Privacy Policy

1. Your photo stays in your browser

The original photo used for a reading is processed only in your browser. We do not upload or store it on our server. Your browser derives a numeric seed from the file and uses it to select a fictional reading. This number is not a measurement of facial or biometric features.

2. Data used for paid and delivery features

When you start a purchase, we store an order ID, selected food ID, reading seed, language, email if provided, payment status and payment-provider identifiers. This supports payment verification, access to the paid result, PDF downloads, refunds and customer support. Creem processes the payment as Merchant of Record; we do not receive or store your card number.

If you request email delivery, the delivery queue temporarily holds the recipient email, food ID, seed, language and delivery status. If you explicitly save a compatibility appendix, the server receives a partner seed—not the partner photo—recalculates the result, and stores the two food IDs and compatibility snapshot with the paid order.

3. Retention and deletion

Thirty days after successful delivery, the delivery queue copy is purged of the recipient email, food ID, seed and language. A minimal delivery record—queue ID, message type, status and timestamps—remains to prevent duplicate sending and diagnose delivery operations. Queued or failed messages remain until delivery or support resolution; you may ask us to remove them.

Paid orders, access data and saved compatibility results are not part of that 30-day delivery-copy purge. No automatic deletion period is currently set for these records because they support re-access, PDF downloads, payment/refund verification and customer support. You may request deletion; limited transaction records may remain where retention is required.

4. Browser storage, cookies, analytics and advertising

Necessary browser storage supports your card collection, return from checkout and privacy choice. Optional Google Analytics begins only after you select Allow analytics. When allowed, it may use cookies or similar identifiers and receive page visits, interaction events, and device, browser and network information to measure site use. Choosing Necessary only prevents analytics measurement; you can reopen Privacy choices in the footer and change your choice.

Selected food-culture articles can display one Google AdSense unit after the article. We request non-personalized ads; these can still use cookies or identifiers for frequency limits, reporting and fraud prevention, and send Google information such as the page URL, IP address and browser details. Google's published consent message handles choices where European regulations apply. Ad requests remain paused until its consent API confirms whether consent is required and, where required, permission for Google and device storage. An unavailable consent service means no ad request. Analytics permission does not grant advertising consent. Payment, result, contact and privacy pages do not load our ad unit. Use Advertising privacy choices beside the unit to reopen Google's available controls.

5. Service providers

Creem processes payments. Resend is used to deliver transactional emails. Google Analytics is used only when you allow optional analytics. These providers process only the information needed for their respective functions under their own terms and privacy practices.

6. Your choices and contact

You may request access, correction or deletion of information associated with your email or order. Include the order number when the request concerns a paid result. We may ask for enough information to verify that the request concerns you. Contact support@k-roastmysoul.com or use the Contact page.