Legal
Privacy Policy
Server-side memory is off by default. Your browser keeps a local copy of the current roll, and text you submit is sent to DeepSeek to produce the response. If you turn on memory or sign in, roll data is also stored on our server under a signed pseudonymous identifier.
What we collect
We process what you submit, the replies and readings produced from it, your chosen language, and technical data needed to operate and secure the service. Your browser stores a local copy of the current roll. Your answers, the directions extracted from them, summaries and progress are saved on our server under a pseudonymous id so we can improve the questions; the roll page says so and offers a one-tap switch to stop it, after which nothing further you write is stored. Signing in ties the same record to your account so it survives a lost device. If you turn on memory or sign in, we store your answers, extracted readings, summaries, portrait text and roll progress under a pseudonymous account identifier. For email recovery, your address is sent to Resend or the email delivery service configured for this deployment so it can deliver the one-time link. Our authentication database stores a keyed hash of the address rather than the plain address. Paid credits are not available yet; if payments open later, Stripe will process checkout and we will store the records needed to grant the purchased access. Please do not submit health or financial information, another person's identifying details, or other sensitive material. The service is not designed to handle it.
Where your words go
Text you submit is sent through the DeepSeek API for language-model processing. DeepSeek's own terms and privacy policy govern its processing, caching and retention. We do not promise that DeepSeek retains nothing, and the account deletion controls on this site do not delete any copy a provider may retain under its policy. On our side, answers are stored under a pseudonymous id by default and the roll page offers a one-tap switch to stop that. Anonymous answers are not written to the roll database. If you enable memory or sign in, the complete roll events are stored in our deployment's database so the service can resume your roll. Saved roll and account data currently have no automatic expiry and remain until you delete them. We do not sell your content and we do not share it for advertising. What you write and the readings drawn from it are used to improve the service and to train and fine-tune models. If you would rather your content were not used that way, write to [email protected] and we will delete your data. This does not replace or override DeepSeek's own policy.
How long we keep it
Account and roll data stay until you delete them; nothing expires automatically. Security and technical logs (access logs, rate-limit counters) are kept for up to 90 days. Visit analytics events currently have no automatic deletion schedule. System backups are kept for up to 30 days: deleted data leaves the backups as they rotate, within 30 days of the deletion.
Memory, if you turn it on
If you choose to be remembered, a signed cookie supplies a pseudonymous identifier. We then store the full roll events needed to continue: answers, choices, extracted readings, summaries and portrait text. The cookie is not a real name, but the saved content may still identify you if you write identifying details. If you add email recovery, the plain address is processed long enough to send the sign-in link and is disclosed to the configured email delivery service. Our authentication database stores a keyed hash rather than the plain address.
Erasing everything
Data controls distinguish three actions. Clearing this device removes the local roll from this browser. Deleting the saved server roll removes roll events tied to the signed account. Deleting the account removes account-linked roll, memory, transcript, profile, sign-in and credit records from our server. These actions cannot be undone. A public wall post and its likes use a separate browser identity, so they are not removed by account deletion; take the post down separately before clearing that browser identity, or contact us. Aggregate event records are not keyed to the account, and site controls cannot delete data DeepSeek or an email provider may retain under its own policy.
Your rights
For your personal data you can: access it and request a copy; correct what is inaccurate; delete it (see Erasing everything); export it in a machine-readable form (one click under My data); and withdraw consent-based processing at any time. Write to [email protected] to exercise any of these; we answer within a reasonable time and may first verify it is you.
Cookies and local storage
We use exactly two kinds of browser storage: a signed cookie that identifies your pseudonymous account once you enable memory or sign in, strictly functional and never for ads or tracking, and the browser's local storage, which keeps the local copy of your current roll and interface preferences such as language and art style. There are no third-party analytics or advertising SDKs and no ad pixels. You can clear both in your browser settings; clearing removes this device's roll, and after clearing the cookie you would need to sign in again.
Sharing and advertising
We don't sell your data and we don't share it for advertising. The conversation carries no advertising pixels.
Analytics
We record product events with a timestamp, event type and interface language. For one visit event per browser session, we also store a broad referral category, Cloudflare country code, phone-or-desktop category, and a daily rotating pseudonymous hash derived from the IP address and user agent. We process the raw IP address and user agent for security, rate limiting and that calculation, but the visit analytics row does not store either value or any conversation content. These event records currently have no automatic deletion schedule.
Business transfers
If we are part of a merger, acquisition or asset transfer, your data may be transferred with the service. The acquirer remains bound by this policy, and we will notify you beforehand.
Age
This service is meant for adults. Where your local law lets a minor use an online service with a parent's or guardian's consent, get that consent first. We do not knowingly collect personal data from children; if you believe we hold any, write to [email protected] and we will look into it and delete it.
Contact and requests
Questions? Want to see or delete your data? Write to [email protected] and we'll answer within a reasonable time. This site is run by an independent developer and isn't affiliated with any company or institution.
Last updated: August 27, 2026