you create

  • Your card draws and saved spreads, including any notes you add to them.
  • If you are signed in, these are stored in your account so they sync across your devices.
  • If you use the Service without signing in, they are stored locally in your browser on the device you used — they are not sent to or stored by us, and so will not appear on your other devices.

c. Technical and usage information (collected automatically)

  • IP address, browser type, device and operating system information
  • Pages visited, features used, and general usage activity
  • Cookies and similar technologies (see Section 6)

We do not currently collect payment or financial information, because the Service does not currently offer paid features. If we introduce payments in the future, we will update this Policy and disclose how any payment data is handled (typically by a third-party payment processor).

We do not intentionally collect sensitive personal data (such as data about health, race, religion, or political views). Please do not enter such information into your notes or saved readings.

3. How We Use Your Information

We use your information to:

  • Create and manage your Account and authenticate your logins;
  • Provide the core Service, including generating card draws and saving your readings;
  • Maintain, secure, and improve the Service and troubleshoot problems;
  • Communicate with you about your Account or important changes to the Service;
  • Detect, prevent, and address fraud, abuse, or security issues; and
  • Comply with legal obligations.

We do not sell your personal data. We do not use your saved readings or notes for advertising.

4. Legal Bases for Processing

Where the GDPR applies, we rely on the following legal bases:

  • Performance of a contract — to provide the Service you signed up for (e.g. managing your Account and saved readings).
  • Consent — for optional analytics/cookies and any marketing communications; you may withdraw consent at any time.
  • Legitimate interests — to secure and improve the Service, provided these interests are not overridden by your rights.
  • Legal obligation — where we must process data to comply with the law.

Where Taiwan's PDPA applies, we collect and use your personal data within the scope of the purposes described above and in accordance with the PDPA.

5. Third-Party Service Providers

We use trusted third-party providers to operate the Service. These providers process data on our behalf and are only permitted to use it to provide services to us. Depending on the features enabled, these may include:

  • Sign-in / identity provider: Google (Google Sign-In) — verifies your identity when you log in and provides the basic profile information described in Section 2(a). See Google's Privacy Policy.
  • Hosting, infrastructure, and data storage: Cloudflare — hosts the website and stores your account and saved spreads. See Cloudflare's Privacy Policy.
  • Analytics: Google Analytics 4 (GA4) — helps us understand how visitors use the Service in aggregate. GA4 sets cookies and collects usage and device data, which is processed by Google; see Google's Privacy Policy. You can opt out using Google's browser opt-out add-on.

Each provider maintains its own privacy and security practices. We select providers that offer appropriate protections for your data.

6. Cookies and Similar Technologies

We use cookies and similar technologies to:

  • Keep you signed in and maintain your session (essential — required for the Service to work);
  • Remember your preferences; and
  • Understand aggregate usage, if analytics are enabled (optional).

You can control or delete cookies through your browser settings. Disabling essential cookies may prevent you from staying logged in or using core features.

7. How We Share Your Information

We do not sell or rent your personal data. We may share it only:

  • With the service providers listed in Section 5, for the purposes described;
  • If required by law, regulation, legal process, or a lawful government request;
  • To protect the rights, safety, or property of us, our users, or the public; or
  • In connection with a merger, acquisition, or sale of assets, in which case we will notify you and this Policy will continue to protect your data.

8. International Data Transfers

Our service providers may store or process data on servers located outside Taiwan (for example, in the United States, the EU, or elsewhere). Where personal data is transferred internationally, we take reasonable steps to ensure it is protected consistently with this Policy and applicable law (for example, through appropriate contractual safeguards).

9. Data Retention

We keep your personal data for as long as your Account is active or as needed to provide the Service. If you ask us to delete your account (by contacting us through the form at in-betweens.cc/contact), we will delete or anonymise your personal data within a reasonable period, except where we are required to retain certain information to comply with legal obligations, resolve disputes, or enforce our agreements.

10. Data Security

We take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access — including encrypted connections (HTTPS), reputable and secured infrastructure providers, and our reliance on Google Sign-In, which means we never create or store any password of yours. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Your Rights

Subject to applicable law (including Taiwan's PDPA and, where relevant, the GDPR), you have the right to:

  • Access the personal data we hold about you and obtain a copy;
  • Correct inaccurate or incomplete data;
  • Delete your data ("right to be forgotten"), subject to legal exceptions;
  • Restrict or object to certain processing;
  • Withdraw consent at any time where processing is based on consent;
  • Data portability — receive your data in a structured, commonly used format (where the GDPR applies); and
  • Stop the collection, processing, or use of your data, and request cessation of use (under the PDPA).

You can access and update much of your Account information directly in your Account settings. To delete your account, or to exercise any other right, please contact us through the contact form at in-betweens.cc/contact. We will respond within the timeframes required by applicable law. You also have the right to lodge a complaint with your local data protection authority.

12. Children's Privacy

The Service is intended for users aged 18 and over. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us through the contact form at in-betweens.cc/contact and we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by posting a notice on the Service and/or emailing the address on your Account. Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

In-Betweens Contact form: in-betweens.cc/contact Website: in-betweens.cc