Privacy Policy

Last updated: May 15, 2026

CastWyrd™ operates the website at castwyrd.com and the corresponding iOS and Android applications. This Privacy Policy explains what information is collected when you use the Service, what is not, and which third-party services handle data on our behalf.

Information We Do Not Collect

We do not store, save, or retain any images you upload. We do not create user accounts unless you choose to sign in. We do not collect your name or email address unless you sign in with Google. We do not track your reading history unless you are a premium member who has opted in. We do not sell your data to third parties.

Image Processing

Images you upload are transmitted securely to our processing server for the sole purpose of generating your rune interpretation. Images are analyzed in real time and immediately discarded. They are never written to disk, stored in a database, or retained in any form after your reading is generated.

Account Data (Supabase)

If you choose to sign in with Google, your authentication and account data are stored through Supabase, our authentication and database provider. We store your user ID, email address, and display name provided by the OAuth provider, along with your casting preferences (default spread, rune count) and, for premium members, your last reading. Supabase's handling of this data is governed by their own privacy policy. You can delete your account and all associated data at any time from your account page, or by emailing us at the address below.

Payment Processing (Stripe)

Web payments are processed by Stripe. We never see, store, or have access to your full payment card details — Stripe handles the entire transaction and returns only the minimum metadata we need to grant you the purchased entitlement. Stripe's handling of payment data is governed by their own privacy policy. On iOS and Android, in-app purchases are handled by Apple's App Store and Google Play respectively, under their privacy policies.

Technical Data

When you use the Service, our servers may temporarily process your IP address for rate limiting purposes. This data is stored only as an anonymous counter in a time-limited cache and expires automatically within one hour.

Advertising — Google AdSense

The free version of CastWyrd displays advertisements served by Google AdSense. Google and its partners may use cookies and similar technologies to serve ads based on your prior visits to this and other websites, and to measure ad performance. Google may also collect data per its own Privacy & Terms. You can opt out of personalized advertising from Google by visiting Google Ads Settings, and you can opt out of personalized advertising from a wide range of third-party vendors at aboutads.info/choices. We do not have access to or control over cookies used by third-party advertisers.

Third-Party AI Services

Your rune cast image and optional question are transmitted to one or more AI providers (Google, OpenAI, Anthropic) for interpretation. These providers process your data under their own privacy policies. We transmit only the minimum data necessary and do not include personally identifying information in these requests.

Bot Protection (Cloudflare Turnstile)

We use Cloudflare Turnstile to protect the Service from automated abuse. Turnstile is a privacy-preserving alternative to traditional CAPTCHAs that does not use tracking cookies. Cloudflare may collect limited technical data (such as IP address and device signals) to complete the challenge; this is governed by Cloudflare's privacy policy.

Children's Privacy

The Service is not directed at children under 13. We do not knowingly collect information from children.

Data Deletion

You may delete your account and all associated data at any time from the account page within the app. If you cannot access the app or prefer to make the request by email, write to contact@castwyrd.com and we will process the deletion within a reasonable period.

Contact

If you have questions about this Privacy Policy, please write to contact@castwyrd.com, or visit the contact page.