Privacy Policy

This site uses Google Analytics, a service of Google LLC, to see how many people visit and which pages they use. Our measurement ID is G-WHH2Y7F3CN. That identifier is the same on every page, so Google can tell the visits apart from other sites it measures.

Google Analytics sets first-party cookies in your browser. Their names begin with _ga. They hold a randomly generated client ID, not your name, and they expire after at most two years. Along with the cookie, Google receives the address of the page you are reading, an approximate location derived from your IP address, and basic information about your browser and device: browser name and version, operating system, screen size, language, and whether you arrived from a search engine or another site.

Google uses the IP address to work out a coarse location and does not store the full address for Analytics. The data is held on Google's systems, under Google's terms, not on this site's server.

You can keep all of this from happening. A content blocker or tracker blocker will stop the analytics script from loading. So will a browser setting that blocks third-party requests or stores, in the browsers that offer it. Disabling cookies for this site has the same effect on the _ga cookies. None of these steps break anything here: the translations, the generator and the reader all work the same without analytics. Google also publishes a browser add-on to opt out of Analytics, at tools.google.com/dlpage/gaoptout.

The I Ching generator and the full reader run in your own browser. There is no account, no login and no registration anywhere on this site, and no profile is built of you between visits.

When you cast a hexagram, the six lines are generated in the browser and the reading is assembled from a fixed text file that is part of the site. Your question, if you type one, is not sent anywhere and is not saved. Nothing about the casting is stored on the server, and closing the tab discards it. The reader works the same way: the chapters are downloaded as a text file and laid out by your browser, and nothing you read or highlight leaves the page.

The only thing the server is asked, on the reader, is whether this browser has already paid. That answer comes back as one word — unlocked or not — and the question carries no reading data with it.

If you buy the full reader, the site sets one cookie of its own, named wav_unlock. It is how the site remembers that this browser has paid, so you are not asked again on every visit. It lasts 30 days and is then dropped automatically.

The cookie holds a signed token containing a reference to the payment Dodo recorded. It does not contain your name, your email address, your card details or anything else about you, and it is not readable by scripts on the page. It is marked HttpOnly, Secure and SameSite=Lax, which means it is only sent back to this site, only over a secure connection, and not on requests coming from other sites.

Deleting the cookie or clearing site data locks the reader again; write to us and we will reissue access. Because the cookie is the only record on our side, we cannot look up what you read.

Checkout is handled by Dodo Payments, which acts as the merchant of record. The checkout page sits on Dodo's own domain, outside this site, and Dodo's privacy and cookie policies govern what happens there. You can read them on dodopayments.com.

Your card number is entered on Dodo's page and goes to Dodo and its payment processors. It never reaches this website, and we never see it. What comes back to us is a confirmation that a payment for this product succeeded, and the payment reference the cookie carries.

If you write to [email protected], we keep your message and address so we can reply and, if it concerns an order, so we can find the transaction later. Mail is handled by our email provider. We do not add addresses to a mailing list and we do not pass them to anyone else.

No advertising networks run here, and no remarketing or social pixels. There are no share buttons that phone home, no embedded videos and no comment system. We do not sell or rent data, and we do not try to follow you to other websites.

The fonts are served from this domain, not from a font CDN, so loading a page does not tell a third party that you were here. The only third-party requests are the Google Analytics script described above and, on the checkout path, Dodo.

Blocking analytics is the simplest control, and the section above explains how. If you are in the EU, the UK or another place with data protection law, you have the right to ask what is held about you and to have it corrected or erased. On this site that is a short conversation, because we hold almost nothing: an email you sent us, and a payment reference inside a cookie on your own machine.

The analytics data is the exception. It sits in Google's systems, and requests to see or delete it are handled under Google's privacy policy and its retention controls, which you can read at policies.google.com/privacy. We can explain what our property collects, but we cannot delete records on Google's side on your behalf.

If the site starts using something new that touches your data, this page will be updated before it goes live, and the date at the top will change. The current version is the one on this page.

Questions about this policy, or about anything above, go to [email protected]. We reply within two business days.