Skip to content
Yggr’s Eye

Privacy

How your details are handled

A reading starts with a personal question, so I keep as little as I can, for as short a time as I can. This page explains what I collect, why, who helps me handle it, and how to see or delete it.

Last updated October 29, 2026

Who is responsible

Yggr’s Eye is run by Jonathan Lee, Florida, United States. I’m the data controller: I decide how your details are used and I’m responsible for them.

For anything about your data, email support@yggrs-eye.com. Questions about readings can go to readings@yggrs-eye.com.

What I collect

  • From the request form: your name, email, the format you chose and your question. If you answer the optional “How did you find me?” question, that one-word answer is stored with your request so I can see which channels bring people here. It is never used to profile you.
  • For your reading: a photo of the runes I cast for you and my recorded interpretation. For The Nine Nights, the live Zoom session is recorded for you, along with the follow-up messages and the written summary.
  • For payment: Stripe or Cal.com tell me the amount, date, your name and email, and whether the payment went through. Your card details go to them, never to me.
  • Technical: your IP address, used briefly to stop the form being flooded, and standard server logs kept by my host.

Your question may reveal sensitive things, such as your health, relationships or beliefs. Share only what you’re comfortable with. When you tick the box on the form, you agree that I may use what you share to give your reading. You can withdraw that at any time, and I’ll delete your request.

The site sets no cookies and uses no advertising trackers. Visits are counted with Umami, a cookieless analytics tool: it records the page address, the referring site, browser and device type, screen size and country, and gives each visit a temporary code that cannot be linked to you or followed to other sites. Your IP address is used to work out the country and is not stored. When you send a request, one event records which format you chose, and nothing else from the form. Its fonts are served from this site, not from another company.

Why, and on what basis

  • To review and give your reading, take payment and keep in touch about it. This is needed to provide the service you asked for (GDPR Art. 6(1)(b)). Sensitive details in your question are used only with your explicit consent (Art. 9(2)(a)).
  • To keep the first reading free once per person and to stop spam. This is my legitimate interest (Art. 6(1)(f)). Only a scrambled copy of your email and name is kept, and I make the decision myself. Nothing is decided automatically.
  • To keep payment records as tax law requires (Art. 6(1)(c)).
  • To send the “Monthly rune” email, only if you signed up and then confirmed by clicking the link Brevo sends you (double opt-in). This is consent (Art. 6(1)(a)); withdraw it with the unsubscribe link in any email. The sign-up form on rune and journal pages is served by Brevo, which records your email, the time and your IP address as proof of consent.

Nothing else is sent, and I never sell or rent your details.

Who else handles it

These services help me run Yggr’s Eye. Each one only gets what it needs for its part:

  • InfomaniakSwitzerlandHosts the website and stores reading files (kDrive)
  • BrevoFranceSends the emails about your request, and holds the "Monthly rune" email list if you sign up for it
  • Basecamp (37signals)United StatesHolds your request while I review and prepare it
  • StripeUnited StatesTakes payment for paid readings. I never see your card details
  • Cal.comUnited StatesScheduling and payment for The Nine Nights
  • ZoomUnited StatesThe live session for The Nine Nights, and its recording
  • PorkbunUnited StatesForwards email sent to yggrs-eye.com addresses
  • Microsoft OutlookUnited StatesMy inbox, where request and reply emails arrive
  • Umami Cloud (Umami Software, Inc.)United StatesCounts visits without cookies: page address, referrer, browser, device type, screen size, and country worked out from your IP address, which is not stored. One event records which reading format was requested, nothing else

I’m based in the United States, so if you live in the EU, UK or Switzerland, your details are transferred to the US. For US services, I rely on the EU-U.S. Data Privacy Framework (and its UK and Swiss extensions) where the provider is certified, or on the European Commission’s Standard Contractual Clauses in their data processing terms.

How long I keep it

  • A request I declineDeleted within 30 days
  • A request on the waitlistUntil I can take it on or you withdraw it, then as below
  • A delivered reading: your question, the photo, the recording, and our emails12 months after delivery
  • The private link to your readingStops working after 90 days
  • A scrambled (hashed) copy of your email and name, to keep the first reading free once per person12 months
  • Payment records (amount, date, name, email)As long as US tax law requires
  • Your email on the "Monthly rune" list, if you confirmed the sign-upUntil you unsubscribe (one click in any email)
  • Visit statistics (no identifying data)Six months, then deleted by Umami
  • Your IP address, to limit repeated form submissionsUp to 1 hour, in memory only

Payment providers keep their own records under their own privacy policies.

Your rights

Whoever and wherever you are, you can ask me to:

  • show you the details I hold about you, and give you a copy
  • correct anything that’s wrong
  • delete your details
  • limit how I use them, or object to how I use them
  • send them to you in a common format, so you can take them elsewhere
  • withdraw your consent for sensitive details at any time

Email support@yggrs-eye.com. I’ll reply within one month. If I need to confirm it’s you, I’ll ask you to write from the address you booked with. There’s no charge.

If you live in the EU, UK or Switzerland, you can also complain to your local data protection authority. I’d appreciate the chance to fix things first.

Keeping it safe

The site uses HTTPS. Requests and reading files live with the services above, protected by strong passwords and two-step sign-in. Links in emails are signed and expire. The link to your reading opens only with the email you booked with. If a breach ever puts your details at risk, I’ll tell you, and the authorities where the law requires, without delay.

Changes

If this policy changes, I’ll update the date at the top. If a change affects a reading you’ve already requested, I’ll email you. Back to the home page.