Privacy Policy
This is a courtesy translation for your convenience. The German version is the legally binding one; German law applies.
1. Controller
Serdar Freimoser, Schinkelstraße 15, 80805 Munich, Germany. Email: 91Serdar@gmail.com.
2. Hosting (Cloudflare)
This website runs on the infrastructure of Cloudflare, Inc. (USA) as a processor, delivered via a global server network. When you visit, technically necessary data (IP address, timestamp, page requested) is processed (Art. 6(1)(f) GDPR — secure and fast operation). A data processing agreement including EU standard contractual clauses is in place with Cloudflare.
3. Database (Supabase)
Account and usage data is stored with Supabase (EU region) as a processor: your user account, your session balance and your readings.
4. Signing in with Google
Sign-in happens exclusively through Google Sign-In. In the process we receive your Google account ID, your email address, your name and your profile picture from Google and store them in your user account (Art. 6(1)(b) GDPR — performance of a contract). Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's own privacy notices apply to the sign-in. You can change your display name in your profile at any time.
5. Cookies
We set only a technically necessary session cookie for sign-in (30 days), short-lived security cookies during the login process, and a cookie that remembers your language choice. There is no tracking and there are no advertising cookies, so consent is not required (§ 25(2) TDDDG).
6. Photos and AI readings
For a reading, your cappuccino photo is scaled down in your browser, transferred to our server and passed to OpenRouter, Inc. (USA) as a processor, where an AI model analyses it in order to produce the reading (Art. 6(1)(b) GDPR — delivering the reading). We do not store the photo itself permanently; what is stored is the textual analysis (symbols found, the reading) as part of your oracle memory. Please photograph only your cup — make sure no people and no sensitive information appear in the image.
7. Readings and balance
Your oracle sessions (reading texts, timestamps, optional questions) and your session balance (credits and usage) are stored in your account so that the oracle can refer back to earlier readings and purchases remain traceable (Art. 6(1)(b) GDPR).
8. Newsletter
You receive the newsletter only after giving consent (Art. 6(1)(a) GDPR). You can withdraw that consent at any time — via the unsubscribe link or simply by email. As a thank you for subscribing we credit 2 sessions to your account.
9. Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), as well as the right to lodge a complaint with a data protection authority. You can delete your account together with all readings yourself in your profile at any time — or ask us by email at 91Serdar@gmail.com.