MYSTIC REGIME

Privacy Policy

Last updated: 4 November 2026

1. What we collect

  • Account: your email address. Sign-in links are single-use tokens.
  • Your own records: commitments you write, the daily two-question check-in (closed choices only), and the drawdown reset (closed choices only). There are no amount, price or position fields anywhere in these records.
  • Report intake (paid products): your four written answers and, if you choose to add them, birth date/time/place for the optional chart layer. Payment data never reaches us — Stripe processes it.
  • Minimal analytics: an anonymous session identifier, pages visited, and campaign parameters (UTM) when you arrive from a link. No third-party ad trackers.

2. What we do not collect

We never ask for, and our databases have no columns for, profit and loss amounts, balances, positions, tickers or trade records. Our intake rejects messages containing explicit currency amounts.

3. Why we process it

To deliver the readings and reports you ask for, to keep your private record across days, to send you the emails you requested (daily reading, delivery notices, sign-in links), and to keep financial records required for accounting.

4. Who processes it

We use a small set of service providers, each for one job: Stripe (payments), Supabase (database), Resend (email delivery), Cloudflare R2 (image hosting), Netlify (hosting). They process data on our instructions; some are located outside your country (international transfer).

5. How long we keep it

  • Analytics events: 400 days, then deleted automatically.
  • Purchases: retained as financial records; never auto-deleted.
  • Commitments, check-ins and resets: kept while your account exists; deleted on request.
  • Report intakes: kept to produce your report; deletion on request is handled manually so that a delivered report and its source stay consistent.

6. Your rights

You can request access, correction, export or deletion of your data by emailing hello@mysticregime.com. We answer within a reasonable period. Deletion is a first-class operation: we do not keep soft-deleted copies of your personal records.

7. Sharing

We do not sell your data. We do not provide any way to look up orders or reports by email — links are private, unguessable tokens.

8. Children

The service is not intended for anyone under 18.

9. Contact