Privacy policy
Last updated: 14 October 2026
Kinarcana is made by The Open Apps, Inc. ("we"). This policy covers the Kinarcana plugin in ChatGPT, the website at kinarcana.ambientapp.ai and printed deck orders. Contact: support@theopenapps.com.
What we collect and why
| What | Why | Kept for |
|---|---|---|
| A pseudonymous ID derived from ChatGPT's anonymous user ID (we store a keyed hash, never the ID itself) | To keep your decks yours | As long as your decks |
| Your deck titles | To show and print the title card | 12 months after your last change |
| The card pictures you hand to Kinarcana (they may show you or people who agreed to be on your cards), the framed cards made from them, and ChatGPT's reference for each picture file | To show your deck and print it; the file reference lets Kinarcana recognise the same picture sent twice | 12 months after your last change |
| Your local date and coarse timezone from ChatGPT | To pick the same daily card all day | Not stored |
| For printed decks: your name, shipping address, phone number and email (entered on Stripe's checkout), the order amount and references | To print, ship and support your order, and for accounting | Name, address, phone and email: 12 months after delivery. Amounts and references: 7 years |
| An order's print files (a frozen copy of the deck) | To print exactly what you paid for | 30 days after shipping |
| Unpaid orders (deck title, number of decks, status; no address) | To let you finish an order you started | 90 days |
| Technical logs: time, which tool or page was used, result codes and counts, order references, the pseudonymous ID above, keyed hashes of ChatGPT's conversation and workspace IDs, the ChatGPT app version and language that ChatGPT reports, and the country ChatGPT or the network reports | To run, debug and secure the service | 30 days |
We don't collect your chats, your exact location, payment card numbers (Stripe handles those) or anything else. Logs never contain your pictures, deck titles, addresses or ChatGPT's user ID. We don't sell personal data, show ads or use your pictures to train models.
Cookies
Kinarcana's own pages set no cookies. The payment form on the checkout page is Stripe's, and Stripe sets the cookies it needs for payment and fraud prevention (see Stripe's privacy policy).
Who receives data
- OpenAI runs ChatGPT, where you use Kinarcana. Each picture you hand to Kinarcana is also checked by OpenAI's moderation service before it becomes a card (cards must be fully clothed, not suggestive and not graphic).
- Stripe processes payments on our checkout page and collects the shipping details you enter there.
- The Game Crafter (Madison, Wisconsin, USA) prints and ships the deck. It receives the card images and your name, address and phone number.
- Postmark sends order emails (it receives your email address and the order details).
- Hetzner hosts our servers.
Your controls
- In ChatGPT, say "Delete my Kinarcana data". This deletes your decks, pictures and unpaid orders at once. A paid order keeps only what is needed to print and ship it and the records the law requires, for the periods above.
- Remove a single picture with "Remove my picture from The Star".
- To access, correct or delete any other data, or for any privacy question, email support@theopenapps.com.
Children
Kinarcana is suitable for ages 13 and up and is not directed at children under 13. Don't put children's faces on cards without a parent's or guardian's agreement.
Changes
We'll update this page and its date if anything changes.