Privacy

The short version

• No selling of data, no tracking from site to site, no measurement cookie.
• Without an account, what you type is used for the calculation and stays in your browser: the server calculates without saving it (its technical logs keep a trace for a few weeks, see below).
• With an account, we keep your email address, your profiles and what you do once signed in (every draw and its question, your card of the day, the readings written for you), until you erase it.
• Some readings are written by an Anthropic model, from calculated elements, your question for a draw, and first names for compatibility and the PDF analysis. It never receives your email address.

Who is responsible

The data controller is Tony Legrand, who publishes Arcanes on a non-professional basis (legal notice). For a question about your data, or to exercise your rights: contact@arcanes.io.

What we keep with your account

Everything below is used to run what you ask for: that is the legal basis (GDPR, art. 6(1)(b)).

Your email address

To sign you in (no password: the site sends you a link, valid for one hour and once only, or you go through your Google account) and to send you your readings. When you ask for a link, your address is kept with it until it is erased, half an hour later at most, even if you go no further.

Your births and those of the people close to you

Date, time and how precise it is, place (with its coordinates and time zone), first name or name, gender (required for your own birth, optional for someone close to you), and the kind of relationship (partner, crush, friend, family) if you specify it: what it takes to calculate a chart. Twenty profiles at most.

Your draws and readings

Once you are signed in, every draw is kept with its question, and so are your cards of the day, the readings written for you (interpretations, compatibilities, new-moon readings, PDF analyses) and a copy of each morning sky sent, used to avoid sending it twice.

Your settings

Language, time zone, the country you live in (worked out from your device's time zone, or chosen by you), reading level, tone, interests, Prism sources, dashboard, frequency and channels of what we send; the date your account was created, the date of your last visit and how many visits you make each day.

Your sign-in

A 60-day session, renewed for 60 days on each visit, with your browser's technical identifier (its name, its version and your system), for the security of your account.

When you sign in, what you started without an account (your birth profile, your last draw if it is less than 24 hours old) joins your account, so nothing is lost.

Emails and notifications

As soon as your account has a profile, you get your morning sky by email (every day, every week or every month) and, at each new moon, a reading for the month. It is the account's service, and you stop it whenever you like: at the bottom of each message, “Stop these emails” opens a page where a button stops them; your email app's own “Unsubscribe” button does it in one click; so does your account.

The new-moon reading is written every month for every account with a profile, even when emails are off: you'll find it in your readings. If you don't want it written any more, tell us.

Notifications are only sent if you turn them on and your browser allows them (your consent, art. 6(1)(a)). Your browser's notification service (Google, Apple, Mozilla, Microsoft) carries them, encrypted. We keep your subscription address, its encryption keys and your browser's identifier until you turn notifications off.

What the writing model receives

Some readings are written by an Anthropic language model, from the elements the site has calculated, with your reading settings and your gender if you gave it:

• the interpretation of your draws: when you are signed in, it is written as soon as the cards are turned over; the model receives your question, the cards, the deck and the date of the draw;
• compatibility, when you open it: the two first names or the names you gave, your genders, the kind of relationship, the calculated elements of both charts;
• the new-moon reading, every month for every account with a profile: the calculated elements of your chart and of the month, without your name;
• the PDF analysis, when you ask for it: your first name, your birth name (for numerology), your age, the calculated elements of your chart and of the year.

It never receives your email address, nor your date, time and place of birth as you typed them. Anthropic doesn't use them to train its models (its contract forbids it) and deletes them from its servers within 30 days, unless its safety checks flag an abuse: it then keeps them for up to two years.

Other people

You can save the birth of someone close to you, or of someone to compare your chart with. Do it with their agreement: the site doesn't tell them and has no way to reach them. They can write to us to have what concerns them erased. Basis: the legitimate interest, yours and ours, in making compatibility readings work (art. 6(1)(f)).

If you share a close one's profile card, the link shows whoever opens it the name you gave them, their date, time and place of birth, their chart, and your first name; the link preview in a messaging app shows their name and signs. You can cut the link at any time.

If you invite someone to compare your charts, the link shows whoever opens it your first name and your calculated chart, without your date, time or place of birth (which could be roughly worked out from the chart). It stays valid until you cut it.

If someone invites you and you tick “Also show the result to…”, your first name, gender, birth and the kind of relationship you chose are saved in their account, and they get an email telling them (your consent, art. 6(1)(a)). When they open your compatibility, your first name and gender go to Anthropic's model with the calculated elements. To have them erased, ask them, or write to us.

Images to share (your day, a compatibility) carry the first names and signs you put on them; the server keeps them in memory for six hours at most, to serve them again quickly. Whoever you send a link to sees what it shows, and so do the messaging apps that build its preview.

