Privacy Policy

1. Information we collect

• Account information: name, email address, and password (hashed - see §5).
• Birth & person data: birth date, time, and place, and names for each person you register, used solely to run the numerology/astrology/ esoteric calculations and readings you request.
• Payment metadata: purchase history, plan/credit balances, and order records. We never receive or store your full card number - see §3.
• Usage data: which pages are read and how people arrive (the referring website or campaign, not its full address), the steps reached in checkout, how fast pages load, and the kind of device, browser, operating system and language setting used, with an approximate location (country and region) worked out from your IP address by our network provider; collected by our own statistics, and, if you consent, a tracking pixel and Google Analytics (see §6). We do not store your IP address or full browser details for these statistics.
• Generated content: the readings, translations, and calculation results produced for you, stored so you can revisit and export them.
• Geomancy questions: the question you write when you make a geomancy casting, stored encrypted with the casting so you can come back to it, and added to a reading that includes geomancy when the reading is written. Geomancy does not answer medical, financial or legal questions, so please leave out questions about your health or about other people. You can delete a casting, and its question, at any time; a reading already written from it keeps its text until you delete the reading.
• Seven Rays questionnaire answers: your answers to the Seven Rays questionnaire and the rays you confirm afterwards, stored so you can retake it and see what changed. Readings that include Seven Rays use the confirmed rays, not the answers. You can delete an assessment, with its answers, at any time.

2. How we use information

We use the information above to: provide and operate the Service (run calculations, generate readings, process payments); communicate with you (transactional emails, receipts, account notices); maintain security and prevent abuse; and improve the Service.

3. Third parties we share data with (subprocessors)

We use the following subprocessors to operate the Service:

• Stripe - payment processing. Stripe is PCI-DSS compliant; we never see or store your full card number.
• Amazon Web Services (AWS S3) - storage of avatars and generated PDF exports.
• OpenAI, Anthropic, and Google (Gemini) - AI providers used to generate readings and translations. Birth data (dates, times, places), names and, for readings that include geomancy, the question of the person's geomancy casting, and for readings that include Seven Rays, the rays the person confirmed (not their answers) are sent to the selected AI provider as part of generating that reading. We do not sell this data, and we only send what's needed to produce the requested reading.
• Amazon SES - transactional email delivery (receipts, account and security notices).
• Cloudflare - our network and security provider, which handles every request to the Service and works out your approximate location (country and region) from your IP address.
• Google Analytics - aggregate website usage analytics (pages viewed, general device/browser/location information). Only active if you accept it via the cookie banner; see §6.

We do not sell your personal information to third parties.

4. Data retention & deletion

You can request account deletion at any time from account settings. Deletion is a two-phase process: requesting it immediately disables the account and starts a 30-day grace period during which you can log back in and cancel the deletion; if the 30 days lapse, all associated data - people, calculations, readings, orders, credit history, and the account itself - is permanently and irreversibly erased. You'll receive an email when deletion is scheduled and another confirming the permanent erasure.

Statistics records of individual visits (§6) are kept for 25 months for visitors in the EU and EEA, 90 days for visitors in the UK or whose country we cannot tell, and 400 days elsewhere. After that only daily totals, which contain no individual, are kept.

5. Security

• Data is encrypted in transit (TLS) and sensitive data at rest is encrypted using AES-256.
• Passwords are never stored in plain text - we use industry-standard hashing (bcrypt/Argon2).
• We do not store credit card numbers; all card handling is delegated to PCI-compliant Stripe.
• Access to production data is restricted to authorized personnel.

6. Cookies & tracking

Necessary. We use essential cookies for login sessions and security (these cannot be disabled without breaking the Service). When you arrive through a referral link, we set a referral_code cookie for up to 30 days so the referral discount can be applied when you sign up.

Our statistics. We run our own statistics, on our own servers and those of our network provider (Cloudflare), to understand overall use of the Service and improve it: which pages are read, how people arrive (the referring website or campaign link, not the full address), the steps people reach in checkout, where on a page people click or scroll, how fast pages load, and the kind of device, browser, operating system and language setting used. Your approximate location (country and region) is worked out from your IP address by Cloudflare; we do not store your IP address or full browser details, and these statistics use no advertising cookies and share nothing with any outside company. Our page-statistics script (Umami, run on our own servers) sends your screen size and language, and groups the pages you open in one day into a visit, using a code that changes daily and is not linked to your account. We also set a first_touch cookie for up to 12 months recording the first page and campaign you arrived on, which we add to your account if you sign up, so we know which of our pages and campaigns bring people to EsoTerrier.

Outside the EU, the EEA and the UK, these statistics also record, if you are signed in, your account with the public pages you read, and a click identifier from an advertisement (such as Google's gclid) or a referral code you arrived with. In the EU, the EEA and the UK, and wherever we cannot tell your country, they record only whether you were signed in and which advertising platform a click came from.

You can opt out of these statistics at any time with Privacy choices (also in the footer of every page); we then stop recording visits from that browser and set no first_touch cookie. We treat a Global Privacy Control signal from your browser as the same opt-out. We do not track you across other websites.

Analytics and marketing. With your consent via the cookie banner, we additionally use a first-party tracking pixel and Google Analytics for deeper usage insight; both are off by default and only activate if you accept, and Google Analytics may then collect information about your visit. You can change any of these choices at any time with Privacy choices.

7. AI-generated content disclosure

Readings and translations are generated by AI, not a human. They are labeled as AI-generated in the product and in exported PDFs. See our Terms of Service §5 for more detail on AI usage and §2 for the "entertainment/education only" disclaimer.

8. Your rights (GDPR / CCPA)

Depending on your location, you may have the right to:

• Access the personal information we hold about you;
• Request correction of inaccurate information (via account settings or by contacting us);
• Request deletion of your account and data (§4);
• Object to or restrict certain processing, including our statistics at any time with Privacy choices (§6); and
• Data portability, where applicable.

To exercise any of these rights, email privacy@esoterrier.com.

9. Children's privacy

The Service is not directed to individuals under 18. We do not knowingly collect information from anyone under 18; account creation requires confirming you meet this age requirement.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will require you to re-accept the policy the next time you use the Service before continuing.

11. Contact

Privacy questions or data requests: email privacy@esoterrier.com. General support: support@esoterrier.com.