Privacy Policy
The privacy of your data is a big deal to us. This policy explains what data we collect and why, how it is handled, and your rights with respect to it. We never sell your personal data.
This policy applies to Ganjiday (ganjiday.com) and Arcanumber (arcanumber.com), together the "Services". Both are operated by the same independent developer ("we", "us"), who can be reached at support@arcanumber.com.
Age requirement
The Services are intended for people aged 18 and over. Do not create an account, buy credits or submit personal information if you are under 18. If we learn that we hold personal data of someone under 18, we will delete it.
What we collect and why
Our guiding principle is to collect only what we need.
Account information
When you sign up, we collect your email address and the name you provide. If you choose "Sign in with Google", we receive your name and email address from Google. We use this to create and secure your account, sign you in, and send essential service emails such as sign-in codes and notices that a report is ready.
Birth information and other reading inputs
The free tools (Bazi, Saju, Ziwei, numerology and tarot) calculate results in your browser. Your birth date, birth time, birthplace and other inputs are not sent to our servers just because you run a free calculation. Your browser may keep your most recent inputs in session storage until you close the tab.
If you unlock a full reading, the inputs needed for that reading — for example your birth date and time, gender and birthplace, the name you enter for numerology, or your tarot cards and question — are sent to our servers. We recalculate the chart there and save the inputs together with the finished report in your account so you can return to it.
AI prompts
To write a full reading, we send an AI model provider a prompt that contains the chart or cards calculated from your inputs: for example the four pillars, element balance and gender, the numbers derived from your name and date, or the tarot cards you drew. Tarot prompts also include your question exactly as you typed it. Prompts do not include your name, email address, birth date or birthplace. The prompt and the generated text are stored with your report.
Email subscriptions
If you subscribe to email updates or a personalised reading email, we keep your email address, the topics you chose, where you subscribed and a short summary of your result, so that we can send what you asked for. Every subscription email contains an unsubscribe link.
Payment information
When you buy credits, your payment is processed by Stripe, our payment processor. Your payment details are submitted directly to Stripe and never reach our servers. We keep a record of each transaction — amount, currency, status and the credits granted — for your account history, refunds, tax and accounting.
Anti-bot and security data
We use Cloudflare Turnstile on sign-up, sign-in and some forms to protect the Services from automated abuse. Turnstile evaluates signals such as your IP address and browser characteristics; we only receive the result. We also record the IP address of security-relevant account events, such as sign-ins and account deletion, to prevent fraud and abuse.
Website analytics
We use Cloudflare Web Analytics to understand how our public pages are used, such as which pages are visited and how quickly they load. It does not use cookies, does not track you across other websites and is not loaded in your account area.
Voluntary correspondence
When you email us with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history to refer to if you contact us again.
Service providers
We use the following providers to run the Services. They process personal data only to provide their service to us.
| Provider | Purpose | Data involved | | --- | --- | --- | | Cloudflare (United States) | Hosting, content delivery, storage, background jobs, Turnstile and Web Analytics | All requests to the Services | | Neon (United States) | Database | Account, report, subscription and payment records | | DeepSeek (China) | AI model that writes full readings | The AI prompts described above | | Resend (United States) | Sending email | Your email address and the email content | | Google (United States) | Optional "Sign in with Google" | Your name and email address from Google | | Stripe (United States) | Processing payments | Your payment details, email address and billing country |
We may change providers, for example to use a different AI model. When we do, we will update this table and the date below.
Location of data. Our database is located in the United States, and AI prompts are processed where our AI model provider operates, currently China. If you are located elsewhere, please be aware that the information you provide will be transferred to and processed in those countries. By using the Services and providing your personal information, you consent to this transfer.
We may also disclose information when required by law, for example in response to a valid court order, and only to the extent required.
Cookies
A cookie is a small piece of text stored by your browser. We only use cookies that the Services need to work:
- Session cookie — keeps you signed in.
- Language cookies — remember the language you chose for the site.
We do not use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings, but you will not be able to sign in without the session cookie.
How long we keep data
- Account information: while your account is active.
- Saved reports, their inputs and AI prompts: until you delete the report or your account.
- Email subscriptions: until you unsubscribe or delete your account. After you unsubscribe we keep a record of it so that we do not email you again.
- Payment and refund records: for as long as tax and accounting laws require, including after your account is deleted.
- Security records of account events, including IP addresses: may be kept after your account is deleted, for fraud prevention and legal compliance.
- Backups: deleted data may remain in database backups for up to 7 days.
How to delete your data
- One report: open the report and choose Delete. This deletes the report, its inputs and the AI prompt and text behind it.
- Your account: delete it in your account settings. This deletes your saved reports, their inputs and AI prompts, removes your email subscription, anonymises your account and signs you out everywhere. Records described under "How long we keep data" are kept as stated there.
- Email subscriptions: use the unsubscribe link in any subscription email.
- By email: write to support@arcanumber.com.
Your rights
We apply the same rights to everyone, regardless of where you live. You may ask us to tell you what personal data we hold about you, to give you a copy, to correct it, to delete it, or to restrict or object to how we use it. Many of these can be done directly in your account; for anything else, email support@arcanumber.com. We may need to verify your identity, at a minimum your email address, before we act on a request. You also have the right to complain to your local data protection authority.
Changes and questions
We may update this policy to reflect new practices or legal requirements. When we make a significant change, we will update the date below and take other appropriate steps to notify users.
Questions, comments or concerns about this policy or your data: support@arcanumber.com.
Portions of this policy are adapted from the Basecamp policies, licensed under CC BY 4.0.