Privacy Policy

• Account data — your email address, and your name if you add one.
• Your readings — the cards you draw through the connector, with the spread and any question your assistant passes along, so your history is there when you return.
• Payment data — handled by Stripe. We receive purchase records (the deck, the amount, the payment status) but never your full card number.
• Usage data — basic activity such as when you were last active, and technical data such as IP address and device info collected in our hosts’ server logs.

• to record and show your readings and run your account;
• to process deck purchases;
• to keep the service secure and prevent abuse;
• to improve Familiar and respond to your support requests.

We do not sell your personal data, and we do not use your readings for advertising.

We use trusted service providers to run Familiar. Each processes data only to provide their service to us:

• Supabase — database and authentication;
• Google — sign-in, when you choose "Continue with Google";
• Stripe — payments and billing;
• Cloudflare — card-art storage (R2) and content delivery;
• Vercel — application hosting and privacy-friendly, cookieless usage analytics;
• Sentry — error monitoring and diagnostics;
• Resend — sending sign-in codes and account emails.

Some of these providers process data in the United States and other countries, so your data may be transferred and processed outside where you live.

Familiar offers a free remote MCP server so an AI assistant you already use — such as Claude — can shuffle, cut, draw, and look up cards from your Familiar library, directly inside that assistant’s chat. The server runs on its own infrastructure (Cloudflare Workers) and authenticates with OAuth 2.1. This is optional; it only applies if you choose to connect an assistant.

When you add the connector and approve access, you authorize the assistant through Familiar. You can start without creating an account; Familiar creates a temporary private session for that connection. We store an authorization grant (the tokens that let the assistant call Familiar on your behalf) in an encrypted key-value store, so you don’t have to re-authorize on every use. Cards you draw through MCP are recorded to that temporary or signed-in history and labeled as coming from MCP. When you draw with a deck again, the result Familiar returns includes a short record of your recent draws with that deck — the cards, and any short question that came with them — so your assistant can refer back to them. That record goes only to the assistant you connected.

What the assistant can and can’t see:

• It can list your library (free decks plus any deck you’ve purchased), draw and look up cards, and read those results.
• It can only ever access that connection’s decks and readings — connections are isolated per user.
• It does not receive your email, name, or purchase history.

Over MCP, the interpretation is written by your assistant’s own model (for example Claude/Anthropic) — Familiar only serves the cards and tools. That assistant is a third party operating under its own privacy policy and terms, which govern what you type to it and how it handles the response. Card images are served from our content delivery network (Cloudflare).

MCP access is free and requires no subscription. Paid decks must be purchased to draw with them.

You can remove the Familiar connector at any time from within your assistant’s connector settings, which stops it from calling Familiar. The authorization we hold expires automatically after a period of inactivity. To revoke access immediately, or to export or delete MCP-related data, contact us at the email below. If you later create a Familiar account, deleting it also ends its MCP connections.

We use essential cookies to keep you signed in. We also set one first-party measurement cookie containing a random identifier for up to 30 days, solely to understand whether visitors move from our Claude pages through connector setup and authorization. It contains no email, question text, IP address, or full referrer. On pages that show ads, Google also sets advertising cookies, as described under Advertising below.

We also collect privacy-friendly, aggregate usage analytics — such as page views and the referring website — through Vercel Analytics. Vercel Analytics uses no cookies and does not identify you individually.

We keep your account and reading data while your account is active. When you delete your account, we delete your personal data and readings, except where we must keep limited records (for example, payment records) to meet legal obligations.

Depending on where you live (including under GDPR/UK GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing.

You can delete your account and data yourself from your account settings, or email us to exercise any of these rights. We will not sell your personal information.

Familiar is intended for adults and is not directed at children under 18. We do not knowingly collect data from children.

We may update this policy as the product evolves. If a change is material, we’ll give you reasonable notice.