Privacy Policy

What we collect

We try to minimize what we collect. To provide, maintain, secure, and improve Tide Oracle, we may process:

• Your email address — used to sign you in, identify your access, and match you to a Plus subscription. There is no password and no public profile.
• The questions you write and the interpretations generated for them, so your private timeline can exist.
• Draw and usage records — for example how many signs you have drawn today, used to enforce daily limits and keep the service running.
• Standard site analytics through Google Analytics — page views, interaction events, device and browser type, approximate region, and traffic source.
• Feedback or support content you choose to send us, for example through the feedback form or by email.

How we use it

We use the data above to:

• authenticate sign-ins and maintain your access
• generate interpretations
• build and display your private timeline
• manage Plus subscriptions and usage limits
• send sign-in codes and necessary service notifications
• respond to feedback, questions, or support requests you send us
• prevent abuse, fraud, and activity that could endanger service security
• understand usage and improve the site and product
• meet applicable legal, tax, accounting, and regulatory obligations

What we do not collect, and payment data

We never obtain or store your complete card number, expiry date, or security code — that data goes directly to Stripe, which may separately collect your name, billing address, or other information it needs for payment, tax, fraud-prevention, or legal purposes. For transactions processed via Stripe Managed Payments, Stripe acts as the merchant of record. We do not use the questions you enter to serve you personalized advertising, and we do not buy data about you from anyone.

Who else processes it

We use a small number of third-party service providers to operate Tide Oracle. Each processes data only for the purposes necessary to provide its service:

• Anthropic — the question you enter, the sign you drew, and content necessary to generate an interpretation may be sent to Anthropic’s API. This is among the more sensitive data that leaves our systems: if a question contains something you would not want processed by a third-party AI provider, do not enter it here. Anthropic’s handling of this data is governed by its own applicable terms.
• Stripe — payment, subscription, and related transaction processing; as merchant of record for Managed Payments transactions, also tax, receipts, and transaction-level support.
• Resend — delivery of sign-in codes and necessary service email.
• Cloudflare — site infrastructure, content delivery, security, and the database your data is stored in.
• Google Analytics — aggregate traffic and usage measurement.

Cookies and analytics

We set one cookie of our own: a signed, HttpOnly session cookie after you sign in, so the site knows the browser is yours. It cannot be read by page JavaScript and is not used for advertising. Google Analytics may set its own cookies or use similar technology to help us understand traffic. We do not run an advertising network, do not use your questions to build advertising audiences, do not sell your personal information for money, and do not share it for cross-context behavioral advertising.

Feedback you send us

If you write to us through the feedback form, we store your message, the page you were on, and — only if you choose to give it — your email address. To limit abuse, we also convert your IP address into a salted hash used to count submissions from the same source; we do not need or keep the raw address.

Sharing an interpretation

Your timeline and the interpretations in it are private by default. If you choose to share one, we generate an unlisted link that anyone holding it can open without signing in; the shared page does not intentionally show your email. Unsharing invalidates the link, though we cannot control what others already viewed, copied, or saved while it was active.

How long we keep it

Different data is kept for different reasons:

• Questions and interpretations — kept until you ask us to delete them, since the timeline is the point of the product.
• Email and account data — kept while you use the service, and for a reasonable period after for operational, security, fraud-prevention, and legal needs.
• Usage records — kept only as long as needed to enforce limits, run the service, and handle security issues.
• Feedback — kept as long as needed to process it and for reasonable follow-up.
• Payment records — held by Stripe under its own applicable legal, tax, and accounting requirements.
• Analytics data — held under our Google Analytics retention settings and Google’s applicable policies.

Your rights

Depending on the law that applies where you live, you may have the right to:

• know what personal data we collect and process about you
• request a copy of it
• correct inaccurate data
• request deletion
• request data portability, where applicable
• restrict or object to certain processing
• withdraw consent you previously gave
• not be discriminated against for exercising these rights

Exercising these rights

Email contact@azurepod.com to make a request. We may need to reasonably verify your identity first, to keep someone else from accessing or deleting your data. Some data may not be deletable immediately for legal, tax, security, or fraud-prevention reasons.

Children

Tide Oracle is not directed at children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 17 should only use free features with a parent or guardian, and may not purchase a Plus subscription. If you believe a child under 13 has given us personal data, email us and we will take reasonable steps to delete it.

International transfers

We are based in the United States, and some of the providers we use operate globally, so your data may be processed or stored outside the country or region where you live, including in the United States, where data protection law may differ. Where applicable law requires it, we take appropriate measures for these transfers.

Security

We take reasonable technical and organizational measures to protect the data we process, including restricting access and using appropriate security technology. No service that transmits or stores data over the internet can guarantee absolute security, so we cannot promise data will never be subject to unauthorized access, loss, or disclosure.

Changes and contact

If this policy changes materially we will say so here and update the date at the top. Questions go to contact@azurepod.com.