Privacy Policy

The data controller is {{FOP_NAME}}, registration number {{FOP_REG_NUMBER}}, {{FOP_ADDRESS}}, Ukraine. For any question or request about your personal data, write to support@orakle.space.

• Account data: your email address and, if you sign in through Google or another sign-in provider, the name and profile picture that provider shares with us.
• Reading data: the questions you type, the spread you choose, the cards drawn, the generated reading, and the language it was written in. These are stored in your journal until you delete your account.
• Billing data: your plan, subscription status, and payment history. Your card details go directly to our payment provider, plata by mono (JSC Universal Bank); we never see or store full card numbers.
• Technical data: IP address, device and browser information, and request logs used for security, rate limiting, and troubleshooting. Error reports are scrubbed of personal data before they are stored.
• Cookies: described in section 11 below.

Readings are generated by an AI model (Google Gemini). To generate a reading, we send your question, the spread, and the drawn cards to the Google Gemini API. Google processes this data as a service provider (data processor) on our behalf under its API data protection terms in order to return the reading.

Before any card is drawn, we send your question, and nothing else, to OpenAI's Moderation API to check whether it asks how to harm someone or shows signs of a crisis. OpenAI processes it as a service provider (data processor) on our behalf and may keep it for up to 30 days for abuse monitoring under its API terms.

A tarot question can be personal. Please do not include details the reading does not need: other people's full names, health information, document numbers, financial account details. The reading works without them.

We process personal data on the following legal grounds:

• To provide the service you signed up for (performance of a contract): your account, readings, journal, and billing.
• To keep the service safe (legitimate interest): bot protection, rate limiting, safety screening of questions, error tracking, and abuse prevention.
• To understand how the site is used (legitimate interest): cookieless measurement of visits with PostHog. Until you accept analytics cookies, and after you decline them, PostHog sets nothing in your browser and counts you under an identifier derived from a hash that changes every day, so visits cannot be joined into a profile of you (section 11).
• With your consent: the analytics cookie that lets PostHog recognise your browser across visits (section 11). You can change your cookie preferences at any time from the "Cookie preferences" link in the footer.
• To meet legal obligations: tax and accounting records connected to payments.

We use a small set of service providers. Each one processes data only to run its part of the service:

• Supabase — authentication and database. Stores your account, readings, and journal.
• Google (Gemini API) — generates readings from your question and the drawn cards.
• OpenAI (Moderation API) — safety screening. Receives your question only, before the draw, to check it for requests to harm someone and for signs of a crisis. May keep it for up to 30 days for abuse monitoring.
• Vercel — hosting and content delivery.
• plata by mono (JSC Universal Bank) — payment processing. Receives the data needed to charge your card and prevent fraud.
• Cloudflare (Turnstile) — bot protection when a reading is generated.
• Upstash — rate limiting. Processes request identifiers, not reading content.
• BetterStack — error tracking. Receives error reports with personal data scrubbed out.
• PostHog (EU servers) — product analytics. Receives which pages are opened and what is done on them, never your questions or readings, and is configured not to store your IP address. Before you set your cookie preferences and after a decline this is cookieless and aggregate only; after an accept it also sets the cookie described in section 11.

We share data with no one else, unless the law requires us to.

Some of these providers store data outside Ukraine and the European Union, mainly in the United States. Where the GDPR applies to a transfer, we rely on the European Commission's Standard Contractual Clauses (SCCs) or on an adequacy decision such as the EU-U.S. Data Privacy Framework, where the provider is certified under it.

• Account data: until you delete your account.
• Readings and journal: until you delete your account.
• Technical and error logs: up to 90 days.
• Billing and tax records: for as long as Ukrainian tax and accounting law requires, even after account deletion.

You can delete your account in your account settings. Deletion removes your account data, readings, and journal.

All traffic between your browser and Orakle is encrypted (HTTPS). Data is stored with the providers listed in section 5, which encrypt it at rest, and access to production data is restricted to the operator. Your card details never reach our servers at all — they go directly to the payment provider.

No online service can promise absolute security. If a breach ever affects your personal data, we will inform you, and the relevant supervisory authority, as the law requires.

You have the right to:

• See the personal data we hold about you and get a copy of it.
• Correct data that is wrong.
• Delete your data ("right to erasure" or "right to be forgotten").
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time, where processing is based on consent.

To use any of these rights, write to support@orakle.space from the email address linked to your account. We respond within 30 days.

We verify every request before acting on it. A request sent from the email address linked to your account is usually verification enough; if it comes from another address or concerns sensitive data, we may ask you to confirm it from the account email or to provide additional proof of identity. If someone submits a request on your behalf, we will ask for proof that they are authorized to act for you.

If you believe we handle your data unlawfully, you can complain to a supervisory authority: in the EU or EEA, your national data protection authority; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

If you live in a US state with a comprehensive privacy law (such as California, Colorado, Connecticut, Texas, or Virginia), you have rights that closely mirror section 9: to know what personal data we hold about you, to access and correct it, to delete it, to receive a copy in a portable format, and not to be treated worse for exercising any of these rights.

We do not sell personal data, share it for targeted advertising, or use it for profiling that produces legal or similarly significant effects. Because there is no sale or sharing, there is nothing to opt out of: opt-out preference signals such as the Global Privacy Control (GPC) do not alter how your data is processed, since your data is not passed to advertisers either way.

If we decline a request, you can appeal by replying to our response; we answer appeals within 45 days. If you disagree with the outcome, you can raise it with the attorney general of your state.

Essential cookies. These are required for the site to work and need no consent:

• Authentication cookies (Supabase; names start with "sb-") — keep you signed in. They last for the length of your session and refresh while you use the site.
• Locale cookie (NEXT_LOCALE) — remembers your language choice for up to 1 year.
• Guest reading cookie (orakle_guest) — holds the free reading you drew before creating an account, so you can come back to it and attach it to an account later; expires after 24 hours.
• Time zone cookie (orakle-tz) — stores the time zone your browser reports so dates are shown for your day rather than the server's; lasts up to 1 year.
• Cloudflare bot protection (__cf_bm, set when Turnstile runs) — distinguishes people from bots when a reading is generated; expires within about 30 minutes.

Analytics cookies. We measure how the site is used with PostHog. Until you make a choice in the cookie banner, and after you decline, PostHog sets nothing in your browser: no cookie, no local storage or session storage entry. Visits are still counted, under an identifier derived from a hash that changes every day and cannot be traced back to you. If you accept, PostHog sets a cookie whose name begins with "ph_" and holds a random identifier for your browser; it lasts up to 12 months, and PostHog keeps its working data in your browser's local storage and session storage as well. Visits from the same browser are then joined together.

Your choice itself is remembered by Orakle in your browser's local storage (under the key "orakle-cookie-preferences"), not in a cookie. You can change it at any time from the "Cookie preferences" link in the footer of every page or at the end of this policy; withdrawing an accept removes PostHog's cookie and identifier.

If Orakle is ever sold, merged into another business, or transferred to a new operator, your data would move with the service and would stay subject to this policy. We would tell you before such a transfer takes effect, and you could delete your account first if you do not want your data to move.

Orakle is for adults. You must be at least 18 years old to use it. We do not knowingly collect data from anyone under 18; if you believe we have, write to support@orakle.space and we will delete it.

When we change this policy, we post the new version here and update the date at the top. For significant changes we will also tell you in the app or by email.

{{FOP_NAME}}, registration number {{FOP_REG_NUMBER}}, {{FOP_ADDRESS}}, Ukraine. Email: support@orakle.space.