Privacy Policy
Last Updated: December 5, 2025
1. Introduction
Sixty Four Doors ("we," "our," or "us") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our I Ching service at sixtyfourdoors.com (the "Service").
Please read this privacy policy carefully. If you do not agree with the terms of this privacy policy, please do not access the Service.
2. Information We Collect
2.1 Account Information
When you create an account, we collect:
- Email address
- Encrypted password (we never store plain-text passwords)
- Account creation date
- Subscription tier (free or premium)
2.2 Reading Data
When you consult the oracle, we collect and store:
- Your questions submitted to the I Ching
- Hexagram casting results (coin tosses or yarrow stalk divisions)
- AI-generated interpretations
- Personal notes you add to readings
- Timestamps of consultations
- Reading type (general, relationship, finance, health, zen)
2.3 Usage Information
We automatically collect:
- IP address
- Browser type and version
- Device information
- Pages visited and features used
- Session duration
2.4 Cookies and Local Storage
We use cookies and browser local storage to:
- Maintain your login session
- Remember your preferences
- Prevent abuse and rate limiting
3. How We Use Your Information
We use the information we collect to:
- Provide and deliver the Service
- Generate personalized I Ching interpretations using AI (Claude API by Anthropic)
- Save your reading history for future reference
- Process payments and manage subscriptions
- Enforce usage limits (5 free readings per day for anonymous users)
- Prevent abuse and protect against unauthorized access
- Analyze usage patterns to improve the Service
- Send important service notifications (account, subscription, security)
- Respond to your requests and support inquiries
4. Third-Party Services
4.1 Anthropic (Claude AI)
Your questions and hexagram data are sent to Anthropic's Claude AI to generate personalized interpretations. Anthropic's use of this data is governed by their Privacy Policy. We do not control Anthropic's data practices.
4.2 Supabase (Database & Authentication)
We use Supabase to store your account information and readings. Your data is stored on secure servers. Supabase's privacy practices are described in their Privacy Policy.
4.3 Stripe (Payment Processing)
If you purchase a premium subscription, payment processing is handled by Stripe. We do not store your credit card information. Stripe's data practices are governed by their Privacy Policy.
4.4 Vercel (Hosting)
Our Service is hosted on Vercel's infrastructure. Vercel may collect technical information about your visit. See Vercel's Privacy Policy.
5. Data Retention
- Account data: Retained until you delete your account
- Free tier readings: Retained for 90 days, then automatically deleted
- Premium readings: Retained indefinitely while your account is active
- Deleted account data: Permanently removed within 30 days of account deletion
6. Your Rights
Depending on your location, you may have the following rights:
6.1 Access & Portability
You can view and export your reading history at any time from your account dashboard.
6.2 Correction
You can edit your account information and add/edit notes on your readings.
6.3 Deletion
You can delete individual readings or your entire account. Once deleted, data cannot be recovered.
6.4 Opt-Out of Marketing
We do not currently send marketing emails. If we do in the future, you can unsubscribe from any email.
6.5 GDPR Rights (EU Users)
If you are in the European Union, you have additional rights under GDPR:
- Right to object to processing
- Right to restrict processing
- Right to lodge a complaint with a supervisory authority
6.6 CCPA Rights (California Users)
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):
- Right to know what personal information is collected
- Right to request deletion of personal information
- Right to opt-out of sale of personal information (we do not sell your data)
- Right to non-discrimination for exercising your rights
7. Data Security
We implement industry-standard security measures:
- HTTPS encryption for all data transmission
- Encrypted storage of passwords using bcrypt
- Row-level security (RLS) policies in our database
- Regular security updates and monitoring
- Minimum privilege access controls
However, no method of transmission over the Internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
8. Children's Privacy
Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information.
9. International Users
Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence. By using the Service, you consent to such transfers.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:
Email: privacy@sixtyfourdoors.com
Response Time: We aim to respond within 7 business days
Sixty Four Doors