Privacy Policy
What an account keeps
An email address, a display name taken from it, the readings on your account, and the record of every purchase and spend. No password is ever set, so none is stored. Sign-in codes are kept only as a hash and only for ten minutes.
Your readings
Your question and the cards you drew are sent to the reading model for as long as it takes to write the reading back to you. A reading you have unlocked is kept on your account - the question, the cards, what you told the deck before asking, the reading’s words and your follow-up questions with their answers - so you can open it again from any device. It stays until you forget it from your account (Your readings) or delete the account, and either removes it outright. A reading that was never unlocked is not kept at all - the cards stay in the page and nothing about it reaches your account. “Pick up where you left off” offers back the readings you have unlocked, and nothing else.
Shared readings
A reading is shown at a public link only if you choose to share it. When you press Share on a reading you have unlocked, a copy of the cards you chose to include, your question and the reading’s words is placed at a link anyone can open. Your follow-up questions are never part of the link. You can take a shared reading down at any time from your account; the link then stops working. Forgetting the reading, or deleting your account, takes the link down with it.
Drawing without an account
Drawing needs no account at all: the question, the cards and the spread stay in the page, and nothing about them is written down. An account is only asked for at the door, when the reading is unlocked.
Payment
Payments are taken by Stripe on Stripe’s own pages. Card details never touch this server; we keep the Stripe customer id, what was bought, and whether it cleared.
Deleting your account
Your account, every way of signing in, and every session are deleted outright. The purchase record is kept but unlinked from you, and Stripe keeps its own record of payments already made - receipts have to match card statements, and that record is what answers a dispute.
Cookies and storage
Signing in sets one cookie, which the page itself cannot read and which is what keeps you signed in across tabs. No analytics, no advertising, nothing shared.
Third parties
No analytics and no advertising. Four outbound calls: the reading, to the model that writes it; the payment, to Stripe; the sign-in code, to the mail provider; and, if you choose one, the sign-in itself, to Google or Discord.