Privacy Policy

• Account data — your name, email, date of birth (also used to confirm you are 18+), and place of birth, chosen from a list of towns and cities.
• Reading inputs — to generate a CIPHERSHOT or a CIPHER reading, you may provide a photograph of yourself and a short intention in your own words.
• Your readings — the CIPHERSHOT and CIPHER readings generated for you, stored in your private CIPHERSPACE.
• Technical data — session cookies and security/operational logs needed to run the service.

We use your photograph and intention only to generate your reading. Your photograph is deleted after processing; it is not used to identify you, is not shared with anyone, and is never used to train any model. Your intention is stored with your reading in your private CIPHERSPACE. You can ask us to delete any of this at any time.

We process your data to perform our contract with you (to deliver the service and your readings), on the basis of your consent (for reading inputs you choose to provide), and for our legitimate interest in keeping the service secure and functional.

• Your photograph — deleted after the reading is generated.
• Your readings and intention — kept in your private CIPHERSPACE until you delete them or close your account.
• Account data — kept while your account is active, then deleted or anonymised within a reasonable period, except where we must keep records to meet a legal obligation (for example, tax records for paid purchases).

We do not sell your data. We use a small number of processors strictly to run the service, including Stripe (payments), Vercel (hosting), MongoDB Atlas (database), Amazon Web Services (storage of the photograph you upload, until it is deleted), and Resend (email). They act only on our instructions under data-processing agreements.

Some of these providers are located outside the EU/EEA (for example, in the United States). Where your data is transferred outside the EU/EEA, it is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses.

You have the right to access your data, to correct it, to erase it, to restrict or object to processing, to data portability, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these, write to thecipher@informationalpatterndesign.com. You also have the right to lodge a complaint with the Romanian Data Protection Authority (ANSPDCP).

We use session cookies to keep you signed in and to keep the service secure. See our Cookie Policy for details.

The service is for adults; it is not directed to anyone under 18, and we do not knowingly collect data from children.

If we change this policy, we will update the date above. Continued use means you accept the change.