Privacy Policy

Your questions to the runes can be personal. We collect as little as possible, keep it only as long as needed, and never sell it. This policy explains what we process when you use ICE WHISPERS™.

Who is responsible

TSwede AB, org. no. 559266-1101, Lidavägen 3, 141 91 Huddinge, Sweden, is the controller of your personal data. Contact us about privacy at contact@icewhispers.com.

What we process, why, and for how long

• Visitor ID (a cookie): a random ID that lets us enforce the free daily reading and remember purchases in your browser. Necessary for the service (legitimate interest / performance of contract). Kept up to 12 months.
• How you found us: on your first visit we note the channel or website that sent you (for example Instagram or a search engine), your country, and the page you arrived on — linked to the visitor ID, never to your name. It helps us understand which channels work (legitimate interest). Kept up to 12 months.
• Fair use of free readings: to limit free readings per internet connection, we store a one-way, daily-changing code derived from your IP address (never the IP address itself). It cannot be turned back into your IP address and is deleted after 30 days (legitimate interest).
• Website statistics: Vercel Web Analytics counts page views, countries and device types without cookies and without identifying you.
• Your questions and readings: needed to create the reading (performance of contract). If you do not save a reading to your journal, its question and text are automatically erased after 24 hours; we keep only a count, the drawn runes and the short answer so limits work.
• Your journal (members): readings you choose to save, plus your own notes and “what happened next”. Kept while your account exists; you can delete any entry at any time and download everything as a PDF.
• Account: email address and password (stored only as a secure hash by our database provider). Kept while your account exists.
• Purchases: what you bought, when, and its status. Payment details are handled by Stripe — we never see your card number. Bookkeeping records are kept for 7 years as required by Swedish accounting law.
• Deck waitlist: your email (and country, if given) to tell you when the physical deck launches — only with your consent, which you can withdraw at any time.
• Technical logs: short-lived server logs (e.g. errors, IP address) to keep the service secure, kept for a limited time by our providers.

Please avoid writing full names, health details or other sensitive information in your questions. Questions about self-harm, violence or crime are not read; they are checked automatically and not stored in a journal.

Who processes data for us

We use carefully chosen providers (processors) that may only use your data to deliver their service to us:

• Supabase — database and accounts, stored in the EU (Frankfurt).
• Vercel — website hosting.
• Anthropic — the AI model that writes the reading. It receives only your question and the drawn runes, not your name or email.
• Stripe — payments and receipts.
• Resend — sending account emails (e.g. password reset).

Some of these providers are based in the United States. Transfers outside the EU/EEA are protected by the EU–US Data Privacy Framework and/or the European Commission’s Standard Contractual Clauses.

Cookies

We only use cookies that are necessary for the service: the visitor ID and, when you sign in, secure login cookies. We do not use advertising or tracking cookies.

Your rights

You can ask for a copy of your data, have it corrected or deleted, restrict or object to processing, and receive your data in a portable format. Email contact@icewhispers.com. You can also complain to the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, imy.se) or the data protection authority in your country.

Age

ICE WHISPERS is intended for people aged 18 and over.

Changes

We will update this policy if our processing changes and show the date at the top. See also our Terms of Use & Sale.