Privacy Policy

What we collect

• Account data: your email address and a securely hashed password.
• Reading data:if you're a Premium member and choose to save a reading, we store the cards, your question, and your notes.
• AI reading content: when you request an AI-generated reading, the cards you drew and any question you type are sent to our AI provider (Anthropic) to produce that reading. This content is used only to generate your reading and is not used to train AI models.
• Payment records: order details and the payment confirmations we receive from our payment provider (Whop, and Wise for any bank transfer), kept for accounting and support. We never see or store your full card number.
• Usage & advertising data:we record basic events (page visits, readings completed, funnel steps) for analytics, and we use advertising and measurement tools that set cookies to understand traffic and ad performance. See “Cookies & tracking” below.

Cookies & tracking

First-party cookies we set ourselves: one to keep you signed in, and one anonymous id used for our own privacy-friendly analytics.

Third-party cookiesset by tools we use for analytics and advertising: Google Analytics, Google AdSense, and the Meta (Facebook) Pixel. These providers may set cookies and use them to measure traffic, show and measure ads, and — where they operate their own ad networks — build advertising profiles. We don't control those cookies directly.

You can limit this: manage or block cookies in your browser settings, opt out of personalized Google ads at adssettings.google.com, and adjust Meta ad preferences in your Facebook account settings.

Who we share data with

We rely on a small set of trusted providers, each processing only what it needs:

• Whop — card payment processing (Merchant of Record); Wise — bank transfers.
• Anthropic — generating AI readings from your cards and question.
• Resend — sending transactional email (confirmations, password resets).
• Google — analytics (Google Analytics) and advertising (AdSense).
• Meta — ad performance and conversion measurement (Pixel & Conversions API).

Some of these providers are located outside your country (for example, in the United States), so your data may be processed there.

What we don't do

We don't sell your personal data for money. We don't send marketing spam — the only emails we send are transactional: account verification, payment confirmations, and plan-expiry reminders. Note that the advertising cookies described above may, under some privacy laws, count as “sharing” data for targeted advertising; you can opt out using the controls above.

Your choices

You can request a copy of your data, or ask us to delete your account and associated data, at any time by emailing hello@wyndralore.com. You can also control advertising and analytics cookies using the browser and provider controls described under “Cookies & tracking.”