Privacy policy of the L’Oracle z/S application

Last updated · 26 September 2026

The L’Oracle z/S application is published by z/S SYSTEMS, a French simplified joint-stock company with a single shareholder (SASU), registered with the RCS under number 130 305 865. z/S SYSTEMS is the controller of the processing described here.

For any question about your data, or to exercise your rights · aurelienpoirson@gmail.com.

This page covers the application only. The zoesagan.com website has its own policy, in its legal notice. The French version of this page is at zoesagan.com/confidentialite-application; if the two differ, the French version prevails.

1 · In one sentence

The application asks for your birth in order to calculate it, does not keep it on our servers, reads no advertising identifier, contains no third-party tracking tool, and sends nothing to an artificial intelligence without your explicit consent.

2 · What the application does not do

It does not ask for your age, your gender or your email address to open. It opens without an account.
It does not read your location. You type your place of birth yourself.
It contains no analytics, advertising or tracking tool supplied by a third party, and does not read your phone’s advertising identifier.
It sells, rents and transfers no data.
It never receives your card number · purchases go through Apple’s App Store or Google Play.

3 · What the application processes, why, and on what basis

3.1 · Your birth and your name (The Birth)

What is sent · your date of birth and, if you give them, your time and place of birth and your name.

Why · to calculate the axes of your birth, your sky and the reading of the nine civilisations.

What is kept · nothing on our servers. The calculation runs when you ask for it, the answer is returned to you, and neither your birth nor your name is stored or logged. Our host keeps technical logs (time, address requested, response code, browser type) without the content of your request, for 30 days at most.

Legal basis · performance of the service you request (Article 6(1)(b) GDPR).

3.2 · The Counter Test

What is sent · the sentence of your prophecy, its due date, then your verdict when the day comes, and an anonymous device identifier drawn at random on your phone.

Why · to seal your prophecy with the same machinery as the house’s prophecies, let you judge it, and publish the overall score of amateur prophets next to the house’s own.

How it is protected · your sentence is kept encrypted. Only its fingerprint (SHA-256) is publicly anchored through OpenTimestamps, and a fingerprint cannot be turned back into the sentence. The device identifier is never kept as such · only a salted fingerprint is, used to limit the number of deposits per day and to check that you are the one judging. Your sentence is shown to no one and never published under your name · only the overall score goes out.

What is refused · a prophecy that designates a real, recognisable person (name, email, phone number, social account).

Legal basis · performance of the service (6(1)(b)) · abuse prevention, for the deposit counter (legitimate interest, 6(1)(f)).

3.3 · The live Oracle

What is sent · your messages, the exchanges of the conversation, your first name and your birth, exactly as the consent screen says.

To whom · to the artificial intelligence model Claude, provided by Anthropic, through our server.

Your consent first · nothing is sent before you have accepted, on a screen that names the recipient and says what is sent, why, and how long it is kept. You may refuse · the rest of the application stays open. You may withdraw your consent at any time in the application · nothing is sent afterwards.

What is kept · on our side, nothing of your question after the answer. At Anthropic, see section 4.

Legal basis · your consent (6(1)(a)).

3.4 · The monthly Notebook

What is sent · your birth and your first name, to compose this month’s Notebook.

To whom · to Anthropic’s Claude model, through our server, after your explicit consent, asked before the first Notebook on the same screen as the live Oracle. If you refuse, the Notebook is composed by our calculation engine alone, without artificial intelligence.

What is kept · the composed Notebook, encrypted, until the end of the month, so that it is not composed again if you ask for it again. After that, it lives only on your phone. Our spending log keeps only the model’s name and the number of tokens, neither your birth nor your first name.

Legal basis · performance of the subscription (6(1)(b)) · your consent for sending to the AI (6(1)(a)).

3.5 · THE ARC, the reading on two phones

What is sent · both births and both consents, for the time of the shared reading.

The camera · it reads the code on the other phone. The image stays on your device. You may refuse the camera and type the code.

What is kept · the shared session lives 15 minutes at most, the code to read 2 minutes, then everything is erased. Gender and age are never recorded.

Legal basis · performance of the service, on the consent of each of the two people (6(1)(b)).

3.6 · Purchases

What reaches us · the receipt of your purchase, to open what you paid for. Never your means of payment. Apple and Google collect the payment and remain responsible for their own processing.

Legal basis · performance of the contract (6(1)(b)), then our legal obligations (6(1)(c)).

3.7 · The zoesagan.com account, if you open it

What is sent · your email address, once, so that zoesagan.com sends you a sign-in link. Our engine does not keep it · it keeps only the identifier of your website account.

Why · to find in the application what you bought on the website, and to open the live Oracle if you subscribe there. Your month of questions is then the same counter as on the website.

