Privacy & AI

01 / Your reading stays with you

Your intention, card associations, connecting story, and chosen action are handled in your browser. The app does not send these entries to its reading server, Stripe, or an AI model. The draw request contains the spread type and Guardian option. Within a purchased experience it also identifies the experience and session, so the server can check access and the prescribed card count. Your question and reflection text are not included.

The reading normally lives in page memory. Drawing again or reloading can clear it. Before this app sends you to sign in or checkout, it may place a temporary copy—including your notes and cards—in this tab’s session storage so you can return to your reading. On the next page load, the app removes that copy and restores it only if it is less than one hour old. There is no background deletion timer; browser session restoration can also affect how long tab storage remains.

“Save reading” downloads a text file to your device. It does not upload a journal or create a cloud backup. You control that file, including deleting it and any device or cloud backups. A shared device, browser extension, or someone with access to your screen or downloads may be able to read it. Keep highly sensitive details out of the practice if you do not want them on that device.

02 / Login & test payments

Single-card draws do not require an account. Digital Edition access uses ChatGPT sign-in. The hosting platform supplies a site-specific account identifier and may supply your email address and display name. The app uses the identifier to check access and may display your name to you. It does not receive your password or obtain access to your ChatGPT conversations through this login.

The site database stores account-linked checkout references, purchase/session and payment identifiers, payment status, the Digital Edition or experience purchased, amount, currency, and timestamps. It also stores payment-event identifiers/types and refund or dispute blocks. These records link checkout to the right account, prevent duplicate processing, and manage access and payment problems. Reading notes are not included. The app does not separately save the sign-in email or display name in this database.

If you redeem an invitation code, the app stores your site-specific account identifier and a preview-access expiration date for 90 days of complimentary access. No Stripe checkout or purchase record is created. Expired preview records are removed during routine sandbox housekeeping. The code itself and your reading notes are not stored in this access record.

Stripe provides checkout, either embedded within the site or on its hosted checkout page, and processes the contact, billing, device, and payment information you enter there. The embedded form and Stripe.js communicate directly with Stripe. The Mirror Deck server does not receive your complete card number or security code. The creator can access transaction and customer information available in the Stripe dashboard for payment administration and support. Card numbers and security codes are not stored in the Mirror Deck app database. An opaque checkout reference is shared with Stripe to connect your purchase to your account; your reflection text and sign-in email are not sent in the checkout request. Please use test payment details during this sandbox stage.

03 / AI & the meaning you make

AI tools have assisted with developing the site and some supporting copy. During a reading, this app does not call an AI model, analyze your writing, or produce a personalized AI interpretation. Cards are drawn randomly; the displayed prompts and interpretation guidance come from the existing deck and site content. Your own associations shape the reading.

The site operator does not collect reading entries for model training or send them to a model. This statement concerns this app’s behavior, not every independent use of ChatGPT or other providers. If you separately paste a reading into an AI service, that service’s terms, settings, and privacy policy apply. Any future feature that sends entries to an AI provider will need a clear explanation and an appropriate choice before you use it.

04 / Hosting, fonts & sharing

The site runs on OpenAI Sites using Cloudflare hosting and a server database for access records. These providers may process IP addresses, request URLs, browser/device information, authentication information, and operational or security logs to deliver and protect the service. This notice does not promise that infrastructure logs are absent or specify a retention period controlled by those providers.

The typography loads from Google Fonts, which means your browser contacts Google’s font servers and sends the network information needed to make those requests. Authentication, checkout, and security providers may also use cookies or similar storage under their own policies. The Mirror Deck app has no advertising pixels, added behavioral analytics, or marketing-cookie scripts.

The operator does not sell personal information or share it for targeted advertising. Account and transaction information is used to operate this service, handle support, prevent abuse, and address legal obligations. It may be disclosed to relevant service providers for those purposes or when legally required. Provider processing may take place outside your country.

• OpenAI privacy policy ↗
• Cloudflare privacy policy ↗
• Stripe privacy policy ↗
• Google Fonts information ↗

05 / Retention & security

The following periods apply to the Mirror Deck app’s current sandbox database. They are operating limits for test records, not a claim about legally required retention for future sales.

• Checkout references: eligible for deletion 30 days after creation, including references used in completed test purchases.
• Test purchase/access records: eligible for deletion 90 days after their last update. Test access can expire when its underlying record is removed.
• Payment-event records: eligible for deletion 90 days after processing.
• Test refund/dispute blocks: eligible for deletion 90 days after creation.

Cleanup runs when the app next checks access, at most once per hour per running server instance. It is activity-triggered, not a scheduled midnight deletion; records may remain longer while the site is inactive or cleanup is unavailable. The routine is restricted to the sandbox configuration. These limits do not remove Stripe’s independent records, provider logs, or provider-managed backups. Provider retention and backup handling follow their own policies.

Browser notes and temporary tab copies follow the lifecycle described above; downloaded readings remain until you delete them. Support emails are handled in the support mailbox rather than the app database. The operator’s review target is to delete routine resolved support correspondence within 12 months of resolution, except records still needed for an open dispute, legal obligation, or another documented business need. Mailbox backups and provider retention may differ.

International paid sales are planned. Before they begin, the notice will describe any additional billing-location or tax information required at checkout, applicable processing grounds and transfer safeguards, and any required regional contact or representative. Those future collection practices are not enabled by this notice. A separate retention policy will be set before real-money sales so valid paid access is not lost under this test cleanup rule. Necessary live access, payment, tax, dispute, and support records will be addressed in that launch policy. Privacy or deletion requests can be sent to info@ofsoundandstone.com.

The app checks account access on the server and verifies Stripe webhook signatures. No internet service or personal device can guarantee absolute security. This practice is for a general adult audience and is not directed to children under 13; do not enter children’s personal information.

06 / Your choices & requests

You can leave reflection fields blank, use the free draw without signing in, sign out, and choose whether to download a reading. To remove a temporary reading copy, clear this site’s session storage in your browser. To remove a saved reading, delete the downloaded file and any copies you made. Clearing browser storage does not delete server-side access or Stripe records.

Depending on your location and the laws that apply, you may have rights to request access, correction, deletion, or portability of personal information, object to or restrict certain processing, or complain to a privacy regulator. Necessary payment, security, or legal records may be retained where permitted. The operator may need to verify account ownership without asking for your password or complete card details. A request about Mirror Deck records does not delete your ChatGPT account or Stripe’s independent records.

Contact: For support, privacy requests, or permissions, email Jonathan Beckner at info@ofsoundandstone.com. Please identify the request and the account or transaction involved, if applicable. Avoid including your private reading, password, or payment-card details in a request.

Material changes to these practices will be reflected here with a revised date. New collection or AI features will be explained before they are introduced, with additional notice or consent where required.