Privacy Policy

1. Controller

Serdar Freimoser, Schinkelstraße 15, 80805 Munich, Germany. Email: 91Serdar@gmail.com.

2. Hosting (Cloudflare)

This website runs on the infrastructure of Cloudflare, Inc. (USA) as a processor, delivered via a global server network. When you visit, technically necessary data (IP address, timestamp, page requested) is processed (Art. 6(1)(f) GDPR — secure and fast operation). A data processing agreement including EU standard contractual clauses is in place with Cloudflare.

3. Database (Supabase)

Account and usage data is stored with Supabase (EU region) as a processor: your user account, your session balance and your readings.

4. Signing in with Google

Sign-in happens exclusively through Google Sign-In. In the process we receive your Google account ID, your email address, your name and your profile picture from Google and store them in your user account (Art. 6(1)(b) GDPR — performance of a contract). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's own privacy notices apply to the sign-in. You can change your display name in your profile at any time.

5. Cookies

We set technically necessary cookies without asking, as permitted by § 25(2) TDDDG: the session cookie for sign-in (30 days), short-lived security cookies during the login process, a cookie that remembers your language choice, and a cookie that records your decision about the analytics described in the next section. There are no advertising cookies. The analytics cookies described below are only set once you have explicitly consented.

6. Analytics (Google Analytics)

We use Google Analytics 4 to see which pages get read — but only after you have explicitly consented via the cookie prompt (Art. 6(1)(a) GDPR and § 25(1) TDDDG). Before you consent, Google's script is not loaded at all and no data reaches Google.

Once you consent, Google sets cookies (names beginning with _ga) and the following data is transmitted to Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and possibly to Google LLC in the USA: a randomly generated identifier, the pages visited, timestamps, an approximate location derived from your IP address (the IP itself is truncated), and your device and browser type. We use this to learn which content is being read, so we know what to write next. The data is deleted after 14 months. A data processing agreement is in place with Google, and transfers rely on the EU standard contractual clauses.

You can withdraw your consent at any time via “Cookie settings” in the footer. We then delete the relevant cookies and the measurement stops immediately. Withdrawal does not affect processing that already took place.

7. Photos and AI readings

For a reading, your cappuccino photo is scaled down in your browser, transferred to our server and passed to OpenRouter, Inc. (USA) as a processor, where an AI model analyses it in order to produce the reading (Art. 6(1)(b) GDPR — delivering the reading). We do not store the photo itself permanently; what is stored is the textual analysis (symbols found, the reading) as part of your oracle memory. Please photograph only your cup — make sure no people and no sensitive information appear in the image.

8. Readings and balance

Your oracle sessions (reading texts, timestamps, optional questions) and your session balance (credits and usage) are stored in your account so that the oracle can refer back to earlier readings and purchases remain traceable (Art. 6(1)(b) GDPR).

9. Newsletter

You receive the newsletter only after giving consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time — via the unsubscribe link or simply by email. As a thank you for subscribing we credit 2 sessions to your account.

10. Your rights

You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection authority. You can delete your account together with all readings yourself in your profile at any time — or ask us by email at 91Serdar@gmail.com.