Privacy
What Phate holds about you, when it reaches Phate, how long it stays, and which other companies handle it.
The short version
Phate sets no cookie on the quiz, the price page, your reading page or any other page outside your account, and none at all until you sign in. Nothing you type in the quiz reaches Phate. The questions, your chart and the reading of it run in your browser. What the site does send, from the first page on, is a short note of which screens you reached and when, so Phate can see where people stop; that note never holds an answer, a birth detail, a name or anything you typed. Your answers and your address go to Phate only when you press the button on the price page.
Outside your account your browser holds at most two things for Phate, both in its local storage: phate.progress.v1, your quiz answers and, once you reach the price page, the address you typed there and the boxes you ticked; and phate.sid.v1, an anonymous session id with the door you came in by and any ad click id; the id and the door go with each visit note, the click id does not. Signing in adds the one cookie described on the cookies page, and nothing else.
Phate sends two kinds of email on its own: the one that delivers your sketch, and the weekly note. It sends a sign in link only to an address that asked for one, or, while sketches are free, pressed the price page's button with an order already behind it; a deletion confirmation only when one is asked for at your address. Neither does anything until you open it. Beyond those it writes to you only to answer you, or to give a notice the law requires, such as a change to the price or to the terms. The link in your delivery email opens your reading with no sign in, and anyone who has it can open the page; we can revoke it and issue a new one if you ask. Signing in to your account with the address on the order opens the same reading, and revoking the link does not close the account.
How long each kind of record is kept is in the table under After you pay.
In your browser, before you pay
Nothing you type in the quiz reaches Phate. The questions, your chart and the reading of it run in your browser. What the site does send, from the first page on, is a short note of which screens you reached and when, so Phate can see where people stop; that note never holds an answer, a birth detail, a name or anything you typed. Your answers and your address go to Phate only when you press the button on the price page.
The lines are computed from the same positions as your chart: on the free page in your own browser, where nothing you type leaves the page, and on your reading's tab on Phate's side from the birth details you gave. The map is Phate's own file; no map service is asked and nothing is fetched to draw it.
Outside your account your browser holds at most two things for Phate, both in its local storage: phate.progress.v1, your quiz answers and, once you reach the price page, the address you typed there and the boxes you ticked; and phate.sid.v1, an anonymous session id with the door you came in by and any ad click id; the id and the door go with each visit note, the click id does not. Signing in adds the one cookie described on the cookies page, and nothing else. The first is there so you can leave the quiz and come back to it without answering again, and so the price page, however you come back to it within an hour, still has the address you typed and the boxes you ticked. The second is there so the notes of one visit can be read together and, if you pay, so the purchase can be matched to the door you came in by.
When your answers are in this browser, the first screen of the quiz and the reveal carry a button, Forget my answers, that asks once and then removes phate.progress.v1 and starts you again at the first question; the page then writes the same empty record a first visit writes, and nothing you answered is in it. phate.sid.v1 goes when you clear this site's data in your browser's settings, and Phate has no way to reach into your browser and do that for you.
Phate runs no analytics, tracking or advertising product from any other company. It keeps its own record of a visit: which door and, if the link named one, which campaign you came in by, the page and time you landed on, the country and region of your connection, the kind, size and browser of your device, and which screens you reached and when. If an ad brought you, the click id the ad platform put on the link stays in your browser until you press the button on the price page, and then goes with your order so that a purchase can be reported back to that platform.
A visit note holds the screen you reached, the time, and a number or two about the screen, such as how long the one before it was open. It is sent from the first page on, with no cookie, and it holds no answer, no birth detail, no name, no address and nothing you typed: the record it goes into has no column for a word of yours, so nothing typed can be kept there. Phate keeps the notes of a visit that did not buy for 90 days and then only the day's counts, which name no visit.
Phate's pages ask nothing of any other company: no fonts, scripts, images or measurement from a third party load on any page. Until you press the button on the price page, nothing leaves the page you are on except requests for Phate's own files, the pages, scripts and type that draw it, and Phate's own visit notes, which say which screen you reached and when; none of them carry anything you have typed.
On the price page
When you press the button on the price page, this is what goes to Phate:
- your email address
- the session record from your browser: the anonymous id, the door you came in by, any ad click id, and the page and time you landed on
- your answers: the 10 before your chart and the 4 for it, the line of their hair if you were asked, the note you wrote about them if you wrote one, and the id of the city you named
- which consent texts were on the page, by version: the two boxes you ticked and the billing terms above the button
- the name your browser gives for its time zone
When you agree to something on the price page, or tick the line under a comparison in your account, Phate records the exact words you agreed to, the time, your IP address and the identification string your browser sends.
