Blog field notes are now in print A long-form section has joined the reading room. Eleven essays are up, more on the way, and a comments thread if you would like to leave a thought.

Read the field notes →

Legal

Privacy

This Privacy Policy explains how Symgnosis collects and uses information when you use the site. We process login email and session cookies, draw records and optional journal notes, Stripe order records, technical security logs, and Google Tag Manager. Blog comments, when enabled, go through Giscus on GitHub. We do not store full payment card numbers. EU, UK, and California visitors may email us to request access, correction, deletion, or an analytics opt-out.

By Symgnosis Editorial Published Updated

What data does Symgnosis collect?

We collect email address for login links, purchases, and support; account session cookies after a magic-link login; draw records, follow-up turns, and optional private journal notes when you use the draw table while logged in; order records (transaction IDs, purchased items, timestamps); and technical logs used for security and abuse prevention.

  • Email address (for login links, purchases, and support)
  • Account session cookies after a magic-link login (`/api/auth/me`)
  • Draw records, follow-up turns, and optional private journal notes when you use the draw table while logged in
  • Order records (transaction IDs, purchased items, timestamps)
  • Technical logs used for security and abuse prevention

Which analytics and third parties do we actually load?

We inject Google Tag Manager on Astro pages and live-session draw/hall HTML. We do not insert Cloudflare Web Analytics in source; if traffic is proxied through Cloudflare, a beacon may still load at the edge. Giscus on blog posts uses GitHub Discussions when comment keys are configured. Stripe handles checkout. We do not invent other trackers here.

  • Google Tag Manager container GTM-PN3C26KB, injected on Astro pages and on live-session draw/hall HTML. GTM may load further tags that Google configures for this container.
  • Cloudflare: we do not insert Cloudflare Web Analytics in source. If traffic is proxied through Cloudflare, a beacon may still load at the edge.
  • Giscus on blog posts, when comment keys are configured. Comments are GitHub Discussions and are subject to GitHub's privacy statement.
  • Stripe for checkout. We do not store full payment card numbers. See Stripe's privacy policy.

We do not invent other trackers here. If a tool is not listed, do not assume we run it.

How do we use data, and on what legal bases?

  • Provide readings, account history, downloads, and support
  • Send transactional email (login links, purchase confirmations)
  • Prevent fraud and abuse
  • Comply with legal obligations

Symgnosis is operated from Hong Kong. Processors (email, payments, analytics, comments) may handle data in other countries. For visitors in the EU, UK, or California, we rely on legitimate interests in running the site, contract when you buy or create an account, and consent where a comment widget or optional AI path is involved. This is not a full GDPR consent banner. Primary texts: EU GDPR (Regulation 2016/679) and the California CCPA.

How can you access, correct, or delete your data?

Email [email protected] to request access, correction, or deletion, or to opt out of analytics contact. We will respond subject to applicable law and legitimate business needs. Purchase records are kept as required for accounting; login tokens expire automatically; draw history and journal notes stay with the account until you ask us to delete them unless a shorter legal limit applies.

Personalized draw readings are on by default when a model is configured. See AI.

中文摘要

我们会处理登录邮箱与会话 cookie、抽牌记录与日记、Stripe 订单，以及 Google Tag Manager（GTM-PN3C26KB）。博客评论走 Giscus（GitHub 讨论）。若流量经 Cloudflare 代理，边缘可能加载 beacon。欧盟 / 英国 / 加州访客可以写信退出或要求删除。

Questions: [email protected]