{"document":"privacy","version":"2026-10-06","effective":"2026-10-06","status":"published","title":"Privacy Notice","url":"/legal/privacy","text":"## 1. Controller\n\nThe operator of the service — **Cadomancy** — is the data controller.\nContact for anything about your data — a complaint, an export or erasure request, a\nquestion about this document — is **support@cadomancy.com**. The service is operated from\nIsrael with servers in the European Union. The **GDPR** applies to users in the EU/EEA;\nthe **Israeli Privacy Protection Law** (5741–1981) with Amendment 13 applies to all\nprocessing. Legal bases: performance of the contract (the terms of use) for everything\nthe service needs to work; Cadomancy's legitimate interest for diagnostics, security,\nabuse prevention, cost accounting and improvement of the service — which includes\nreading requests the service could not serve, in order to close the gap, and keeping a\nde-identified record of requests, recipes, built models, check results and what was done\nwith them to improve the service, including training Cadomancy's own models on it; your consent\nfor the contract itself. No special\ncategories of data are processed or requested.\n\n## 2. What is stored\n\nEmail address; the sign-in provider's account id; the prompts you\nwrite; recipes, revisions, built models and pipeline reports; every session event; model\ncost and points per person per month; the fact of your consent with date, version,\nmethod, **IP address and User-Agent at the moment you consent**; whether your address\nis admitted to the alpha; your printer configurations and outcome notes; feedback you\nsend us, with the part it is about and your points at that moment. A prompt may\ncontain personal data if you typed it there — do not write anything into a prompt that\nmust not reach the processors below. There is no analytics, tracking, profiling or sale\nof data, and no automated decision with legal or similar effect on you.\n\n**The country of your address.** On every request the service looks up which country\nyour IP address belongs to, in a database kept on our own server — the address is not\nsent anywhere — to decide whether the service is offered there (Cadomancy's legitimate\ninterest in complying with the law that applies to it). This check stores neither the\naddress nor the country; only a count of refused requests per country is kept. IP geolocation\nby [DB-IP](https://db-ip.com), licensed under\n[CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).\n\n## 3. Processors and transfers\n\nGoogle (Gemini API, US) and Anthropic (Claude API, US)\nreceive your prompts and the agent's dialogue. Google (US) and Supabase (EU, Ireland)\nreceive your address and account id for sign-in. Hetzner (EU, Germany/Finland) hosts the\nservers, the database and the files. Under both model providers' paid-API terms at this\nversion's date, prompts are not used to train their models — their terms, checked\nagainst their documents. Transfers to the US rest on the EU Standard Contractual\nClauses in those providers' data-processing terms and, where applicable, their EU-U.S.\nData Privacy Framework certification; operation from Israel rests on the European\nCommission's adequacy decision for Israel. Cadomancy may disclose data where the law,\na court or a competent authority requires it, or to protect its rights, users' safety\nor to investigate abuse.\n\n## 4. Retention\n\nUnlimited during the alpha. Nothing is deleted automatically and sessions\nare never deleted; deleting a part in the interface hides it from your list and keeps\nthe row. A retention period will come with a new version of this document when the\nalpha ends. Backups of the database are kept for 14 days on the server and for 30 days\non an encrypted computer of Cadomancy's; data erased or anonymised at your request\nleaves the backups only as they age out.\n\n## 5. Your rights\n\nRequests are answered within one month (extendable by two with notice);\nwe may need to confirm the request is yours. Access and portability: `GET /me/export`\nreturns everything as JSON. Rectification: email changes at Google; everything else in\nthe interface. Erasure: by anonymisation — the email becomes a hash, the provider id\nbecomes NULL, the IP address and User-Agent are removed from the consent records (the\nconsent itself and its version stay), the account can no longer be signed into, and\nthe product data — prompts, recipes, models and results — stays without a link to you,\nincluding in the de-identified record described in §1; personal data inside a prompt's\ntext is handled by hand on request, and the record is rewritten from the database every\nweek, so that deletion reaches it within a week. Restriction and objection: you may object to processing based on legitimate\ninterest and ask for restriction while it is considered. Withdrawal: `POST\n/legal/withdraw`; the API stops serving you afterwards, without affecting the lawfulness\nof prior processing. Complaint: the Israeli Privacy Protection Authority, or your EU\ncountry's data-protection authority — we ask you to write to us first.\n\n## 6. Cookies\n\nNo banner: every cookie we set is strictly necessary, and none is used for\nanalytics or advertising. They are `sid`, the signed session cookie that keeps you\nsigned in; `pkce` and `oauth_state`, which exist for a few minutes while you sign in;\nand `invite`, which carries an invitation code while you sign up. Browser local storage\nholds your interface choices — language, theme, panel layout, which hints you have\nseen; language and theme are also saved to your account so they follow you to another\nbrowser. Nothing in it is used to track you. The page loads nothing from other sites:\nits fonts and code are served by Cadomancy.\n\n## 7. Security\n\nTLS in transit; the database and files are not reachable from the\ninternet directly; sign-in is confirmed by the provider; only Cadomancy has access to\nthe servers and to the encrypted backup copy. No\nsystem is absolutely secure and Cadomancy does not guarantee that third-party access\nis excluded; incidents affecting your data are notified to you and the authority within\nthe statutory periods.\n\n## 8. Children\n\nThe service is for people **18 or older**. We do not knowingly collect\nchildren's data; tell us if a child has made an account and it will be anonymised.\n\n## 9. Changes\n\nThis document is versioned; consent is to a specific version, a new\nversion asks everyone again, and past consents stay recorded.\n"}