Mystic Profile

Mystic Profile privacy

Cookie Notice

Essential technology keeps the reading and checkout working. An adult user who enters the reading agrees to Meta advertising measurement after age confirmation, unless the browser sends Global Privacy Control or the user has already opted out.

Effective August 26, 2026

What this notice covers

This notice explains how Mystic Profile uses browser cookies, local storage, session storage, software development kits, pixels, and similar technology. Some of these tools store information on your device; others read technical information when a page or app operates.

Technology categories

CategoryPurposeChoice
Essential Remember privacy choices, maintain a private reading session, support sign-in, prevent fraud, verify checkout, restore paid access, balance traffic, and protect the service. These tools are needed to provide the service and cannot be switched off through the optional-consent control.
Advertising measurement Load Meta Pixel and measure general events such as a page view, content view, checkout start, or purchase. A consented checkout may temporarily include Meta browser or click IDs, IP address, and browser user-agent for matching and deduplication. Off unless an adult user opts in. A recognized Global Privacy Control signal keeps this category off.

Information kept out of Meta advertising events

We do not send Meta your tarot question, birth date, chosen cards, reading text, reading identifier, full name, email address, or payment-card details. Advertising events use general event labels and limited measurement information. We do not use reading content to personalize third-party ads.

When an adult user allows measurement, Meta may process its _fbp browser identifier, an _fbc ad-click identifier when present, IP address, browser user-agent, and a random event identifier. Server-side match signals are removed after the purchase event is sent or skipped and remain temporarily only for an eligible retry. Meta’s own cookies and data practices are governed by Meta’s terms and privacy notices.

Cloudflare security and operational logs

Cloudflare hosts and protects Mystic Profile. Essential network requests and operational logs may include IP address, request time, device or browser information, and security signals used to deliver pages, balance traffic, detect attacks, and troubleshoot service failures. This essential processing is not controlled by the optional Meta advertising setting.

How long information remains

Duration depends on purpose. A local coordination record expires after 24 hours and contains only a random browser-session identifier, schema and timing fields, and a saved-state flag. Before checkout, unfinished reading inputs stay in active page memory and are lost on reload. When you start Stripe checkout, we keep a random recovery token in a short-lived HttpOnly cookie and retain its corresponding locked, non-text reading state on the server for up to two hours so the Stripe return and sign-in can finish. The recovery cookie is not available to page JavaScript and does not contain your name, birth date, question, selected cards, or interpretation text. Local storage and tab-scoped session storage also do not retain your name, birth date or month-day key, question, selected cards, private-runtime access token, story draft, or interpretation text. Any obsolete tab-scoped reading copy is removed when session state is saved or loaded. Separate payment and email-delivery records may retain opaque reading and request identifiers so a completed purchase or delivery can be reconciled. Saved readings attached to an account are separate and follow the retention terms in the Privacy Policy. Privacy choices, authentication state, and fraud-prevention or security information may remain longer. Third-party tools control their own retention periods. You can clear browser storage through your browser, but doing so may sign you out or require you to restore account access.

Your controls

  • Use the Mystic Profile privacy control to withdraw or restore Meta advertising measurement at any time.
  • Use your browser settings to delete or block cookies and site storage.
  • Enable Global Privacy Control in a supported browser to communicate an opt-out preference.
  • Read US State Privacy Choices to make a privacy request.

Your choice applies to the browser and device where it is saved. You may need to set it again after clearing storage or using another browser.

Open Mystic Profile privacy controls

Updates and contact

We may update this notice when our technology or legal obligations change. Questions may be sent to WHITE LIFE LLC at [email protected].