Privacy Policy
Effective date: July 22, 2026 · Last updated: October 15, 2026
PalmReading.pro ("we", "us") is an anonymous, one-time palm-reading service. We don't run a user-account system; you don't sign up. This page describes the small amount of data the service does collect, why we need it, and how long we keep it.
If anything here is unclear or you want your data removed, email us at contact@palmreading.pro.
What we collect
-
Your palm photo. You upload it; we send it to our AI providers to generate your reading and store a copy in Cloudflare object storage. We use stored photos internally to investigate failed or rejected readings, improve photo-quality checks, and support the reading service, and we delete them automatically 30 days after upload. We do not use your photo to train an AI model or sell it.
-
The reading itself. The generated archetype, element, and five chapters (Love, Career, Relationships, Energy, Future) are stored so we can audit AI costs, review quality, support recovery flows, and deliver the paid reading if you unlock it.
-
Your email address — only if you pay. Stripe collects it at checkout and passes it to us via the payment webhook. We use it to (a) email you a copy of your reading and (b) recover the reading if you lose the original link. We do not send marketing email.
-
Your IP address. We read it from the request headers to rate-limit abuse (10 free readings per hour per IP). We bucket it by the hour into a counter file, and we store a one-way hash of the IP with reading records for abuse review and recovery support. We do not store the raw IP address in reading records.
-
Payment metadata. Stripe processes the one-time charge ($3.99, or the local price in some regions); we receive a paid marker containing the Stripe session ID, amount, currency, timestamp, and your email — never card details. Card data never touches our servers.
We do not collect: your name, address, phone number, date of birth, government ID, biometric face data, or location.
We do not use: third-party analytics cookies, advertising cookies, or tracking pixels.
Who we share it with (sub-processors)
Your data passes through these third parties strictly to deliver the service:
| Sub-processor | What they see | Why |
|---|---|---|
| DeepSeek (China) | Your palm photo + the analysis prompt | Primary AI reading and photo-quality analysis |
| Google (Gemini API) | Your palm photo + the analysis prompt | Fallback AI reading and photo-quality analysis |
| KIE AI | Your palm photo + the analysis prompt | Alternate AI reading and palm-map artwork |
| Stripe | Your email + card details + amount | To process the one-time payment |
| Resend | Your email + the reading text | To email you the copy |
| Cloudflare | Request traffic, palm photos, reading data, hosting | DDoS protection, hosting, storage |
Each of these has its own privacy practices linked from their public sites. We don't sell, rent, or trade your data to anyone outside this list. If a court order or other legal requirement compels disclosure, we'll comply and notify you if legally allowed.
How long we keep it
| Data | Retention |
|---|---|
| Palm photo | Deleted automatically 30 days after upload, or sooner if you ask us to delete it. |
| Palm map artwork (paid reports) | The illustrated line drawing generated from your photo is kept with your report so the report keeps working. |
| Reading payload | Kept for recovery, support, quality review, and cost audit until you ask us to delete it. |
| Email (in the paid marker) | Kept alongside the reading payload. |
Public share snapshot (/r/{slug}) | Kept while the slug is live — that's what backs the public URL you shared. Email us with the slug to take it down. |
| IP rate-limit counter | Auto-expires when its 1-hour bucket rolls over. |
| IP hash on reading records | Kept with the reading record until deletion. |
| Stripe payment records | Subject to Stripe's own retention policy (typically several years for tax/compliance). |
| Resend email logs | Subject to Resend's retention policy. |
You can request immediate deletion of any palm photo, reading, share snapshot, or paid email at any time by emailing contact@palmreading.pro with the reading URL, payment email, or approximate upload time and country. We'll act within 7 days.
Public share URLs (/r/{slug})
When you click "Share" on a paid reading, you generate a public URL like /r/abc123def4. That URL is intentionally indexable by Google and accessible to anyone who has the link.
- The snapshot behind that URL contains your archetype name, tagline, and the five chapter bodies — not your email, your palm photo, your payment information, or the private unlock token.
- The URL is created only when you choose to share. If you never click a share button, no public URL exists.
- You can delete the share snapshot any time by emailing us the slug.
Cookies & local storage
We use only the minimum necessary cookies:
- A theme preference (if you toggle light/dark).
- A
next-intllocale cookie if your browser indicates a non-English preference.
We do not set analytics cookies, advertising cookies, or third-party trackers.
Your rights
Depending on where you live, you may have the right to access, correct, or delete the personal data we hold about you, and to object to certain processing. Because we don't have user accounts, the practical way to exercise these rights is to email us at contact@palmreading.pro — include the reading URL or your payment email.
If you're in the EEA, UK, or California, you also have the right to lodge a complaint with your local data protection authority.
Children
PalmReading.pro is not intended for use by anyone under 16. We do not knowingly collect data from children. If you believe a child has uploaded a photo or made a payment, email us and we'll delete the record.
Changes to this policy
We may update this policy as the service changes. Material changes will be posted on this page with an updated effective date. If you've already paid, we'll honor the privacy terms in effect at the time of your payment for the data tied to that reading.
Contact
contact@palmreading.pro — same address for data deletion, complaints, and general privacy questions.