Who looks after your information
Rune Oracle is run by Kieran Russon, a sole trader in the United Kingdom, who is the data controller for the personal information described here. For anything about your data, email skittullz@gmail.com.
What we collect
- Your account: your name, your email address and your password. We only store a scrambled (hashed) version of your password, never the password itself.
- What you save: your journal entries and your herb collection.
- Credits: your balance and a record of credits added and used, including purchases.
- Payments: when you buy credits, Stripe handles the payment. We receive your email, the pack you bought, the amount and whether it was paid. We never see your card details.
- Your questions: the questions you ask, the runes you draw and your conversations with the oracle are sent to our AI provider so it can write an answer. We don't keep a copy of your questions or answers on our servers. Chat conversations are kept only in your own browser, and you can clear them with "New conversation".
- Free reading counter: to give everyone two free readings a day, we keep a daily count linked to a scrambled (hashed) form of your internet (IP) address, or to your account if you're signed in. These counts are deleted after 7 days.
- Server logs: our web server keeps standard logs, including IP addresses and pages requested, for security and to fix problems. These are deleted after about 14 days.
Why we use it
- To provide your account, journal, herb collection, credits and readings, because you've asked us to (performing our contract with you).
- To take payments and keep records we're required to keep for tax (legal obligation).
- To keep the site secure, prevent abuse and apply the free reading limit (our legitimate interests).
We don't sell your information, we don't use it for advertising, and we don't send marketing emails.
Who we share it with
We use a small number of trusted services to run the site, and they only use your information to provide their service to us:
- DigitalOcean hosts the site and its database in London, UK.
- OpenAI writes AI readings and answers. It receives your question and the details of the reading, but not your name or email. OpenAI doesn't use this data to train its models, and may keep it for up to 30 days to monitor for abuse.
- Stripe processes payments.
- Google Fonts supplies the site's typefaces, so your browser connects to Google, which can see your IP address.
Some of these providers are based in, or process data in, the United States. Where information leaves the UK, it's protected by the safeguards UK law requires, such as the UK International Data Transfer Addendum or the UK-US data bridge.
Cookies and browser storage
When you sign in we set one essential cookie, ro_session, which keeps you signed in for up to 30 days. We don't use advertising or tracking cookies, so we don't ask for cookie consent. The site also uses your browser's local storage to remember your choices (such as your rune set and how many runes you like to draw) and your chat conversation. This stays on your device.
How long we keep it
We keep your account, journal, herb collection and credit history until you delete your account. Deleting your account removes them from our database straight away. Payment records are kept by Stripe, and by us for tax purposes, for six years. Free reading counts are kept for 7 days and server logs for about 14 days.
Your rights
You have the right to ask for a copy of your information, to have it corrected, to have it deleted, to object to or restrict how we use it, and to receive it in a portable format. You can delete your account and everything in it yourself from the account page. For anything else, email skittullz@gmail.com and we'll reply within one month.
If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd appreciate the chance to put things right first.
Children
Accounts are for people aged 18 and over. We don't knowingly collect information from children.
Changes
We'll update this policy if the way we use information changes. The date at the top shows when it was last updated.