Privacy policy

· Birth details you enter: date, time (optional), calendar type, and an optional birth city.

· Birth details you enter for another person in a couple reading, plus the first name or nickname you give them.

· The readings we generate and their verdicts.

· A device identifier we create so your readings come back to you. There is no account, name, or email required in this version.

· Purchase records (what was bought, when, amount). Card details are handled by the payment processor — we never see or store them.

To compute your chart, write and store your reading, apply the daily free limit and referral credits, process purchases, and answer support messages. That's the whole list.

We do not sell personal information for money, and we never have.

We do share a limited set of it with Meta and TikTok so we can tell which ad led to a purchase. California law (CPRA) counts that as sharing for cross-context behavioral advertising, so you have the right to switch it off — and the control is a real one, not a form we read later:

Do Not Sell or Share My Personal Information

Turning it on stops every send to Meta and TikTok for your account, including the purchase event our servers send after checkout — not just the tracking that runs in your browser.

We use a small amount of local storage and a cookie to keep your device identifier and referral code. Those are required for the app to work.

PostHog — product analytics. It receives which screens you reached, which product you looked at, its price, and whether a purchase completed, tied to your account identifier. If you sign in, your email address is attached to that account. PostHog processes this on our behalf; it is not sold and not used for advertising. We do not use session recording or automatic capture, so nothing you type is ever recorded.

Meta (Facebook/Instagram) and TikTok — advertising measurement, through their browser pixels and their server-side conversion APIs. They receive the product name, the amount paid, the currency, your email address and account identifier hashed with SHA-256, their own advertising cookies, your browser's user-agent string, and the page address. This is the sharing the opt-out above controls.

None of these vendors ever receives your birth date, birth time, birth city, your partner's details or the name you gave them, the text of a reading, its verdict, anything you typed as a worry, or any message in a consultation. That is enforced in the code by a named list of permitted fields — a value has to be added to that list on purpose before it can leave our servers — rather than by a rule someone has to remember.

If we ever add a vendor, it will be named here before it starts receiving anything.

When you first arrive we record where from: the campaign parameters in the link (utm_source, utm_medium, utm_campaign and friends) and the advertising click id if there is one, plus the page you landed on and the site that referred you. We keep the first one only, so it stays a record of how you found us rather than a log of your visits, and we keep the referring site's address only — never the full link.

Readings and birth details stay until you delete them. Purchase records are kept as long as needed for accounting and dispute handling.

You can delete everything yourself at Settings → Data management — readings, birth details, credits, and history, immediately.

California residents (CCPA/CPRA) and users elsewhere with similar rights may request access to, correction of, or deletion of their personal information, and may not be discriminated against for asking. Email support@foxyfate.com.

We honor Global Privacy Control (GPC) signals as an opt-out of sale or sharing. If your browser sends one, we act on it immediately and record it on your account, so purchases that complete later — on our servers, where your browser is not present — are not shared either. You do not have to do anything else.

A share card shows only the product, verdict tier, and top percentage. It never includes your name, birth details, or reading text. Nothing is posted anywhere on your behalf.

FoxyFate is not for children. We do not knowingly collect information from anyone under 13. If you believe a child's information was submitted, email us and we will delete it.

Privacy questions or requests: support@foxyfate.com