Privacy & your data

Who looks after your data

ETERONA is an independent project operated by Spectra Data. For support or privacy requests, email contact@eterona.com.

Spectra Data decides how the personal information described here is used. In data protection law, this role is called the data controller. This notice covers ETERONA, SoulEcho and Numeria.

What we collect and why

• SoulEcho: your answers, character portrayal choice, saved progress and resulting profile or storybook. We use these to create and save the experience you request. SoulEcho does not ask for your name or birth date.
• Numeria: your birth date, first name and spelling choices, selected year, and the symbols or other answers you choose to provide, including a mother’s birth month if you choose it. We use these to calculate your numbers and create your reading.
• Your saved session: a random guest identifier, creation and expiry dates, and records needed to keep your readings private and remember sharing unlocks. You do not need an account.
• PDF waitlists: your email address, selected product, permission wording and date, and any offer details shown when you joined. This allows us to record your request for that product’s PDF launch announcement. Joining does not create an order or collect payment information.
• Support and optional recovery: the email address and information you send us, or an address you choose to attach to a saved session. We use these to answer requests or help restore access where recovery is available.
• Optional usage analytics: with your permission, the event name, product, version and chapter, linked to your guest session. These help us understand where the experience works well or needs improvement. They exclude your answers, name, email and birth date.
• Connection information: the server processes your IP address to deliver the site and temporarily limit repeated requests. This is separate from optional analytics and is not added to your saved reading.

Some inputs are needed for the experience you select. For example, Numeria needs a valid birth date for date-based numbers. Optional names and waitlist emails can be left out. Without the necessary inputs, we cannot create that part of a reading.

Our reasons for using information

Where the GDPR applies, we rely on these legal bases:

• Providing the service you request: performing our agreement to create, save and show your free reading, using the inputs and session information needed for that service.
• Your consent: optional analytics and the specific PDF launch announcement you ask for. You can withdraw permission without losing your reading. Earlier permission for general product news can also be withdrawn below.
• Legitimate interests: protecting private readings, preventing misuse, and handling support requests. We limit this use to what is reasonably needed and consider your rights.
• Legal obligations: responding to legally required requests when applicable.

Results are created automatically using calculations and authored interpretations. They are for entertainment and reflection. We do not use them to make decisions about employment, credit, insurance or other matters with legal or similarly significant effects.

Cookies and browser storage

When you start or save an experience, a necessary cookie called va_guest lets this browser open its private saved session. It expires after 30 days. Blocking or removing it can prevent you from returning to saved readings.

SoulEcho may keep opening choices and temporary unsaved answers in this tab’s session storage, with a 24-hour expiry. Saved answers and completed drafts are cleared from that temporary storage. Numeria keeps unfinished name and date inputs in memory rather than browser storage; refreshing the page can lose them.

Numeria can remember your place in a reading using local storage. This contains a reading reference and section, not your name or birth date. It stays until you clear it or delete your saved session. Fonts are served with the website. We do not use advertising cookies or external analytics scripts.

Who can see your information

Your full answers and reading are available through your private saved session. Keep access to that browser secure. Sharing an invitation or result card does not publish your full private reading.

A public share link shows the selected archetype or numbers and short themes. Anyone with the link can open it. You can revoke the link from your result. A card or PDF someone has already downloaded, copied or posted elsewhere cannot be removed by revoking our link.

Access to stored information is limited to people who need it to operate or support the service. Cloudflare hosts the website and application, and Supabase stores private readings and report files in its Ireland region. The application does not send your answers or readings to an external AI service or analytics provider. We do not sell your personal information.

Requested library-recovery emails are sent through Resend. These messages contain your email address and a short-lived private access link, not your assessment answers or full reading. Hosting and email providers may process connection logs or operational data internationally. See the privacy information from Cloudflare, Supabase and Resend.

Messages sent to our support address pass through Cloudflare Email Routing and are forwarded to our support mailbox, hosted by AOL. These providers operate internationally and may handle support messages outside the European Economic Area. Their privacy information explains their processing and transfer arrangements: Cloudflare and AOL.

Automatic PDF launch emails are not enabled yet. Before adding a delivery or hosting provider that changes how personal data is handled, we will update this notice and put the required data protection arrangements in place. We may also disclose information when legally required or to establish or defend a legal claim.

How long information stays

• Saved sessions and readings: access expires 30 days after the session is created or successfully recovered. Reopening a reading does not extend that period.
• PDF waitlists: entries expire after 90 days from signup or renewal, or are removed earlier when you leave the list or delete their linked session. A SoulEcho waitlist entry can remain after the session expires. A Numeria entry is removed when its expired session is cleaned up, so it may end sooner.
• Recovery links: expire after 15 minutes and work once. Stored report-ready or receipt messages expire after 7 days.
• Support correspondence: kept while handling your request, then for up to 12 months after it is resolved, unless a specific legal obligation or unresolved dispute requires longer.

Expired records and associated files are removed through our cleanup process. Deleting a session removes its active records and revokes access; any stored PDFs are queued for deletion and removal is retried if storage is unavailable. Downloads on your own device and support correspondence are separate. Ask us if you also want support messages reviewed for deletion.

Your privacy rights

Depending on the law that applies, you can ask to access or correct your information, have it deleted, restrict or object to its use, or receive a portable copy. You can withdraw consent at any time. Withdrawal does not change the lawfulness of earlier use.

The controls above cover this browser’s saved session. They are not the only way to make a request. Email contact@eterona.com for other sessions, waitlists, support messages or help exercising your rights. We may ask for enough information to verify your request without exposing another person’s data. Where the GDPR applies, we normally respond within one month and explain any permitted extension.

You can also complain to a data protection authority, including in the country where you live or work. Find an EU or EEA authority in the EDPB directory.

Age and updates

These experiences are intended for people aged 18 or over. If you believe a child has provided personal information, contact us so we can investigate and remove it where appropriate.

We update this notice when our practices change and show the date above. Where a change needs fresh consent, we will ask for it before using your information for the new purpose.