Privacy Policy

1. What we collect

To offer sign-in, subscriptions, and readings we may process:

• Email and basic account data (display name, login identifier, membership status).
• Payment records handled by the processor; we do not store full card numbers.
• Anonymous or de-identified reading-journal metadata (spread type, timestamps, the minimum needed to restore history).
• Questions and story context you type, used to generate that reading and—if you save it—your journal.

2. Cookies

Essential cookies remember language, session, and basic security. Analytics or experience cookies, if used, only help improve the hall and are not used to build profiles for sale.

You may refuse non-essential cookies in your browser; some login or locale memory may then stop working.

3. Purpose and legal bases

We use data to provide readings and memberships, handle payment and refund disputes, support you, prevent fraud and abuse, meet legal duties, and improve the experience where you have agreed.

Bases include contract, legitimate interests (security and operations), and consent where required.

4. Protection pledge

We will never sell your personal data or your reading questions to third parties.

We share the minimum needed with contracted processors (payments, hosting, email verification). They may not resell the data for marketing.

5. Your rights

Under the GDPR and similar laws you may request access, correction, erasure, restriction, portability, or object to certain processing. Consent can be withdrawn at any time without affecting prior lawfulness.

Email support; we will verify identity and reply within a reasonable time.

6. Retention

Account data is kept while the account exists. Journals follow your plan capacity and deletions you make. Payment records are kept for statutory periods. When no longer needed we delete or de-identify.