Privacy policy

1. Data controller

Lars Boob, Schalserstraße 12, 6200 Jenbach, Austria. Contact for privacy requests: kontakt@i-ging.online.

2. Website, hosting and servers

This website is delivered through the Lovable hosting platform. We use Lovable Cloud for user accounts and saved history. Pages and images are delivered, and automated access is mitigated, through Cloudflare’s network. These providers process technically necessary connection data, including IP address, time, requested address, browser information and technical error or security data. The purpose is to provide and protect the website; the legal basis is Article 6(1)(f) GDPR. Our legitimate interest is reliable and secure operation.

3. EU connection and international processing

The connection details supplied for our cloud backend identify region eu-west-1 (Ireland, EU). This does not guarantee that all data are processed exclusively in the EU: Cloudflare operates a global delivery network; security and cookie data in particular may also be processed in the US. A delivery server’s location is not the same as the database location. Provider information on processing agreements, subprocessors and transfer safeguards is available at https://lovable.dev/data-processing-agreement, https://trust.lovable.dev/ and https://www.cloudflare.com/cloudflare-customer-dpa/. This general information does not establish a specific applicable agreement or exclusively European processing for this website.

4. Readings without signing in and PDF exports

Readings and PDF exports are available without an account. Without signing in, your question and coin tosses are processed in your browser’s working memory; the app does not create a server-side history entry for that reading. Reloading the page discards the local reading. The PDF is created in your browser; a downloaded file remains on your device until you delete it. General connection and hosting processing when visiting the website still applies.

5. Accounts and storage of oracle questions

An account is optional and required for personal history. Registration, sign-in and confirmation emails involve processing your email address and the credentials needed to sign in. When you begin a reading while signed in, the question is saved immediately, even if you do not complete all six tosses. Stored fields are a reading identifier, your user identifier, the question (up to 500 characters), the timestamp and, after completion, six line values. Displayed answers are reconstructed from the stored line values and the Wilhelm texts, not saved as an additional personal answer file. The legal basis is Article 6(1)(b) GDPR for the requested account and history service. Signed-in users can access only their own history through the app; authorised technical access for administration and maintenance remains possible. Saved readings are available in your personal history for 30 days after creation. Access is then blocked; the question, user association, timestamp and line values are removed from the active database by the next daily cleanup at 02:00 UTC, within a further 24 hours during normal operation. To request deletion of an account or individual readings, email kontakt@i-ging.online. The app currently has no deletion button; account deletion is not demonstrated to automatically remove all history entries, so those entries must be addressed separately when processing a deletion request.

6. Sensitive information in questions

Please do not include health data, religious beliefs or other particularly sensitive information about yourself or others in saved questions. Such information is not required to use the oracle. The account and history service does not include separate consent to store special categories of personal data under Article 9 GDPR. For a reading that is not saved to history, use the oracle while signed out.

7. Cookies and local browser storage

To maintain a requested sign-in, the app stores a session in your browser’s local storage; signing out removes the session. Storage strictly necessary to provide an explicitly requested service is subject to the exception in Section 165(3) of Austria’s TKG 2021. The published website was also observed setting __cf_bm and __dpl cookies. Cloudflare describes __cf_bm as a bot-detection cookie which expires after 30 minutes of continuous inactivity. The available provider information does not sufficiently establish the precise purpose or lifetime of __dpl. Its classification remains unresolved; its name alone does not establish exemption from consent.

8. Visitor analytics with Lovable

We use Lovable’s built-in hosting-platform visitor analytics to assess website usage and reach. According to the provider, it reports visits, page views, pages per visit, visit duration and engagement, with referring sites, visited pages, countries and device types. The provider describes a random identifier per visit, discarded when the visit ends, no analytics cookies of its own and no browser storage by this analytics feature. Lovable collects the data; the script and reporting address are served through our own domain. A request to /__l5e/trackevents was observed on the published website on 5 November 2026. We have not integrated Google Analytics or advertising pixels into the app. The general provider description establishes neither the precise purpose of every observed hosting script nor the extent of any additional click or error collection. A specific analytics retention period and processing location have not been confirmed for this website. Non-essential storage or access to information on your device requires prior consent under Section 165(3) of Austria’s TKG 2021. If personal-data analytics relies on consent, Article 6(1)(a) GDPR also applies; consent must be freely given, informed, purpose-specific and withdrawable at any time. Refusal must not prevent readings or PDF exports. The absence of analytics cookies does not automatically establish exemption from consent. No verified prior-consent blocking mechanism is currently configured for the built-in visitor analytics; this notice or a simple information banner cannot replace any required consent. Whether this specific analytics may lawfully operate without consent requires legal assessment of its actual processing and provider information. Provider information: https://docs.lovable.dev/features/analytics#privacy. The hosting cookies listed in Section 7 require separate assessment.

9. Retention and deletion requests

Saved readings are subject to the 30-day period and daily cleanup described in Section 5. Account data are treated separately and remain stored for the optional account service until a deletion request is processed or the purpose no longer applies. Deleting history does not remove downloaded PDFs from your device. No fixed provider retention periods for this website’s server logs, security data or backups have been confirmed to us; we therefore do not invent a number of days or promise immediate complete removal from backups. Deletion requests are handled subject to legal requirements, any retention obligations and the deletion options actually available.

10. Your rights

You may request access, rectification, erasure and restriction of processing. Where the legal conditions apply, you have rights to data portability and to object, in particular to processing based on legitimate interests. You may withdraw any consent for the future without affecting the lawfulness of prior processing. Contact kontakt@i-ging.online. We generally respond within one month; any legally permitted extension will be explained. You may complain to the Austrian Data Protection Authority, Barichgasse 40–42, 1030 Vienna, https://www.dsb.gv.at/. Information required for optional registration is necessary for the account service; readings and PDF exports remain available without an account. The oracle is for reflection and does not make automated decisions with legal or similarly significant effects within Article 22 GDPR.

Last updated: 7 November 2026