Skip to main content
OracleNova

Privacy Policy

What OracleNova collects, why, with whom it is shared and how to exercise the rights granted by the GDPR.

Last updated 2026-05-17

Data collected

OracleNova collects only the data strictly necessary to provide the service:

  • Account data — email address and, where the user uses social login, the basic profile data returned by Google or Apple (display name, profile picture URL). Managed by our authentication partner Clerk.
  • Payment data — first name, last name, billing address and amount paid, collected only for users who subscribe to a paid plan. Card details are entered directly on LemonSqueezy and are never stored on OracleNova servers.
  • Reading journal — for signed-in users, the spreads they explicitly save: timestamp, deck used, cards drawn, optional personal notes the user writes.
  • Anonymous analytics — aggregated page-view counts, country (from IP), device type. No advertising cookie, no cross-site tracking, no individual user profile.

OracleNova does not collect sensitive personal data (health, political opinions, religion, sexual orientation, etc.) and does not ask users to provide them.

Purposes

The data above is used for the following purposes only:

  • Allowing users to sign in to their account and resume their saved readings
  • Billing paid subscriptions and producing legally required invoices
  • Improving the site through aggregate, non-personal usage statistics
  • Sending essential service emails (password reset, payment receipt). No marketing email is sent without opt-in.

Sub-processors

OracleNova relies on a small number of trusted partners (data processors) to operate the service:

Transfers outside the European Economic Area are covered by the European Commission Standard Contractual Clauses or equivalent safeguards.

Retention periods

  • Account data — kept for as long as the account exists; deleted within 30 days after account deletion request.
  • Invoices and payment records — kept for 10 years to comply with accounting and tax obligations.
  • Reading journal — kept for as long as the account exists; can be exported or deleted at any time from the in-app account settings.
  • Anonymous analytics — kept for 13 months, then aggregated.

Your rights

Under the GDPR and equivalent legislation, every user has the right to:

  • Access the personal data OracleNova holds about them
  • Rectify inaccurate data
  • Request deletion of their data (the «right to be forgotten»)
  • Receive their data in a portable machine-readable format
  • Object to specific processing and withdraw consent at any time
  • Lodge a complaint with the competent data protection authority

Most of these rights can be exercised directly from the in-app account settings. For anything that requires manual handling, the contact channel below is the right place.

Contact

For any privacy-related question or to exercise the rights above, write to privacy@oraclenova.com. A response is provided within one month, in line with article 12 of the GDPR.