What the servers see

• Your IP address is used to slow down abuse (too many sign-in link requests, for example). It stays in memory for about an hour, never in the database. Basis: the legitimate interest in protecting the site (art. 6(1)(f)).
• The entry server's logs record, for each visit, the IP address, the page requested and the browser, and are erased after five weeks at most. Some page addresses carry what you search for or ask for (a place, your time zone and rounded position, the first names and signs on an image to share) or a personal link (sign-in, invitation, shared profile card, unsubscribe).
• The site's logs keep neither your email address nor the subject of emails: for each email sent, only the domain of the address (…@gmail.com). Their size is capped (the oldest part is erased when the limit is reached), and they start from scratch when the service concerned is rebuilt.
• Place search: the name you type goes to Open-Meteo, from our server (Open-Meteo doesn't see your IP address); the answer is cached to go faster, reused for 24 hours, and erased at the next update of the site.
• Your position, only if you click to set the sky to where you are and your browser allows it: rounded to about ten kilometres, it stays in your browser and is used to calculate sunrise and sunset; the server doesn't save it (only its logs see it pass).
• Audience measurement: Umami, installed on the same server (an installation shared with another site of the publisher, with Arcanes' data kept apart), counts page views and a few actions (chart calculated and birth-time precision, draw, compatibility, sign-in, share, time spent on an article and whether it was read to the end), without cookies and without keeping your IP address. It records the page address, the page you came from and the campaign tags of our emails, and derives from them the country, region and city, the type of device, the system, the browser, the screen size and the language. The tokens some addresses carry and the page titles are removed before anything is sent. These statistics are erased after 25 months; the tool also keeps backup copies, thirty days for the nightly ones, one year for the monthly ones. Basis: the legitimate interest in knowing what is useful (art. 6(1)(f)).
• Backups: every night the whole database is copied. Fourteen nights stay on the server, thirty on a copy outside the server, with the same host, in Germany. So what you erase also disappears from the copies within a month at most.
• A small program in your browser (a “service worker”) keeps the site's files so it opens faster, and receives notifications; it keeps nothing personal.

Who else has access

Nobody buys your data. Apart from us, only these providers have access to it, for the service they provide to us and nothing else:

Hetzner Online GmbH, Germany

hosts the site, the database, the visit statistics and the backups.

o2switch, France

sends our emails, and receives the ones you write to us.

Google Ireland Limited, Ireland

if you choose “Continue with Google”: confirms your email address. We receive only that address from Google, and an identifier we don't keep; Google keeps its own record of this sign-in, under its own rules.

Anthropic Ireland, Limited

runs the model that writes some readings (see above).

OpenMeteo GmbH, Switzerland

finds the places you search for, from the typed name alone.

Your browser's notification service

carries notifications, if you turned them on.

Outside the European Union

Everything stays in Europe except two things. Anthropic's models run in the United States: this transfer is covered by the European Commission's standard contractual clauses (GDPR, art. 46), which are part of Anthropic's contract. And if you turn on notifications, your browser's service may carry them outside Europe; it only sees their encrypted version. Switzerland, where Open-Meteo is based, is recognised by the European Union as protecting data at the same level.

Cookies and browser storage

The site sets two cookies, both necessary: arcanes_session, your sign-in (60 days, unreadable by the page's scripts), and NEXT_LOCALE, your language (for the visit). If you sign in with Google, a third one, arcanes_google, lives for the round trip (ten minutes at most): it checks that Google's answer matches your request. No measurement or advertising cookie: that's why there is no banner.

In your browser's storage, the site keeps what helps you from one visit to the next: your birth profile, your last draw (24 hours), your settings (level, day or night sky, favourite deck, spread and way of drawing, 3D table quality, dashboard), your interests, how you sign in and your email address (to make the next time quicker), the card of the day, the days of your visits, the warnings you've already read, and your rounded position if you gave it, with the sun times calculated for it. It is all erased from the device you delete your account from; on your other devices, clear the site's data in your browser.

How long

• Account, profiles, draws, readings, PDFs: as long as your account exists, even if you stop coming. You erase your profiles one by one (with their compatibility readings, links and PDF) and your draws (with their interpretation); the rest goes when you delete your account.
• Sign-in link: one hour, erased half an hour later at most. Session: 60 days after your last visit.
• IP address against abuse: about an hour. Entry server logs: five weeks at most. Images to share: six hours at most.
• Backups: fourteen nights on the server, thirty outside it.
• Visit statistics: 25 months (their backups: thirty days, one year for the monthly ones).
• At Anthropic: 30 days (up to two years if an abuse is flagged).

Your rights

At any time you can see what we keep about you and take it with you (“Download my data”, in your account; your PDFs download separately), correct it (your profiles can be edited in your account; to change your email address, write to us), erase it (“Delete my account”, or one profile or one draw at a time), object to a processing or have it restricted, and withdraw your consent (notifications, a shared invitation result).

For all of this, or for a question: contact@arcanes.io. We answer within a month. You can also leave instructions about what happens to your data after your death (French Data Protection Act, art. 85).

If you think your rights are not respected, you can complain to the CNIL, the French data protection authority (cnil.fr/plaintes), or to the data protection authority of your country.

If you are under 15

Arcanes doesn't check your age: your date of birth is used for calculations, not for a check. If you are under 15, ask a parent before creating an account or turning on notifications: for what relies on your consent, the law requires both yours and theirs (French Data Protection Act, art. 45).

Security

The site has no password to steal: you sign in with a single-use link, or with your Google account. Sign-in links and sessions are only kept as fingerprints they can't be recovered from. The database can't be reached from the internet, and backups travel encrypted to their server.

If this page changes

It says what the site does today. Its date changes with every modification.