What is kept · a 90-day session, an exchange code that works once and expires in 90 seconds, and the reading of your rights on the website, kept 15 minutes. You close the session in the application whenever you want.

Legal basis · performance of the service you request (6(1)(b)).

3.8 · What your phone keeps, and only your phone

The ink drawn from your birth, the Notebooks you received, and for each Counter Test your sentence and the salt that lets you check its fingerprint yourself. All of this stays on your device until you erase it (section 7) or uninstall the application.

3.9 · Today’s sky

To write today’s transit, the application sends the engine only the longitudes of your chart that have already been calculated (angles, from 0 to 360 degrees) and, to prepare the next day, the moment wanted. Neither your first name, nor your date, time or place of birth goes with them, nor your device identifier. The engine calculates the sky, answers, and keeps nothing, except an anonymous count of calls.

Legal basis · performance of the service you request (6.1.b).

3.10 · The morning notification

If you accept it, the application tells you every morning at 8 a.m., your phone’s time, today’s transit, once at most. It is local: the sentence is calculated the day before as described above, then scheduled on your phone, with no notification server and no notification token sent to anyone. Permission is asked only after your first transit, and the notification can be switched off at any time in Settings. If the calculation fails, no notification is sent.

Legal basis · your consent (6.1.a), which you give to your phone and withdraw in Settings.

4 · Who else processes your data

Provider	Role	Where	Safeguards
Vercel Inc.	hosts our calculation engine	United States (calculations run in Washington)	data processing agreement with the European Commission’s standard contractual clauses
Upstash, Inc.	the engine’s database (encrypted Counter Test, encrypted Notebook of the month, counters)	European Union · region eu-central-1 (Frankfurt, Germany), AWS infrastructure	data processing agreement with standard contractual clauses
Anthropic	Claude AI model, for the live Oracle and the Notebook, after your consent	United States	data processing agreement with standard contractual clauses · Anthropic deletes exchanges within 30 days unless they are flagged for a breach of its usage policy (up to 2 years), and never uses them to train its models without express permission
Apple, Google	sale and collection of in-app purchases	according to their terms	their own policies

Each of these providers acts on our instructions, is bound by a data processing agreement compliant with Article 28 GDPR, and must protect your data at least as well as this page describes. None may use your data for its own purposes.

5 · How long

Data	Duration
Birth and name sent for the calculation	not kept · technical logs without content, 30 days at most
Counter Test (encrypted sentence, device fingerprint)	until you ask for erasure · erased as soon as you ask, only your verdict remaining counted in the overall score, without sentence or identifier
Deposit counter per device	2 days
Composed Notebook, encrypted	until the end of the month it was composed
Question to the live Oracle	nothing on our side after the answer · 30 days at most at Anthropic, unless flagged
Purchase receipts	as long as the purchase opens a right, then until you ask for erasure · no automatic expiry is set
zoesagan.com account session	90 days
Sign-in link exchange code	90 seconds, single use
Rights read on the website (tier, quota)	15 minutes
Monthly counter of the live Oracle	40 days
THE ARC · shared session and code	15 minutes and 2 minutes
Server operating counters	400 days, without any personal data

6 · Your consent, and how to withdraw it

One processing relies on your consent · sending to an artificial intelligence (live Oracle, Notebook). It is asked on a separate screen, before anything is sent, and withdrawn in the application, under My data, as simply as it was given. Withdrawing your consent does not undo what was done before, but nothing is sent afterwards.

If you are under 15 · in France, consent to this processing must be given by you and by a holder of parental authority (Article 45 of the French Data Protection Act). Do not accept these screens without them. Elsewhere, the age set by your country’s law applies.

7 · Erasing your data, from the application

In the application · My data › Erase. The screen shows you what will be erased before you confirm · your birth and your readings kept on the phone, your Counter Tests and their device fingerprint on our servers, your consents. Only the verdict of each Counter Test already judged remains counted in the overall score, without sentence and without identifier, because it can no longer lead back to you.

Erasing your data does not cancel a subscription taken in the App Store or Google Play · cancel it first in your store’s settings.

You may also write to aurelienpoirson@gmail.com. We answer within one month, as the GDPR provides.

8 · Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to it, to receive it in a readable format (portability), to withdraw your consent at any time, and to set instructions for what happens to it after your death. Write to aurelienpoirson@gmail.com. Because the application keeps neither your name nor your email, we may ask you for the identifier shown under My data to find what concerns you.

You may also lodge a complaint with the French supervisory authority, the CNIL, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, or on cnil.fr, or with the supervisory authority of the country where you live.

9 · Security

All exchanges between the application and our server go over HTTPS. The prophecies and Notebooks kept on our servers are encrypted (AES 256 GCM). Device identifiers are kept there only as salted fingerprints. The keys never leave the server.