Privacy Policy

Overview

Quiet Augury is designed with privacy in mind. We collect only the minimum data necessary to provide the service. This policy explains what we collect, how we use it, and your rights.

What we collect

Guest users (no account)

• IP address hash - Your IP address is hashed using SHA-256 with a secret salt. We never store your raw IP address. The hash is used solely for rate limiting and is automatically cleaned up.
• Query text - Guest queries are not stored. Once the oracle responds, your input is discarded.

Registered users

• Account information - Email address, display name (optional), and a securely hashed password. We never store passwords in plain text.
• Query history - Your past queries and the words the oracle returned. This is stored so you can review your readings. Readings are private to your account by default.
• Usage data - Query count and timestamps for rate limiting. Automatically cleaned up after the rate limit window expires.

Everyone

• Technical error reports - When something fails, we record what broke (the error message and the page), never what you wrote or who you are. Kept for 30 days to fix bugs.

Shared readings

When you share a reading, a unique unguessable link is generated. Shared readings display only the query text and the words returned. They never reveal the identity of the user who created them - no name, email, account information, or timestamps that could identify you are included in shared links.

What we do NOT collect

• We do not use cookies for tracking or advertising
• We do not use third-party analytics or tracking scripts
• We do not sell, share, or trade your data with third parties
• We do not store raw IP addresses

Data retention

Rate limiting data is automatically cleaned up after the rate limit window expires (typically 1 hour). Query history for registered users is retained until the user requests deletion or deletes their account.

Your rights

You have the right to access, correct, or delete your personal data at any time. You can delete individual readings, all saved readings, or your entire account — including every reading, reflection, and statistic — from your settings page. For anything else, please contact us.

Security

We use industry-standard security measures including encrypted connections (HTTPS), secure password hashing (bcrypt), Content Security Policy headers, and rate limiting to protect against abuse. All data is stored in encrypted databases.

Changes to this policy

We may update this policy from time to time. Significant changes will be communicated through the application. The “Last updated” date at the top of this page reflects the most recent revision.