Privacy Policy

Last updated: October 24, 2026

This policy explains what information Palmystique ("we", "us") collects when you use the Palmystique app and website at palmystique.com, why we collect it, who we share it with and the choices you have. We have tried to write it plainly. Palmystique is operated by Bostone Consulting, based in the United States.

The short version

• You can use Palmystique without an account. We give your browser a random guest identifier so your readings and Gold stay with you.
• If you create an account, the only personal detail we ask for is your email address. Sign-in is by an emailed link; there is no password.
• We do not ask for a photo of your hand. Readings are made from the lines you draw on the chart.
• Payments are handled by Stripe. We never see or store your full card number.
• The free tier shows Google ads, which use cookies.
• We do not sell your personal information.

Information we collect

Information you give us

• Email address, if you create an account or buy Gold. We use it to sign you in with a one-time link, to keep your readings and Gold attached to your account, and to send receipts or answer you if you contact us. Buying Gold requires an account.
• Your palm drawing: the positions and shapes of the lines you trace on the hand chart. This is a set of coordinates on our chart, not an image of your hand.
• Chiromancer messages: the questions you type to the Chiromancer and its replies.
• Palm details you describe: if you tell the Master Chiromancer about a feature of your palm (for example "I have a star on my heart line"), it may be saved as a note on your palm drawing and used in later replies.
• Messages you send us by email.

Please do not include sensitive personal information, such as health details, in Chiromancer messages. The Chiromancer does not need it and is not a source of advice.

Information created when you use the app

• Guest identifier. A random identifier stored in your browser's local storage. It links your readings, Gold and Chiromancer conversations to your browser before you sign in. When you create an account, the guest data is merged into it.
• Readings. The readings generated for you, and the measurements of your drawing used to make them. Readings are saved on your device and, if you are signed in, synced to your account so you can see them on other devices.
• Gold balance and purchase records. The Gold you have bought or been given, how it was spent, and the Stripe payment identifier for each purchase.
• Terms acceptance record. When you accept our Terms of Use we store the version you accepted, the time, and a technical device fingerprint (a hashed summary of non-personal details such as platform and app version). We keep this to show that consent was given; it is not used for advertising or tracking.
• Technical and log data. Like most web services, our hosting and servers (Google Firebase and Google Cloud) record technical data such as IP address, browser type, the time of a request and errors, to keep the service secure and working.
• Settings and preferences, stored in your browser's local storage.

Information from payment

When you buy Gold, Stripe collects your payment details directly. Stripe tells us whether the payment succeeded, the amount, and a customer and payment identifier. We pass your account email to Stripe so it can send your receipt and link your purchases.

How we use information

• To generate readings and Chiromancer replies.
• To sign you in, keep your readings and Gold attached to your account, and restore Gold if a purchase is interrupted.
• To process payments and prevent fraud, abuse and duplicate charges.
• To show advertising in the free Novice tier.
• To keep records of your acceptance of our Terms.
• To operate, secure, troubleshoot and improve Palmystique.
• To reply when you contact us.

We do not send marketing email unless you have asked for it.

AI processing

Readings and Chiromancer replies are written by AI language models from third-party providers. Depending on the feature and our current settings, requests are processed by OpenAI or DeepSeek; Anthropic may be used as a backup. We may change which provider handles which feature at any time, and any of them may process your request.

In addition, in Master Chiromancer conversations, if you describe a palm detail our own matching does not recognise, the text of that one question may be sent to TypeSafe's classification service so the detail can be saved as a note on your palm.

What we send. For a reading, we send a text description of your palm drawing (the lines you traced, with their length, curve, position and crossings, and the mounts they touch), any palm details you have told the Chiromancer, the text of an earlier reading of the same palm when we are expanding it, and our own instructions. For a Chiromancer reply, we send the same palm description, your readings for that palm, your question, and the earlier messages in that conversation, or a short summary of older ones.

What we do not send. We do not send your email address, your account or guest identifier, your payment details or your IP address. The requests come from our servers, not your browser. The providers do receive whatever you type, though, so please keep your name, contact details, health information and other personal information out of your questions.

The providers process this data to generate the response, under their own API terms and privacy policies. DeepSeek processes data on servers in the People's Republic of China. When a request goes to DeepSeek, your data is transferred outside your country. For users in the EEA, the UK and Switzerland, this is an international transfer to a country that is not recognised as providing an equivalent level of data protection. OpenAI and Anthropic process data mainly in the United States.

Advertising and cookies

The free tier of Palmystique and our guide pages show ads served by Google AdSense.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet.
• You may opt out of personalised advertising by visiting Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalised advertising at aboutads.info.
• Learn more about how Google uses information from sites that use its services.

Ads are served by Google. The Palmystique app and these pages do not include a consent-management platform or Google Consent Mode, and they do not ask for advertising consent themselves. If you are in the European Economic Area, the United Kingdom, or Switzerland, Google may show you a choice about personalised ads when it serves them. You can control personalised ads in Google's Ads Settings, and you can read how Google uses information from sites that use its services. Our guide pages load fonts from Google Fonts, which receives your IP address to deliver them.

