Privacy

What stays on your phone

Your name, your birthday (and birth time, if you add it), your familiar, the cards you draw, your notes, what you ask the Oracle, your settings and reminder choices, and the people you add are saved in this browser on this device. They aren't sent to us.

It also keeps a short list of what you've tapped, like "drew a card", and a copy of the site so it opens quickly. Clearing this site's data in your browser erases it all. Start over in your Journal clears your birthday, cards, notes, people and settings, but keeps your answer about counting visits.

Sharing with someone

A link you share carries only your two zodiac signs and the first names you typed. Never a birthday. The names sit in the part of the link that stays in the browser, so our server never sees them, but the people and apps you send it to can.

Share pictures are made on your phone and show only what's on them, like your card or the Oracle's answer (with your question, if you typed one). We don't get a copy.

The morning email

If you sign up, we keep your email address, the time you picked, your time zone and your sign until you unsubscribe, so the right reading arrives at the right hour. Our email service, Resend, sends it for us. If we ask you to confirm by email and you don't, we delete that sign-up after seven days. To stop floods of fake sign-ups, we may also keep a scrambled code made from your email address, for a day at most.

Every email has a one-click unsubscribe link. Use it and the emails stop. We delete your sign-up and keep only a scrambled fingerprint of your address on a do-not-email list, so it's never emailed by mistake. We never sell or share your address or use it for anything else.

Phone alerts

If you turn on alerts, your browser gives us a push address: a long code that lets us send a notification to that browser and nothing else. We keep it with the hour you picked and your time zone until you turn alerts off or your browser stops accepting them. Your browser's maker, such as Apple, Google or Mozilla, delivers each alert.

Turn alerts off with one tap from the bell at the top of the screen and we delete the push address straight away. If you block alerts in your browser's settings instead, we delete it the next time you open A Little Witchy, or sooner if your browser tells us it no longer takes them. If alerts can't be delivered for a week, we delete it too.

Counting visits

Not switched on yet

To learn whether people come back, your phone makes up a random ID number. It isn't made from your name, birthday or anything else about you, and it's never linked to your email or push address. With it, the site tells us:

• the day and time of each visit
• what you do here: the screens you open and the buttons you tap, with details like the cards you drew, a quiz result, the Oracle's answer, a sign you looked up, "Felt this", a share or the text size you picked
• a few facts about your setup: your sign, your familiar, whether you added a birth time, how long a note is, and the kind of person you add (like a friend or partner)

It never sends your birthday, any names, what you write in your notes, your Oracle questions, which moon you picked for your energy, or your email address. Only visits after counting is on are sent, never the taps saved on your phone before then.

We keep these visit records in our own database for 90 days, then delete them. We also keep simple totals with no IDs in them, like how many phones visited on a day. We don't store your internet address with any of it, and we never sell it, share it or use it for ads.

In the US, counting is on unless you switch it off. Everywhere else, it stays off until you say yes. If your browser sends a privacy signal (Global Privacy Control or Do Not Track), we never count you. Switching it off stops the counting and deletes the visits we've recorded from this phone. Totals already added up stay.

Change your counting choice

Our web host

Cloudflare runs our website and database. Like any web host, it sees your internet address and basic browser details whenever your phone loads a page, so it can deliver it and block attacks and bots. It keeps its own technical logs under Cloudflare's privacy policy. Our own records never keep your internet address. To stop floods of fake sign-ups, we may keep a scrambled code made from it, for a day at most.

A Little Witchy doesn't use cookies. Cloudflare may set a security cookie of its own if it needs to check for bots.

Ads

There are no ads yet, and no ad, analytics or social media company's code runs here. Before ads arrive, we'll update this page and ask you first wherever the law requires it.

Copies and deleting

Most of what we know about you is on your own phone. For what we hold, your email sign-up and your push address, write to privacy@alittlewitchy.com. We'll send you a copy, fix it or delete it within 30 days, once we've checked the request comes from you.

Visit records carry only a random number, so we can't tell which are yours. Switching counting off is how you delete them.

In Europe and the UK: we send emails and alerts only because you asked for them, and count visits only after you say yes. You can take any of these back at any time, and you can complain to your local data protection authority. We're a US company, and what we hold is stored in the United States and other countries where our services operate.

Children

A Little Witchy isn't meant for children under 13 (or under 16, in countries that set that age), and we don't knowingly collect anything from them. If you think a child has signed up for emails or alerts, write to us and we'll delete it.

Changes to this page

When we change what we collect, we update this page first and change the date at the top. Bigger changes, like adding ads, also get a note on the site before they happen.

Who runs A Little Witchy

PracticalSol LLC
600 1st Ave, Ste 330 PMB 92768
Seattle, WA 98104-2246, USA
privacy@alittlewitchy.com