When you press the button on the price page, the name your browser gives for its time zone, such as America/Los_Angeles, goes to Phate with your answers and is kept on your record. You are never asked for it, and it is kept for this alone: to print the moments of your own record in your own clock, on your pages and in your emails, when a file was drawn, when a note went, the minute the Moon block is cast for. Your birth details, your dates and the week's cards are not printed in it; each keeps its own clock. You can change it on your details page, and a zone you choose there stands, whatever a later order's browser reports. Deleting from your account removes it, and where Phate holds none, or a name it does not know, your pages use the clock of your birthplace; where it holds no birthplace either, the time prints in UT and the Moon's line says so.
At that moment Phate reads your birth date, time and place out of the answers and stages them beside the pending order. No card step follows while no processor is connected, so the order stays pending.
If you do not pay, everything you sent from the price page is deleted within about 25 hours: your address, your answers, the note you wrote, the record of which door you came in by, and any ad click id.
Your birth date, time and place are kept only once your payment has gone through.
After you pay
The box on the price page reads:
Phate may keep my birth date, time and place and my quiz answers to make my reading and my weekly note, and the time zone my browser reports to print dates and times in my own clock. I can ask for them to be deleted at any time.
So once an order of yours is complete, Phate keeps what those two jobs need. Your address. The order, with the brief the sketch was drawn from, your answers, the written reading, and a note of which drawing service drew it. Your birth date, time and place. Your time zone, from your browser or as you set it. The consents you gave. The sketch file itself. Each weekly note. And one line for each email sent to you. And, if you save a comparison, the second person's birth date, time and city, under your account alone.
The subscription record, which holds its status and the end of the current period, is kept beside the order.
Each kind of record Phate keeps is listed below with how long it is kept and what enforces that.
| What | How long | What enforces it |
|---|---|---|
| your order, the brief, the written reading and the chart placements and wheel it was made from | while you are a member and for 18 months after your membership ends, or until you ask for deletion, whichever comes first | a database job |
| your birth date, time and place | the same as the order, because the room's chart is cast from them | a database job |
| what you agreed to on the price page or under a comparison in your account, word for word, with the time, your IP address and your browser identification string | three years, or 18 months after the last charge, whichever is longer | a database job |
| a record of each email sent to you: its kind, the time and the provider's message id, never the content | 18 months after the last charge | a database job |
| the sketch itself, the file behind your link | the same as the order | a database job |
| every weekly note written for you | the same as the order | a database job |
| a note that a week's note could not be written for you, with the reason | 90 days | a database job |
| your email address | the same as the order | a database job |
| your time zone, as your browser reported it or as you set it on your details page | until you delete from your account, which removes it at once; otherwise as long as your record is kept, which outlasts the order with the address replaced and goes when the last of your consents does | a database job |
| once you have paid: the door you came in by, any ad click id, the page and time you landed on, the notes of that visit and the events of that order | 13 months | a database job |
| the notes of a visit that did not buy: the door and campaign, the page and time you landed on, the country and region of your connection, the kind, size and browser of your device, and which screens you reached and when | 90 days; after that only the day's counts remain, which name no visit | a database job |
| your subscription record: its status and the end of the current period | the same as the order | a database job |
| the birth date, time and place you replaced, if you ever correct them | the same as the order, because the room's chart is cast from them | a database job |
| the drawing job: what was asked of the drawing service and any error it returned | 18 months | a database job |
| a chargeback you raise: its deadline and what Phate submitted | two years after the dispute closes | a database job |
| that a purchase of yours was reported to the advertising platform that brought you, with its amount and the time; never the click id itself | the same as the order, since the row goes when the order does | a database job |
| a deletion request you make: which customer it was for and a keyed form of the address it was asked at, never the address itself, a scrambled form of the confirmation link, whether the files were to be destroyed, when it was asked for, confirmed and done, a count of what was removed and a list of what was kept; a request never confirmed goes after 24 hours | two years, as the record that the deletion happened | a database job |
| a second person's birth date, time and the table's place for it, saved for a comparison | the same as the order | a database job |
| a note that the price page's button was pressed again at your address while sketches are free, with the time | about 25 hours | an hourly database job |
| each sign in link asked for, and each deletion request made: a keyed hash of the IP address of the device that asked, never the address itself, and when it was asked for; for a sign in link also which customer it was for when the address has an order, a scrambled form of the link, and when it was used | between 1 and about 2 hours after it was asked for | an hourly database job |
| each signed in session: which customer, a scrambled form of the cookie's id, when it began, when it was last used and when it was signed out | within an hour of its end, at sign out or 30 days after sign in | an hourly database job |
| what you sent from the price page if you do not pay | about 25 hours | an hourly database job |
| the two records in your browser | until you clear them | you |
| the 1 cookie set when you sign in, phate.account.v1 | 30 days, or until you sign out | your browser, or you when you sign out |
Phate does not keep a chart object. Your reading keeps the placements and the wheel the drawing was made from.