Apart from advertising cookies, Palmystique itself uses your browser's local storage, not tracking cookies, to remember your guest identifier, settings and saved readings. Sign-in uses Firebase Authentication, which stores a session token in your browser.

Who we share information with

We share information only with service providers who help us run Palmystique, and only as needed:

• Google (Firebase and Google Cloud): hosting, sign-in, database and server functions.
• Stripe: payment processing.
• OpenAI and DeepSeek, with Anthropic as a possible backup: generating readings and Chiromancer replies (see AI processing above).
• TypeSafe: recognising palm details described in Master Chiromancer questions.
• Google AdSense: advertising in the free tier and on guide pages.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a sale or reorganisation of the service, in which case this policy will continue to apply. We do not sell your personal information.

How long we keep information

• Chiromancer conversations expire 30 days after their last activity and are then deleted.
• Account data, readings and Gold are kept while your account exists. Deleting your account removes them.
• Guest data that is never linked to an account may be removed after a period of inactivity.
• Payment records are kept by Stripe, and by us in summary form, as long as tax, accounting and fraud-prevention rules require.
• Terms acceptance records are kept as long as needed to show consent was given.

Your choices and rights

• Delete your account: from the Account page in the app. This deletes your account, your saved readings and Gold, and the customer record we created at Stripe. Stripe keeps its own records of past payments as the law requires.
• Change your email: from the Account page.
• Clear guest data: clear your browser's site data for palmystique.com.
• Ads: use the Google links above to control personalised ads.
• Access, correction, deletion or a copy of your data: email info@palmystique.com. We will verify the request and respond within the time the law allows.

Depending on where you live you may have additional rights, including the California rights below and, in the EEA and the UK, rights to object to or restrict certain processing, to data portability, and to complain to your local data protection authority. We will not treat you differently for exercising them. Where the GDPR applies, we rely on performance of our contract with you (readings, accounts, purchases), our legitimate interests (security, fraud prevention, improving the service), and legal obligations (tax and payment records). We do not collect a separate consent for advertising; personalised ads, when shown, are served by Google as described above.

California privacy rights

If you live in California, the California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives you the rights below. They are subject to the exceptions in those laws.

• Right to know. You can ask what personal information we have collected about you, the categories of sources, why we collected it, and the categories of third parties we disclose it to. The categories we collect are the ones in "Information we collect": identifiers (an email address if you have an account, a guest identifier, and Stripe customer and payment identifiers), commercial information (Gold purchases), internet or network activity (such as IP address, browser type, and server logs kept by our hosting providers), and the content you give us (your palm drawing and Chiromancer messages). We do not collect precise location, government ID numbers, or your card number. Stripe collects the card number.
• Right to delete. You can ask us to delete personal information we collected from you. Signed-in users can delete an account from the Account page. That removes the account, saved readings, and Gold, and the Stripe customer record we created. Stripe keeps its own records of past payments where the law requires it. We keep a record that the payment already granted Gold, with the account id replaced by a hash and with no email address, so the same payment cannot grant Gold again. Guest data stored only in the browser can be cleared by clearing site data for palmystique.com. We cannot delete cookies that Google set for advertising; use the ad controls above for those.
• Right to correct. You can ask us to correct inaccurate personal information. You can change the email on your account from the Account page.
• Sale and sharing. We do not sell personal information for money, and we have not sold it in the past 12 months. We do not ourselves share personal information for cross-context behavioral advertising. Google AdSense may use cookies to personalize ads on the free tier and on our guide pages, and California law can treat that as "sharing." Opt out through Google's Ads Settings and aboutads.info. This site does not read a browser "Do Not Track" or Global Privacy Control signal.
• Non-discrimination. We will not deny Palmystique, charge a different price, or change the quality of the service because you exercised these rights. Gold is an optional purchase that removes ads for everyone who buys it. It is not a price offered in exchange for personal information.

To use these rights, email info@palmystique.com. Write from the email on your account if you have one, and say whether you are asking to know, delete, or correct. We will verify the request and respond within the time California law allows, generally 45 days. You may use an authorized agent if you give them written permission and we can verify that the request is yours. You can also delete an account or change its email yourself, as described above.

Children

Palmystique is not intended for children under 13, and we do not knowingly collect personal information from them. Users aged 13 to 17 should have a parent's or guardian's permission. If you believe a child under 13 has given us personal information, email us and we will delete it.

Security

We use encrypted connections, access controls and the security features of our providers to protect your information. No online service can be perfectly secure, but we work to keep what we hold to a minimum.

International transfers

Palmystique is run from the United States, and our providers process data mainly in the United States. DeepSeek processes data in the People's Republic of China, as described under AI processing. These countries may not have data protection laws equivalent to those where you live.

Changes to this policy

If we change this policy we will update the date at the top, and for significant changes we will tell you in the app.

Contact

Questions about privacy: info@palmystique.com.