What we collect, what we do with it, what rights you have, and how to walk away with all of it.
What Old Gods Is
Old Gods is a publishing house at theoldgods.xyz — a cathedral of interactive esoteric and educational artifacts. Each chamber is a vessel for reflection, learning, and contemplation. This policy describes what data we collect, what we do with it, and what rights you have over it.
Data We Collect
If you create an account
Email address — for sign-in and to send essential account messages.
Display name (optional) — to address you in the cathedral.
Authentication tokens — handled by Supabase, our authentication provider.
If you make a working in a chamber
Your grimoire entries — drawings, readings, vows, reflections you choose to save. Stored in your account, visible only to you.
Chamber state — progress markers, completion flags, archetype unlocks, so the cathedral remembers what you've done.
Birth date / time / location (if you enter them) — used only to compute your natal chart and sky transits in the Astrology Intelligence Lab. Never shared.
If you invoke an oracle
The question and any draw context you provide — sent to an AI provider (DeepSeek, Google Gemini, Moonshot Kimi, or Anthropic Claude) to compose the reading.
The reading itself — returned to you and stored only if you save it to your grimoire.
Contacts, photos, calendar, microphone, camera (except palm photos you actively submit to the Lines of Fate, which are sent to a vision model and not retained).
Advertising identifiers — Old Gods has no ads.
Third-party tracking pixels, fingerprinting, or cross-site tracking.
How We Use Your Data
To run the cathedral — accounts, sync, oracle responses.
To improve the cathedral — anonymized usage patterns inform what we build next. Individual seekers are never identified in these aggregates.
To respond to your messages — when you contact support.
We do not sell your data. We do not share it with advertisers. We do not train AI models on your private grimoire content.
Third Parties
Supabase — authentication, account storage, profile data, grimoire entries. Encrypted in transit (TLS 1.3) and at rest. Row-Level Security ensures only you can read your own data.
Oracle providers — DeepSeek, Google Gemini, Moonshot Kimi, Anthropic Claude. When you invoke an oracle, your question is sent to one of these providers to generate the reading. Your account identity is not sent — only the question and context you provide.
Hetzner (server hosting) — the cathedral runs on a Hetzner VPS in Germany.
Vercel / GitHub — used for source-of-truth versioning and edge delivery in some cases.
Your Rights
Access — you can view all your data in the cathedral.
Export — every chamber that creates grimoire entries lets you export them as PDF or JSON.
Deletion — you can delete your account at any time. This purges your profile, grimoire entries, chamber state, and all linked data from Supabase. The deletion is permanent and immediate.
Correction — you can edit your display name, email, and any saved entries.
Old Gods is intended for users 12 years and older. We do not knowingly collect personal data from anyone under 12. If we learn we have, we will delete it.
Security
All data is transmitted over TLS 1.3. Database access is gated by Row-Level Security policies. Admin chambers require basic authentication. We follow modern best practices for credential storage and rotation. If you believe you have found a vulnerability, please write to security.txt.
Cookies
Old Gods uses only essential cookies for authentication (set by Supabase). We do not set advertising cookies, analytics cookies, or cross-site tracking cookies.
Changes
If we change this policy materially, we will notify you in the cathedral and via email. The effective date below always reflects the current version.