Privacy Policy

• Account data — your email address, and your name if you add one.
• Your conversations — the questions you ask and the readings the deck gives you, so your history is there when you return.
• Payment data — handled by Stripe. We receive billing metadata (plan, status, the last digits of a card) but never your full card number.
• Usage data — basic activity such as when you were last active, and technical data such as IP address and device info collected in our hosts’ server logs.

• to generate and save your readings and run your account;
• to process membership and deck payments;
• to keep the service secure and prevent abuse;
• to improve Familiar and respond to your support requests.

We do not sell your personal data, and we do not use your conversations for advertising.

To produce a reading, the text you send is transmitted to our AI provider (Anthropic, accessed via OpenRouter) to generate a response. Please don’t include sensitive personal information in your questions that you wouldn’t want processed this way.

We use trusted service providers to run Familiar. Each processes data only to provide their service to us:

• Supabase — database and authentication;
• Google — sign-in, when you choose "Continue with Google";
• Stripe — payments and billing;
• OpenRouter and Anthropic — AI generation of readings;
• Cloudflare — card-art storage (R2) and content delivery;
• Vercel — application hosting and privacy-friendly, cookieless usage analytics;
• Sentry — error monitoring and diagnostics;
• Resend — sending sign-in codes and account emails.

Some of these providers process data in the United States and other countries, so your data may be transferred and processed outside where you live.

Familiar offers a free remote MCP server so an AI assistant you already use — such as Claude — can shuffle, cut, draw, and look up cards from your Familiar library, directly inside that assistant’s chat. The server runs on its own infrastructure (Cloudflare Workers) and authenticates with OAuth 2.1. This is optional; it only applies if you choose to connect an assistant.

When you add the connector and approve access, you authorize the assistant through Familiar. You can start without creating an account; Familiar creates a temporary private session for that connection. We store an authorization grant (the tokens that let the assistant call Familiar on your behalf) in an encrypted key-value store, so you don’t have to re-authorize on every use. Cards you draw through MCP are recorded to that temporary or signed-in history and labeled as coming from MCP.

What the assistant can and can’t see:

• It can list your library (free decks plus any deck you’ve purchased), draw and look up cards, and read those results.
• It can only ever access that connection’s decks and readings — connections are isolated per user.
• It does not receive your email, name, or purchase history.

Over MCP, the interpretation is written by your assistant’s own model (for example Claude/Anthropic) — Familiar only serves the cards and tools. That assistant is a third party operating under its own privacy policy and terms, which govern what you type to it and how it handles the response. Card images are served from our content delivery network (Cloudflare).

MCP access is free and requires no subscription. Paid decks must still be purchased to draw with them; a membership is not required and does not add decks.

You can remove the Familiar connector at any time from within your assistant’s connector settings, which stops it from calling Familiar. The authorization we hold expires automatically after a period of inactivity. To revoke access immediately, or to export or delete MCP-related data, contact us at the email below. If you later create a Familiar account, deleting it also ends its MCP connections.

We use essential cookies to keep you signed in. We also set one first-party measurement cookie containing a random identifier for up to 30 days, solely to understand whether visitors move from our Claude pages through connector setup and authorization. It contains no email, question text, IP address, or full referrer. We do not use advertising or third-party tracking cookies.

We also collect privacy-friendly, aggregate usage analytics — such as page views and the referring website — through Vercel Analytics. Vercel Analytics uses no cookies and does not identify you individually.

We keep your account and conversation data while your account is active. When you delete your account, we delete your personal data and conversations, except where we must keep limited records (for example, payment records) to meet legal obligations.

Depending on where you live (including under GDPR/UK GDPR and CCPA), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing.

You can delete your account and data yourself from your account settings, or email us to exercise any of these rights. We will not sell your personal information.

Familiar is intended for adults and is not directed at children under 18. We do not knowingly collect data from children.

We may update this policy as the product evolves. If a change is material, we’ll give you reasonable notice.