SIGNES & INTUITIONS · ORION WEB DESIGN

Privacy

2026-10-20 · 1.0.0

The journal field has been removed from the app. Previously saved notes remain only in local storage and your “My data” export until deleted.

Who Processes the Data?

Emile Espilondo — sole proprietor (EI), trade name Orion Web Design, at the address indicated in the legal notice, is responsible for the processing of this application. For any requests: contact@orionwebdesign.fr.

On Your Device

The draws, collection, language, sound, choice of online services, a random game identifier, your optional question, and your journal are stored in the local storage of the application or browser. They remain until deleted. The question and journal are not sent to our server or OpenAI. No user account specific to the application is required. An Apple or Google account is necessary for purchasing and restoring the subscription.

This storage serves the requested game, its continuity between draws, and your preferences. No advertising tools, tracking, or audience measurement SDKs are integrated. The fonts and musical ambiance “Clairière” are included in the application. No external music service is used. There are no advertising cookies.

NAYA: Your Choice

Online functions are optional and disabled without your consent. After activation, our server receives the identifiers of the revealed cards, the language, and a pseudonymized technical identifier specific to this installation. It uses them to prepare the interpretation. The choice, dated and associated with this version of the information, is stored on your device. You can remove it from the footer: new requests in the application will stop. A request already received by a provider may still complete its processing.

OpenAI receives the texts of the draw and the interpretation instructions, without your installation identifier, your question, or your journal. The provider sees the technical information of the connection from our server and our professional account.

Purchase and Subscription Verification

Apple or Google processes the payment according to its policy. The publisher does not receive your credit card number. The server verifies with the store the proof of purchase, the product, expiration, and any refunds or cancellations. It retains a transaction identifier or verification token, the provider, the product, and validity dates, associated with the pseudonymous identifier of this installation, to execute the contract and secure access. This minimal data is retained during the subscription and for up to 13 months after the last validity for support and abuse prevention, unless a separate legal obligation applies. Accounting data held under a legal obligation is retained according to the applicable duration. Deleting the application does not terminate the contract in your store.

Purposes and Legal Bases

The local operation responds to the service you request. Optional processing of interpretation relies on your consent. Access controls, request limitations, and technical logs are based on the legitimate interest of protecting the service against abuse. The data is not used to make decisions producing legal effects on you and is not sold.

Retention

• Interpretations on our server: cached in memory, for a maximum of 24 hours.
• Technical session: maximum 30 days. After deletion, a pseudonymous revocation marker prevents its reuse for 30 days, then is purged.
• Web security logs (IP, date, path without parameters, status): maximum 7 days. No request body, personal journal, or access token is recorded.
• Private technical backups: 7-day rotation, without copies of interpretations. Current revocation markers are retained during a restoration.

These durations concern our service. OpenAI indicates that API data is not used to train its models by default; its abuse monitoring logs may be retained for up to 30 days, except for legal or security exceptions. We use store: false, without claiming to benefit from zero retention.

Recipients and Transfers

Only the publisher and its necessary technical service providers are involved: Hostinger (hosting) and OpenAI (interpretation). Although our server is in France, OpenAI may process data outside the European Economic Area according to its conditions and transfer mechanisms. The links below allow you to consult their policies; their use remains optional.

OpenAI API Data · OpenAI Privacy · Hostinger Privacy

Your Rights and Requests

You can request access, rectification, deletion, limitation, and, depending on the processing basis, portability or object to the processing. Withdrawal of consent does not affect processing already carried out. The “My Data” requests allow you to export the data of this installation and delete its local data and personalized server caches. Deletion does not automatically remove data retained by providers according to their own obligations; contact us to assist with a request to them.

Write to contact@orionwebdesign.fr. Response generally within a month; a motivated extension is possible under GDPR conditions. A proportionate identity verification may be necessary. Without a named account, we cannot retrieve a draw from your name alone: keep your export or use the commands of the concerned installation. You can file a complaint with the CNIL and set your directives regarding the fate of your data after your death.

Shared Device and System Backups

A person with access to your unlocked device can read the journal. Local storage is not an encrypted vault by the application. Use your phone's lock and avoid sensitive information. Automatic Android backups of the application are disabled; depending on iPhone or browser settings, the system may retain local copies. Deletion in the application cannot erase exports you have saved elsewhere.