Privacy Policy

Molino works with the bare minimum:

• Date of birth (required): your map is calculated from it, in your browser.
• Name (optional): only if you enter it. It's used to personalize the text.
• Country (optional): it sets which entities you see first in your map.

There are no accounts, passwords or sign-up. Your profile lives in your browser's local storage (localStorage) and we don't send it to our servers except in the cases described in section 3.

• Your profile (date, name and country if you gave them) and the maps you save.
• A random device identifier (molino-profile-salt), which is mixed with your data so that your hash is unique.
• If you buy the Pro Reading: an access token for this device and a copy of your reading.
• Usage events (molino-analytics-events): which pages you open and which features you use, with date and time. Never your date of birth, name, country or any data from your map. They don't leave your browser; you can see and delete them at /analytics.
• A copy of the site's pages (service worker) so it loads faster.

All of this is deleted when you clear the site's data in your browser.

Visits (Vercel Web Analytics): we count visits in aggregate: page, country, device type, browser and referring site. It doesn't use cookies or store your IP; the visitor identifier is a hash that's discarded every day. There's no per-person profile.

Buying the Pro Reading: we store an HMAC-SHA256 hash of your normalized name, your date and the device identifier. Without our key it can't be reversed back to your data. Along with the hash we store: the device identifier (so you can recover the purchase from another device), the payment ID, an access token (it expires after 180 days and renews automatically) and the AI-generated readings. It's kept for as long as you have access: that's what lets you recover it.

AI readings (Pro Reading only): the server builds your symbolic profile (signs, numbers and elements derived from your date, plus your name if you gave it) and sends it to the AI provider along with your chat questions. Your full date of birth is not sent.

Sharing your profile: if you use "share", your name and date are stored for 24 hours under a random link so that whoever opens it can see your map. After that they're deleted automatically.

Gifts: the code, the payment ID and whether it has been redeemed (and the hash of whoever redeemed it). An unredeemed code expires after 30 days.

Bitcoin payment: we receive the transaction ID you paste. We verify it against the public blockchain and it's recorded so it can't be used twice.

Technical logs: Vercel logs every request to the server (IP, browser, page) to operate and protect the site.

Each provider handles data according to its own privacy policy. We don't use Google Analytics, social media pixels or any other tracking service.

• Calculating your map and showing it to you (done in your browser).
• Charging and giving you access to the Pro Reading: performance of the contract.
• Generating your AI readings: performance of the contract.
• Measuring visits in an aggregated, anonymous way, and keeping the site secure: legitimate interest.

We don't sell data, we don't do advertising or marketing, and we don't make automated decisions with legal effect on you.

• HTTPS required, with HSTS.
• A Content Security Policy that limits where scripts, images and frames can be loaded from.
• Security headers: X-Frame-Options, Referrer-Policy, X-Content-Type-Options and Permissions-Policy.
• No passwords to steal: there are no accounts.
• Pro access requires a token that only the purchasing device has; your name and date aren't enough.