Privacy

Last updated: 2026-04-27

We collect the minimum needed to write your reading: your birth date, your email, your focus area, and whichever optional details you chose to share. We use this data only to generate and deliver your report. We do not sell it, share it with advertisers, or use it to train external models. Readings and inputs are retained for 90 days so we can re-deliver if your email is lost, then deleted. Payment and tax records may be retained where legally required. To request earlier deletion, email us with the email address used at purchase. There are no user accounts — nothing to log into, nothing to revoke.

1. What we collect

Email, birth date, optional birth time, optional birth city, focus area, optional questions you write. A Stripe order ID after purchase. No tracking cookies, no fingerprinting.

2. Why

To generate your reading, deliver it to your inbox, and re-deliver if asked. That is the entire purpose of the data we hold.

3. Where it goes

Stored on Supabase (EU region). Sent to OpenAI for generation, to Stripe for payment processing, and to Resend for the delivery email. None of those vendors retain your inputs beyond what is necessary to provide the service we asked them for. We do not send your data to advertising platforms or analytics beyond the cookieless Plausible setup described below.

4. Retention

Inputs and the generated reading are retained for 90 days after purchase. After 90 days, an automated job deletes them. Payment and tax records may be retained where legally required (typically up to 10 years for EU VAT purposes). Order metadata required for tax compliance is retained for the period required by law and is anonymised where possible.

5. Right to delete

Email support@esoterica.report with subject “Data deletion request”. We confirm in 72 hours and delete within 7 days.

6. Right to access

Email the same address; we send you a copy of what we hold within 30 days.

7. Analytics

We use Plausible Analytics, EU-hosted and cookieless. No personal data leaves our servers to Plausible — we send only route names, referrer category, and event names from a fixed denylist-checked event catalog. No A/B testing, no session replay, no heatmaps.

8. Children

Esoterica is not intended for users under 16. Do not purchase if you are under 16.

9. Cookies

Strictly-necessary first-party cookie for purchase attribution (esoterica_attr, 30 days, SameSite=Lax). No third-party cookies. No banner needed under EU consent law because the only cookie we set is strictly-necessary.

10. Changes

Material changes are reflected in the “Last updated” date.

11. Contact

Write to us at support@esoterica.report.