What we collect
Your account. Your email address, a password (stored only as a one-way hash, never readable by anyone, including us), and, if you choose to give them, a display name and your zodiac sign.
What you keep in your Book of Shadows. The spells, sigils and cards you save, the notes and workings you write, the dates you pin them to, and any sigil image you choose to keep. These are yours and are shown only to you.
A working you ask for. If you request a working, we keep the name, email address and description you send, so it can be answered.
Your membership. Your membership level and its status. If you subscribe on the website, Stripe handles your card and we keep only the identifiers Stripe gives us. If you subscribe in the iPhone app, Apple handles the payment and we keep only the transaction identifiers Apple signs, so your membership can be matched to your account. We never see or store your card number.
The newsletter. If you sign up for the moon letters, your email address.
How the website is used. The website uses Microsoft Clarity, which records how pages are used (clicks, scrolling, and the movement of the page) so we can see what is confusing or broken. The iPhone app does not use Clarity or any other analytics.
Security records. To slow down people guessing passwords, we briefly record the network address that attempts a sign-in. Where we keep an address for longer, for example against a sigil emailed from the generator, we keep only a scrambled form of it that cannot be turned back into the address.
Why we use it
To run your account and your membership, to show you what your membership includes, to keep what you save in your Book of Shadows, to answer a working you asked for, to send the emails you signed up for or that your account needs (a welcome, a password reset, a reminder before a free trial ends), and to find and fix problems with the site. We do not sell your information, and we do not use it for advertising.
Who else sees it
Only the services that do part of the work for us, and only what each one needs:
- Stripe processes website payments.
- Apple processes payments made in the iPhone app.
- Mailchimp sends the moon letters to people who signed up for them.
- Microsoft Clarity records how the website is used, as above.
- Namecheap hosts the website and its database.
We would share information beyond this only if the law required it.
How long we keep it
Your account and everything in it are kept until you delete your account. Encrypted backups of the database are kept for up to 90 days and then deleted, so something you delete can survive in a backup for up to that long. A working you asked for is kept so it can be answered, even if you later delete your account.
Deleting your account
You can delete your account at any time from the Account screen in the iPhone app. Deleting it removes your account, your Book of Shadows and its images, and your newsletter subscription, and cancels any membership you pay for on the website. A membership bought in the iPhone app is billed by Apple, so it must be cancelled in your iPhone's Settings; the app reminds you of this before you confirm. You can also ask us to delete your account by writing to the address below.
Children
Midnight Spellcraft is not meant for children, and we do not knowingly collect information from anyone under 13.
Changes
If this policy changes, the date at the top will change with it, and anything significant will be announced on the site.
Contact
Questions about your information, or a request to see or delete it: coven@midnightspellcraft.com.