Privacy Policy

Effective: 2026-05-17

This Privacy Policy explains how IChing Oracle Chat ("we," "our," or "us") collects, uses, and protects your information when you use ichingoracle.chat. If you have questions, contact us at ichingoracle.canal353@passmail.net.

1. Information we collect

  • Account information: email address, display name (if you register or sign in via Google).
  • Usage data: IP address, browser type, device info, pages visited.
  • Readings & interactions: questions you submit, hexagrams generated, AI chat messages.
  • Payment information: processed by Stripe. We do not store card numbers.
  • Cookies and similar: see section 5.

2. How we use your information

We use it to provide the I Ching reading and chat services, improve the product, communicate with you about your account, and meet legal obligations. We do not sell your personal data.

3. Legal bases (GDPR / UK GDPR)

  • Contract (Art 6(1)(b)): providing the service you signed up for.
  • Consent (Art 6(1)(a)): analytics and advertising cookies; marketing emails.
  • Legitimate interests (Art 6(1)(f)): security, fraud prevention, service improvement.
  • Legal obligation (Art 6(1)(c)): responding to lawful requests.

4. Who we share information with

We share limited information with the following processors and sub-processors:

  • Supabase — authentication and database hosting.
  • Stripe — payment processing.
  • Cloudflare — content delivery, DDoS protection, analytics.
  • OpenAI — AI interpretation of readings (we send your question and hexagram, not your name or email).
  • Google AdSense and Google Publisher Tag (Google Ireland Ltd / Google LLC) — advertising. Only loaded if you opt in to marketing cookies.
  • Google Analytics 4 and Google Tag Manager (Google Ireland Ltd / Google LLC) — analytics. Only loaded if you opt in to analytics cookies.

We disclose information to legal authorities when required by law.

5. Cookies and tracking

We use three categories of cookies:

  • Necessary (always on): session auth, consent storage. No tracking.
  • Analytics (opt-in): Google Analytics 4, Google Tag Manager.
  • Marketing (opt-in): Google AdSense, Google Publisher Tag.

You can change your choices any time using the Privacy settings link in the footer. We expose your choices to ad partners via the IAB TCF v2.2 (__tcfapi) and IAB CCPA (__uspapi) standard interfaces.

6. International data transfers

Your information may be processed outside your country. We rely on EU Standard Contractual Clauses with our US processors.

7. Data retention

  • Account data: while your account is active, then up to 30 days after deletion request.
  • Readings & chat: while your account is active; you can delete individual readings any time.
  • Payment records: 7 years (legal retention obligation for tax purposes).
  • Cookie preferences: until you change them or clear your browser storage.

8. Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to access, correct, delete, port, and restrict processing of your personal data, plus the right to object and to withdraw consent. Contact us at ichingoracle.canal353@passmail.net.

You also have the right to lodge a complaint with your national data protection authority.

Your Privacy Choices (CCPA / California, plus CO, VA, CT, UT, TX, OR)

If you are a California resident or live in another US state with a comprehensive privacy law, you have the right to:

  • Know what personal information we collect and how we use it.
  • Delete personal information we have about you.
  • Correct inaccurate personal information.
  • Opt out of "sharing" of personal information for cross-context behavioral advertising — use the Privacy settings footer link and toggle Marketing off.
  • Non-discrimination for exercising your rights.

We do not sell personal information. To exercise any of these rights, email ichingoracle.canal353@passmail.net.

9. Security

We use TLS for all traffic, encrypt data at rest with our infrastructure providers, and apply least-privilege access. No system is perfectly secure; we cannot guarantee absolute security.

10. Children's privacy

Our service is not directed to children under 13 (US) or 16 (EU/UK). We do not knowingly collect data from anyone under those ages.

11. Changes

If we make material changes we will update the effective date above and, where appropriate, notify you in-product.

12. Contact

Questions, requests, or complaints? Email ichingoracle.canal353@passmail.net.