Lex Mysteriorum
Privacy
Last updated: 2026-04-28
What we collect
Codex Arcanum collects only what is necessary to keep your inscriptions safe and your sessions intact: your name and email (when you sign in with Google), the translations and decoder queries you choose to save, and basic device information your browser sends with every request.
What we do not collect
We do not collect contacts, photos, microphone, location, advertising IDs, or biometric data. Images you upload to the Decoder are sent to our AI partner for one-time analysis and are not retained on our servers.
Who we share data with
• Anthropic — receives your decoder text and tutor messages to generate replies. No personal identifiers are sent unless you include them in your prompt.
• Stripe — handles payments. We never see or store your card details.
• Google — handles authentication via OAuth. We receive only the basics: name, email, profile picture.
Cookies & sessions
We use a single httpOnly cookie (session_token) to keep you signed in for seven days. No advertising or third-party tracking cookies are set.
Your rights
You may delete any saved translation from your dashboard at any time. To request full account deletion (including all saved data), email privacy@codexarcanum.app and we will erase your record within seven days.
Children
The Codex is intended for users aged 13 and older. We do not knowingly collect data from children under 13.
Security
All requests are served over TLS. Session tokens are stored hashed in the database. We follow the principle of least privilege for any system that touches user data.
Contact
Questions, concerns, or curiosities about this policy: privacy@codexarcanum.app