Translated for your convenience — the English version is the authoritative version and prevails if there is any difference.
The Esoteric Eye · Effective 2026-10-01
This policy explains what The Esoteric Eye (“we”) collects, what we do with it, and what stays on your device. We built the Service so that most of it stays with you.
1. What you give us
Birth details — a first name, birth date, birth time (if known), birth place, and optionally sex. These are what the readings are computed from.
Your email address and a password — only if you create an account. You set a password to sign in; it is stored securely (hashed) by our authentication provider, never in plain text. We can also email you a one-time sign-in link.
Questions and headings — anything you type into Ask the Eye, the Compass, or Find your place.
A palm, symbol, or plant or stone photo — only if you use a camera reading (a palm reading, naming a symbol, or the apothecary). It is sent once for that reading and we do not keep it.
A second person’s birth details — only if you request a bond reading.
Voice — if you speak a question, your browser’s own speech recognition turns it into text. We never receive the audio; some browsers send it to their vendor (for example Google or Apple) to transcribe.
2. What stays on your device
On your device, your browser’s local storage keeps your birth record, the computed chart, the readings you have opened, your portrait image, your chosen heading, and your language, voice, sound, and 18-or-older preferences. If you do not create an account, this stays only on your device — clearing your browser’s site data for the Service removes it. If you create an account, your birth record — and any other charts you save to your Library — is also saved on our side (via Supabase) so it can follow you across your devices; see section 5. Generated readings and portrait images are also cached on our servers by a content fingerprint of the chart — not by who you are — so we do not pay to regenerate the same result; see the Netlify entry in section 3. You can remove the data we hold by deleting your account (section 8).
3. What we send to our providers
To run the Service and produce a reading, we send the relevant data to these processors, who act on our instructions:
Anthropic (api.anthropic.com) — receives the computed chart facts (derived from your birth details and first name), your questions, and, for a camera reading (a palm, a symbol, or a plant or stone), the photo. It writes the readings.
OpenAI (api.openai.com) — receives a text description of your chart to paint your portrait image, and, as a fallback voice, the text of a reading to speak it.
ElevenLabs (api.elevenlabs.io) — receives the text of a reading to speak it in the Eye’s voice.
Open-Meteo (geocoding-api.open-meteo.com) — receives only the place name you type, to find its coordinates and time zone.
Supabase — hosts our accounts and database. If you create an account, it holds your email address, your purchase and access records, your saved birth record and any other charts you save to your Library (each a name, date, time, and place of birth) so they can follow you across devices, your notification subscription if you turn on daily notifications, and it sends your magic-link sign-in email.
Gumroad — our payment processor and merchant of record. If you buy, it runs the checkout and holds your payment details; we never see your full card number. It notifies the Service of a completed purchase (your email, the product, and its status) so we can grant and honour your access.
Sentry — error monitoring. If something breaks, it receives technical diagnostic data (the error, the page, and browser type) so we can fix it. We have configured it not to send personal data such as your birth details.
Netlify — hosts the Service, keeps standard server logs (IP address, request path, time, and errors) for a limited period, and caches generated content by a content fingerprint so we do not regenerate it — this includes generated reading text, portrait images, and voice audio, keyed by a digest of the chart rather than by your identity.
RevenueCat, Google Play and the App Store — if you subscribe inside the mobile app, the payment is handled by Google Play (or, on Apple devices, the App Store), which holds your payment details; we never see your card number. RevenueCat verifies the purchase and keeps your subscription status current against your account — it receives your account ID, the product, and the purchase and renewal status — so we can grant and honour your access.
These providers process the data under their own terms. We do not sell your data, and we do not share it with advertisers or data brokers. We do not use your readings to train any model.
4. Cookies
We use only functional cookies — no advertising or analytics trackers:
eye_ent — a signed token recording which parts of the Service you may open. It carries no personal details.
eye_acct — if you sign in, a signed session that records your account so your access stays current across visits. It holds no password and no birth details.
eye_lic — if you unlock with a purchase license key, the key is kept so we can quietly re-check that your purchase is still active.
5. What we keep on our side
If you create an account, we store your email address, a record of what you purchased, your access grants, and your birth record and any other charts you save to your Library in our database (via Supabase), so your account and charts can follow you across devices. If you turn on daily notifications, we also store your notification subscription so we can send them. Generated readings and portrait images are cached on our servers (via Netlify) by a content fingerprint of the chart — not tied to your identity — so we do not pay to regenerate them. Your payment details are held by our payment processor — Gumroad on the web, or the App Store or Google Play if you subscribe in the mobile app — and we never see your full card number; we keep a record of what you bought so we can honour it and answer refund requests. Requests are counted briefly by IP address to prevent abuse, and our hosting provider keeps its server logs. You can remove the account data we hold at any time by deleting your account (section 8).
6. Safety
If something you type suggests you may be in crisis, the Service shows crisis resources instead of a reading. It is not a crisis service and no person monitors it; please contact 988 (US) or your local emergency number.
7. Children
The Service is for adults 18 and older. We do not knowingly collect information from anyone younger.
8. Your choices and rights
Clear your browser’s site data for the Service to erase everything stored on your device.
Decline the camera readings (palm, symbol, apothecary), voice, and portrait features; the rest of the Service works without them.
Delete your account and all its data at any time from inside the app — open the More section of your profile and choose “Delete account.” You can also ask us what we hold about you, or ask us to delete it for you, via Contact. Where laws such as the GDPR or the CCPA apply to you, you have the rights they describe, and we will honour them.
9. Where your data is processed
We are based in the United States and our providers process data there. If you use the Service from elsewhere, your data is transferred to and processed in the United States.
10. Changes
We will update this page when our practices change; the effective date above tells you when.