Privacy Policy

Palm Reading Lab reads a palm from a photo you choose. This page describes what happens to that photo and what the site stores. It is written to match the current version of the service.

The photo

Your browser resizes the photo and converts it to JPEG before sending it. The photo travels over HTTPS to our API running on Cloudflare, and from there to an AI processing provider and the forwarding channel that connects us to that provider. It is used to produce the reading you requested.

We do not write the photo to our storage, a database, a cache, or our logs. We do not keep the feature JSON or the reading text on the server; they are returned to your browser and disappear when you leave the page. We do not use the photo for advertising or sell it.

The AI provider and its forwarding channel process the photo under their own terms and retention policies. We cannot promise what those third parties do with data on their side. Our statement is limited to what this site does: it does not store the photo.

What the site does store

The API keeps a few short-lived counters in Cloudflare KV so the free service cannot be abused: a per-visitor request count for the current hour and day, a daily spending total, and a global on/off switch. Rate-limit keys are derived from the connecting IP address, with IPv6 addresses grouped by /64. Counters expire within 48 hours; the spending counter expires within three days. These records do not contain the photo, the features, the reading, or a name.

Security check and hosting

The upload form uses Cloudflare Turnstile to tell people from automated traffic. Turnstile may process browser signals and set a challenge cookie; Cloudflare's own privacy policy governs that processing. Cloudflare also hosts the site and may keep standard access logs, such as IP address, user agent, and request time, under its terms.

Accounts, ads, and analytics

There are no accounts, no newsletter, no advertising, and no analytics script in this version. If that changes, this page will be updated before the change ships.

Children

The service is not directed to children under 13. Do not upload a photo of a child.

Contact

Questions about this policy or a request about your data can go to hello@palmreadinglab.org. Because the site does not store photos or readings, there is usually no stored record to retrieve.