Privacy Policy
Last updated: 27 October 2026
The short version: We collect only what we need to run Fortune Cookie: your login, your check-ins, fortunes and journal entries, and whether you have Plus. We also use Microsoft Clarity to understand how people use the site, with your journal, check-ins and account details hidden from it. We never sell your data, we don't run ads, and we never see your card or UPI details. You can ask us to delete everything at any time.
1. Who is responsible
Fortune Cookie (www.fortunecookie.fit) is responsible for your personal data. Contact us at sukrithakrishna@gmail.com about anything in this policy. We handle personal data in line with India's Digital Personal Data Protection Act, 2023.
2. What we collect
| What | Why we need it |
|---|---|
| Account details: your name, email address and password. Passwords are stored encrypted by our login provider, and we can't read them. | To create your account, log you in and contact you about your account or subscription. |
| What you put into the app: daily check-in slider answers, the fortunes you receive, and your manifest journal entries. | To pick your fortunes, show your cookie calendar, and build your dashboard and monthly reflection. |
| Subscription details: your plan (Free or Plus), subscription status, and the subscription and customer IDs that Dodo Payments gives us. | To switch Plus on and off and to let you manage your subscription. |
| Settings stored on your device: your login session, music on/off preference and similar small settings, kept in your browser's local storage. | To keep you logged in and remember your preferences. We don't use advertising cookies. |
| Usage analytics (Microsoft Clarity): how you move around the site, such as pages viewed, clicks, scrolling and anonymised session replays, plus your device, browser and approximate location. Clarity sets its own cookies to do this. Your journal entries, check-in answers, dashboard and login form are masked, so Clarity never records what you type or what they contain. | To find bugs and confusing parts of the app and improve it. |
| Basic technical logs: IP address, browser type and error logs, recorded automatically by our hosting provider. | To keep the service secure and fix problems. |
We do not collect or store your card number, UPI PIN or bank details. Dodo Payments collects those directly when you pay.
3. Your check-ins and journal are personal
Some check-in questions ask about things like mood, sleep, stress or water. We use these answers only to choose your fortune and show your own trends back to you. They're never shared with anyone for advertising or profiling, and they aren't medical records.
4. Who we share data with
We share data only with the services that help us run Fortune Cookie, and only for that purpose:
- Supabase: stores your account and app data, and handles logins.
- Vercel: hosts the website and its server functions.
- Dodo Payments: processes payments and subscriptions as our merchant of record. It receives your email, name, payment details and billing country. See Dodo Payments' own privacy policy for how it handles this.
- Microsoft Clarity: receives the masked usage analytics described above. Microsoft may use this data as described in the Microsoft Privacy Statement. You can block it with a browser setting or content blocker without affecting the app.
- Google Fonts and jsDelivr: deliver fonts and code libraries to your browser. They may see your IP address when the page loads.
These providers may store data on servers outside India. We never sell your personal data. We may share it only if the law requires us to.
5. How long we keep it
We keep your data for as long as you have an account. If you ask us to delete your account, we delete your account and app data within 30 days. Payment and invoice records may be kept by Dodo Payments for as long as tax and accounting laws require.
6. Your rights
You can ask us to:
- tell you what personal data we hold about you and give you a copy;
- correct anything that's wrong;
- delete your account and data;
- withdraw your consent. This means deleting your account, since we need the data to run the app.
Email sukrithakrishna@gmail.com from your account's email address and we'll respond within 30 days. If you have a complaint, contact us first. You can also contact the Data Protection Board of India.
7. Security
Your data is sent over encrypted connections (HTTPS). Database rules mean each account can read only its own data, and only our server can change your subscription status. No system is perfectly secure, but we take reasonable steps to protect your data.
8. Age
Fortune Cookie is meant for adults aged 18 and over. We don't knowingly collect data from anyone younger. If you think a child has signed up, email us and we'll delete the account.
9. Changes to this policy
If we change this policy in a significant way, we'll tell you in the app or by email. The date at the top shows the latest version.