MysticProfile

MysticProfile privacy

Privacy Policy

This policy explains what information MysticProfile processes, why it is needed, and the choices available to you.

Effective August 25, 2026

1. Scope and operator

WHITE LIFE LLC, a Delaware limited liability company, operates MysticProfile and is responsible for the practices described in this policy. The policy applies to mysticprofile.com and MysticProfile mobile applications that link to it.

It does not govern a third party’s own website, payment page, app store, sign-in service, or privacy practices.

2. Information we process

Information you provide

  • Reading profile and inputs: first name or nickname, birth date, selected focus, question, chosen cards, and the generated reading.
  • Account information: email address, sign-in provider identifier, and a name or profile field when Google or Apple supplies it.
  • Support communications: messages, screenshots, and details you choose to send when requesting help.

Purchase and entitlement information

We process transaction identifiers, payment status, purchase date, amount, currency, entitlement status, and limited fraud-prevention information. Stripe, Apple, or Google processes payment credentials. We do not receive your full payment-card number or card security code.

Technical information

We and our service providers may process IP address, browser or device type, operating system, request time, security signals, error logs, authentication state, cookie or local-storage identifiers, and general interactions needed to deliver, secure, troubleshoot, and measure the service.

3. How we use information

We process information to:

  • create and display the requested reading;
  • authenticate an account and synchronize saved readings;
  • confirm a purchase, grant access, restore access, and prevent fraud;
  • send a transactional copy of a purchased reading to the account email when the post-purchase flow requests or discloses that delivery;
  • provide support, respond to privacy requests, and communicate important service or account information;
  • protect users and the service, enforce our terms, and investigate abuse;
  • measure general advertising events when an adult user expressly allows Meta advertising measurement; and
  • comply with legal, tax, accounting, dispute, and regulatory obligations.

We do not use tarot questions, birth dates, chosen cards, or reading content to personalize third-party ads.

4. Service providers and disclosures

We disclose information only as reasonably needed for the purposes described above, including to:

  • Supabase for authentication, database, and account data services;
  • Cloudflare for hosting, content delivery, security, and network operations;
  • Stripe for website payment processing, fraud controls, refunds, and disputes;
  • Resend for transactional reading and account email;
  • Google and Apple for sign-in, app distribution, and in-app purchases where applicable;
  • Meta for optional advertising measurement only when consent allows its technology to load; and
  • professional advisers, authorities, or other parties when reasonably necessary to comply with law, protect rights and safety, investigate fraud, or complete a corporate transaction subject to appropriate protections.

When Resend delivers a reading email, the email address and content needed for that message are processed for delivery. These providers may process information under their own terms and privacy notices.

5. Meta advertising measurement

Optional Meta Pixel technology remains off unless an adult user opts in. If allowed, we may send general events such as page view, content view, checkout start, registration, and purchase with a limited event identifier, value, and currency where relevant.

We do not send Meta your tarot question, birth date, chosen cards, reading text, reading identifier, full name, email address, or payment-card details. We do not enable advertising measurement for a browser presenting a recognized Global Privacy Control signal.

We do not sell personal information for money. Some US privacy laws may define optional cross-context advertising measurement as “sharing,” “targeted advertising,” or a similar regulated activity. You can opt out through US State Privacy Choices.

6. Cookies and local storage

Essential cookies and device storage keep reading progress, sign-in, payment verification, privacy choices, Cloudflare security, and operational logging working. Optional Meta advertising measurement stays off unless allowed. See the Cookie Notice for details and controls.

7. Retention

We retain account and saved-reading information while the account is active or as needed to provide the service. We delete or de-identify it when it is no longer reasonably needed, subject to backup cycles and records retained for fraud prevention, security, accounting, tax, payment disputes, enforcement, or legal obligations.

Local active-session reading progress expires after 30 days. Saved readings attached to an account are separate and remain subject to the account-retention rules above. Transaction and entitlement records may be retained after account deletion when reasonably necessary for the listed purposes. Other local information may remain on a device until browser or app storage is cleared. Retention periods can vary by record type and legal obligation.

8. Security

We use administrative, technical, and organizational safeguards designed to protect information. No internet service or storage method is completely secure, so we cannot guarantee absolute security. Use a sign-in account you control and do not send passwords, one-time codes, or full payment credentials to support.

9. Your choices and rights

You can avoid saving a reading, reject optional measurement, sign out, clear local browser data, request support, or delete the account. Depending on where you live and whether a law applies, you may also have rights to access, correct, delete, or obtain a portable copy of information, or to opt out of certain advertising uses or profiling.

See US State Privacy Choices for request instructions, GPC information, authorized-agent requests, and appeals. See Account Deletion for the direct deletion path. We may verify a request to protect you and the account.

10. Adults only

MysticProfile is intended only for people age 18 and older. We do not knowingly offer the service to children or minors. If we learn that an underage person submitted personal information, we will take appropriate steps to delete it. Contact us if you believe this occurred.

11. International use

WHITE LIFE LLC is a United States company. If you use MysticProfile from another country, information may be processed in the United States and other places where our providers operate, subject to applicable safeguards and law.

12. Changes and contact

We may update this policy when the service, providers, or law changes. We will post the new effective date and provide additional notice when required.

For privacy questions or requests, contact WHITE LIFE LLC at [email protected].