How the Academy handles data.

Account sign-in

The Academy uses the same Supabase account as the DuoSages app. Email registration sends the email address and password to that account service through the website server. Google sign-in uses the existing account provider. The Academy requires a confirmed account.

The website uses secure HttpOnly session cookies to maintain sign-in. Temporary cookies support the Google sign-in exchange. Passwords and session tokens are not stored in browser study records or displayed in the page.

Study data on this device

Tarot lesson completion, saved lessons and written responses are stored in this browser under the signed-in account identifier. They are not sent to DuoSages or synchronized between devices. Copy responses to keep a separate record. Signing out ends the session but does not erase local study records.

Hosting and email

Cloudflare serves the website. Hosting and account services process network information needed to answer requests. Account confirmation and password recovery emails are transactional account messages. Registration does not add the email address to the marketing newsletter.

The existing early-access newsletter has its own separate consent and unsubscribe process. The app handles reading history separately from these browser study records.

Controls

Use Sign out to end this website session. My Study can clear the current Tarot course records for the signed-in account in this browser. Copy any responses needed before clearing. To remove all local records, including records from an older Academy version or other accounts on a shared device, clear this site’s browser data.

Provider references: Supabase privacy information and Cloudflare privacy information.