Privacy Policy

Effective Date: February 16, 2026

Odin's Eye Enterprises LLC ("we," "us," or "our") operates Odin's Oracle (the "Service"). This Privacy Policy explains what data we collect, how we use it, and what rights you have. We take your privacy seriously — and we've written this policy to be clear about it.

1. Information We Collect

Category	Data	Purpose
Account	Email address	Authentication, communication
Birth Data	Date, time, and location of birth	Generating astrological readings
Decision Logs	Daily decisions and mood entries you submit	Pattern correlation and self-reflection tools
Usage Analytics	Pages visited, features used, device/browser info	Improving the Service
Payment	Handled entirely by Stripe — we never see or store your card number	Subscription billing

2. How We Store & Protect Your Data

• All data is hosted on Supabase (US-based servers) and encrypted at rest.
• Birth data receives an additional layer of application-level encryption due to its sensitive nature.
• We use HTTPS/TLS for all data in transit.
• Access to production data is restricted to authorized personnel only.

3. We Do Not Sell Your Data

We do not sell, rent, or trade your personal information. Period. This applies to all users regardless of location, including California residents under the CCPA.

4. Anonymous Aggregation & Collective Intelligence

Odin's Oracle includes a collective intelligence feature that shows aggregated decision and mood patterns. Here's how that works:

• Individual decision logs are stripped of all personally identifiable information before aggregation.
• Aggregated data cannot be traced back to any individual user.
• No PII is ever included in aggregate datasets.
• You contribute to collective patterns simply by using the Service; you may delete your data at any time (see Section 8).

5. Third-Party Services

We use the following third-party services to operate Odin's Oracle:

Provider	Purpose	Data Shared
Stripe	Payment processing	Payment info (directly to Stripe)
Supabase	Database & authentication	All stored data (encrypted)
Cloudflare	CDN & security	IP addresses, request metadata
Google Fonts	Typography	IP address (standard web request)

Each provider operates under their own privacy policy. We maintain data processor agreements with sub-processors as required by GDPR.

6. Cookies

We keep cookies minimal. The only cookie we set is an authentication session cookie — required to keep you logged in. We do not use tracking cookies, advertising cookies, or third-party analytics cookies.

7. Data Retention

• Active accounts: Your data is retained for as long as your account is active.
• Deleted accounts: All personal data is permanently purged within 30 days of account deletion.
• Anonymized aggregates: Because they contain no PII, aggregated data may persist after account deletion.

8. Your Rights

Regardless of where you live, you have the right to:

• Access — Request a copy of all data we hold about you
• Export — Download your data in a portable format
• Correct — Update or fix inaccurate data
• Delete — Request permanent deletion of your account and data

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.

9. GDPR (European Users)

If you are in the European Economic Area (EEA) or United Kingdom:

• Lawful basis: We process your data based on your consent, which you provide when creating an account and agreeing to this policy.
• Right to withdraw consent: You may withdraw consent at any time by deleting your account.
• Data portability: You may request your data in a machine-readable format.
• Right to lodge a complaint: You may file a complaint with your local data protection authority.
• Sub-processors: We maintain Data Processing Agreements (DPAs) with all sub-processors listed in Section 5.
• International transfers: Your data is stored on US servers. We rely on Standard Contractual Clauses (SCCs) where applicable.

10. CCPA (California Users)

If you are a California resident under the California Consumer Privacy Act:

• You have the right to know what personal information we collect and how it is used.
• You have the right to request deletion of your personal information.
• You have the right to opt out of the sale of personal information — though we do not sell personal data.
• We will not discriminate against you for exercising your CCPA rights.

11. Children's Privacy (COPPA)

Odin's Oracle is not directed at children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected data from a child under 13, we will delete it promptly. If you believe a child has provided us with personal data, please contact us immediately.

12. Data Breach Notification

In the unlikely event of a data breach affecting your personal information:

• We will notify affected users within 72 hours of becoming aware of the breach, in compliance with GDPR.
• We will notify the relevant supervisory authority where required.
• Notification will include: what happened, what data was affected, and what steps we are taking.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or in-app notification at least 30 days before they take effect. The "Effective Date" at the top will always reflect the latest version.

14. Contact Us

Questions or concerns about your privacy? We're here to help.

Odin's Eye Enterprises LLC
Email: [email protected]