What we collect, where it lives, and how to make it go away.

What we collect

Only what the reading needs, plus what we need to run the site:

• Your birth details: the name you give us, an optional birth-certificate name, your date of birth, your time of birth or the part of day if you know only that, and your birth city.
• Your answers to the questionnaire, including the card you draw and anything you write to the Oracle in the last question.
• Your email address when you save a reading, sign in, request membership news or place an order. Physical checkout also collects the contact and delivery details needed for your order.
• Technical information: your IP address is used to make a salted, one-way hash for rate limiting. We do not store the address itself. Page views are counted by Vercel Web Analytics without cookies.

What we do with it

Your birth details and questionnaire answers are used to compute your Energy Blueprint and to write the reading you see on the page. That is the whole purpose they serve.

Your email address is used to send you your reading, to sign you in, and to send the monthly note if you want it. Every email we send has a one-click unsubscribe link.

We do not use any of it to build an advertising profile, and we do not try to identify you across other websites.

Where it lives

We are a small operation and we use a handful of services to run the site. Each of them processes data on our behalf, under their own terms:

• Supabase — the database and the sign-in system. Our data is stored in the United States.
• Vercel — hosting, and the cookie-free page-view counter.
• Google Analytics — optional, consent-based visit and conversion measurement. We disable advertising personalization and Google signals.
• Anthropic, reached through the Vercel AI Gateway — writes the sentences of your reading from the numbers our own engine computed. See the section on what you write to the Oracle.
• Resend — sends the emails.
• Stripe — handles membership payments. Card numbers go to Stripe and never reach our servers.

The note you write to the Oracle

The last question of the questionnaire is a free-text box, and people write real things in it. It gets particular care:

• It never appears in a web address, so it cannot leak by someone copying the link out of the address bar.
• It is not written to our server logs.
• When it is used to personalise the writing of your reading, it travels with that one request. What we keep afterwards is a hash of it, used to tell one version of a reading from another — not the text itself.
• It is stored only if you save the reading to an account. If you never save the reading, it is never stored.
• If what you write signals self-harm, suicide, or abuse, we show you support resources — in the United States, call or text 988 — and that text is not sent to the model that writes the reading.

Your reading's address

A saved reading lives at an address like /b/ followed by a random identifier. Your name and birth date are not in that address, because people copy addresses out of the bar and send them to friends.

Anyone holding that link can open the reading, so treat it the way you would treat a photo of yourself: send it to whom you like, and not to anyone else.

A share card lives at a different address and is built from a separate table that has no birth date and no full name in it at all.

How we count free readings

A free account gets one chart and one reading, and another free reading once thirty days have passed. We count those by birth details rather than by email address, because counting by email would mean anyone could start again with a new one.

What we store is a one-way hash of your name, your birth date and your birth city, computed with a secret key that is not kept in the database. It is not your name, it cannot be turned back into your name, and it is not guessable without that key. Your birth time is not part of it, and neither is the name on your birth certificate.

One consequence is worth stating plainly rather than leaving you to discover it. If you enter a name, a birth date and a birth city that already have a chart here, we will tell you that the chart already has a home and ask you to sign in with the email you used. Someone who already knew all three of those details could use that message to learn that such a chart exists on this site. They would learn nothing else: not the email address, not the reading, not a single line of it. We accept that trade because the alternative is a free tier that resets with every new email address, and because everything behind the message stays shut.

Delete a reading, or delete your account, and the hash goes with it. Nothing about the count survives what you deleted.

Analytics

We count five things: that someone started a reading, that someone finished the questionnaire, that a Blueprint was saved, that a share button was pressed, and that someone pressed the membership button.

What we store is a count, not a log: a day, the name of the event, a coarse bucket, and a number. There is no timestamp, no session, no IP address, and no identifier of any kind. Reading that table end to end will not tell anyone who did what.

Page addresses are scrubbed before they reach Vercel: query strings are dropped entirely and the identifier in a reading or share address is replaced by a placeholder. What we learn is that someone read a reading, not which one.

Separately, if you allow optional analytics, Google Analytics uses a pseudonymous browser identifier and cookies to measure traffic sources, page views, engagement time, reading completion and membership purchases. We send only generic page categories, approved campaign labels and limited event data, never your name, email, birth details, answers, report contents or private report identifiers. Purchase references are hashed; zero-cost memberships are measured separately from paid purchases.

Optional analytics starts only after you choose Allow analytics. You may decline or withdraw consent through Analytics preferences on the site. Declining does not prevent you from using Hello Ursa. Analytics cookies expire after 90 days; Google processes analytics data under its privacy policy. Browser blocking and consent choices mean these reports are not a complete accounting ledger.

Cookies

We use cookies to keep you signed in. Stripe checkout uses its own cookies and privacy settings, described at checkout.

With your permission, Google Analytics also sets optional analytics cookies. We remember your analytics preference in browser storage. This is separate from the cookies needed to sign in.

What we never do

Three things we will not do, stated plainly so you can hold us to them:

• We do not sell your personal information, and we do not share it for cross-context behavioral advertising.
• We do not give it to data brokers.
• We do not use your birth details, your answers, or what you write to the Oracle to target advertising anywhere.

Your rights

Wherever you live, you can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Residents of California and of other states with privacy laws have these rights by statute, and we will not treat you differently for using them.

You do not have to ask us to delete your account: signing in and using the delete button on your account page removes your profile, your readings, your share cards, your notes to the Oracle, and your sign-in tokens. It cannot be undone.

What survives deletion is the rate-limiting table, which holds one-way hashes of an email address and an IP address and nothing else, and any billing records we are required to keep for tax purposes.

How long we keep things

A reading that nobody claims is deleted after 30 days.

A reading you have saved stays until you delete it or delete your account.

Emails you have received live in Resend's records. Membership payment records live in Stripe, under the applicable retention rules.

Changes

If we change this policy we will change the date at the top of this page. If a change is significant and you have an account, we will email you about it rather than hope you notice.

Contact

Write to service@helloursa.com.