What we collect
Account email, hashed authentication credentials, the readings you request, the questions you submit for paid readings, and standard server logs (IP, request path, user agent). Birthdates entered for the personal full spread are consumed at draw time and are not persisted.
Why we collect it
To deliver readings, keep an account you can sign into, prevent abuse, run the site, and — if you opt in — send periodic notes about the practice.
Retention
Readings are retained for the lifetime of the account. Unfulfilled pending-reading inputs are purged after 24 hours. Server logs are retained for 30 days. Analytics events are anonymized after 90 days.
Your rights
You can request export or deletion of your data at any time. Refer to your local privacy law for the full set of rights available to you.
This is a draft. Final language will be reviewed by counsel before public launch.