Updated 30 September 2026
Your account details
We use your email address to identify your website account, deliver account verification messages, and help you sign in. You can optionally save a birth date and a preferred Sun sign in account settings. These details support your saved horoscope preferences; creating an account does not upload your private chart records, readings, or journals.
Google and email sign-in
Google sign-in requests only the OpenID and email permissions, not the profile permission. We use the verified email address and Google account identifier to recognize your account. We do not request access to your Gmail inbox, Google Drive, contacts, or calendar.
If you choose a website password, we store an independently salted password hash rather than the plain password. A new password or replacement becomes active only after email verification. Verification links expire after 30 minutes and can be used once.
Sign-in cookies
Website sign-in uses secure cookies to keep you signed in and to verify a sign-in or email confirmation attempt. A signed-in session can last up to 30 days. Signing out ends that website session. Short-lived verification cookies help protect account setup and password changes.
Campaign links
If you arrive through a link carrying campaign labels, we keep the first tagged link's source, medium, campaign, and content labels in a secure cookie for up to 30 days. If you create a new website account, we save those labels with the account so the owner can see which promotion led to registration. An untagged link from this website can be recorded as a WitchcraftDaily referral. Campaign labels do not contain your birth details, reading results, or journal text. The private owner dashboard shows website and app registration counts separately.
Witch Type quiz measurement
The Witch Type quiz keeps a random journey ID in your browser tab’s session storage. We record quiz page views, question steps viewed and answered, and clicks on report and checkout buttons. When you sign in and submit the quiz, we associate that ID with your account so a verified purchase can be counted in the private owner dashboard. The measurement events do not contain your answers, Witch Type, email address, or payment card details. These counts describe browser journeys, not necessarily unique people.
Advertising purchase measurement
For eligible purchases following our Facebook or Instagram quiz ads, we use Meta's Conversions API to measure whether an ad led to an eligible first purchase. After Stripe verifies the initial payment, we send Meta the purchase time, amount and currency, a unique event identifier, the checkout browser's user-agent information, the report-offer page address, and a SHA-256 hash of the account email address for matching. Hashing helps protect the email during transfer but does not make the event anonymous to Meta. This purchase measurement does not include quiz answers, Witch Type, scores, birth details, reading results, journal text, card details, or renewal payments. If we receive your browser's Global Privacy Control or Do Not Track signal when checkout opens, you authorize payment, or the site checks payment status, we suppress any purchase event that has not yet been sent. This does not recall an event already sent to Meta.
Free Daily Horoscope ad measurement
When you arrive at the free Daily Horoscope page through one of our Meta ads, we keep that ad’s campaign code and click time in a separate secure cookie for up to seven days. A random browser journey ID lets us count page entry, birth-date step completion, email or Google start, and return after sign-in. These step events contain no birth date, Sun sign, email address, or reading. When a verified account first turns on the free Daily Horoscope email, we count that opt-in once in the private owner report; repeated saves and later reactivations are not new signups. After this notice is published and Meta Lead measurement is enabled, we may send Meta a server-side Lead event for an eligible first opt-in. It contains the opt-in time, a unique event ID, the free page address, browser user-agent information, and a SHA-256 hash of the account email address for matching. Hashing does not make the email anonymous to Meta. We do not send Meta a birth date, Sun sign, horoscope, reading, or payment detail. If we receive Global Privacy Control or Do Not Track when the preference is saved, we do not queue that Lead event; a later opt-out signal can stop an event still waiting to be sent, but cannot recall one already delivered.
Providers and site measurement
Resend delivers account email and receives the destination email address and the message needed for that delivery. Cloudflare serves and protects the website, and DigitalOcean hosts the website account service. Google Analytics and Cloudflare support site measurement and delivery; these services may receive technical information such as page activity, browser and device details, and IP addresses.
Your account email address, saved birth date, and Sun sign are not published as website content. Creating an account or signing in does not subscribe you to a newsletter, turn on daily membership email, or start a payment. Those features require their own choices and availability.
Questions and account requests
Contact help@witchcraftdaily.com to ask about your account information, correct details you cannot change in account settings, or request deletion. We may need to verify that an account belongs to you before acting on an account request.