A comparison asks for a second person's birth date, an optional time and a city, and never a name. It is kept under the date and the place, and Phate has no field a name could go in. A second person's details are kept under your account alone, shown to nobody else, never combined with anything, and removed when you delete that comparison or your own details. You can keep 10 at a time.
Who handles it
Phate's database and its file storage run on Supabase in the United States (North Virginia). The site itself is served by Vercel.
The drawing is made by fal.ai and then Replicate: the first draws wherever it can and the second is the fallback, and only these two ever receive the brief. The drawing service receives the words you wrote about them, in plain letters and numbers and shortened when longer than 220 characters, an approximate age, and whether you asked for a man or a woman. It never receives your name, your address, or your birth date, time or place.
No card processor is connected yet: no card is taken on this site and nothing is charged. When one is, this page names it and says what it receives.
Resend sends the four emails: the one that delivers your sketch, the weekly note, the sign in link when one is asked for at your address or, while sketches are free, when the price page's button is pressed at an address with an order already behind it, and the deletion confirmation when one is asked for at your address. It is given your address and the text of each one.
If an ad brought you and your purchase goes through, Phate reports that purchase to the advertising platform the click id came from: the click id itself, which conversion it was, when it happened, how much it was and in what currency. Nothing else goes with it, and there is no field it could go in: not your answers, not the note you wrote, not your birth details, not who you asked us to draw, not your name, your address or your order number. No advertising platform is connected yet, so today that report is written down here and nothing is sent anywhere.
Phate does not sell your details to anyone, and gives them to no one except the companies named here, each for the one job named.
Your reading and its link
The link in your delivery email opens your reading with no sign in, and anyone who has it can open the page; we can revoke it and issue a new one if you ask. Signing in to your account with the address on the order opens the same reading, and revoking the link does not close the account.
Treat the delivery email as the key it is. Anyone you forward it to can read your reading.
A sign in link works once, for 15 minutes, and only for the address on an order. Asking for one at an address Phate does not know sends nothing and says nothing, so the page cannot be used to learn whether someone has an order.
Your reading page tells Phate once when it has been open in front of you for 2 seconds. A fetch of the link by a mail scanner counts for nothing.
Emails
Phate sends two kinds of email on its own: the one that delivers your sketch, and the weekly note. It sends a sign in link only to an address that asked for one, or, while sketches are free, pressed the price page's button with an order already behind it; a deletion confirmation only when one is asked for at your address. Neither does anything until you open it. Beyond those it writes to you only to answer you, or to give a notice the law requires, such as a change to the price or to the terms.
Every weekly note carries a link that stops the weekly note, and nothing else. Stopping the note does not cancel the subscription. The weekly note never carries the link to your reading or any part of its key.
Your rights
To have your birth details and your answers deleted, use the delete control in your account, or ask at /account/delete with the address on your order: a confirmation link comes to that address and the deletion runs when you open it and press the button. Deleting them ends the weekly note, because it is cast from them. Writing to hello@phate.app works too; a person does it within 5 days and confirms by email.
Once your birth details are gone there is nothing to cast a weekly note from, so the note stops with them. Say in the same email if you want the sketch file and the written reading removed as well.
To cancel the subscription, read Cancelling in the terms.
You can also write to the same address to ask what Phate holds about you. A person answers within 5 days.
Age
Phate asks you to confirm that you are 18 or older and records that you did. It does not verify your age. Phate is for adults. If you are under 18, do not use it.
Changes
When this notice changes, the new text is posted here with a new date at the foot of the page.
The storage consent quoted under After you pay is the current version; the one you ticked is kept word for word and does not change underneath you. If it ever has to say something different, that is a new version, and it applies to you only once you have agreed to it again.
The storage consent now names the time zone your browser reports. The versions before it did not, because Phate kept none: if you ticked one of those, nothing was read from your browser, and your pages and emails use the clock of your birthplace unless you set a time zone on your details page or a later order brings one from your browser.
Who we are
Phate is run by Cado Holdings LLC, 501W Broadway Ste A, San Diego CA 92101.
Write to hello@phate.app. A person answers within 5 days.
Last set on 21 October 2026.