Privacy Policy

When you create an account we process:

• ✧Your email address, used to sign you in and to send you messages about your account and activity.
• ✧Your password, which is handled by our authentication provider, Supabase. Hexe Guild does not store it in readable form.
• ✧Your display name (craft name), username and the settings you choose in your dashboard.

If you publish a practitioner profile, the information you add to it is public and can be seen by anyone, including people who are not signed in. This can include your display name, photo or video, biography, categories, city or region, services, events, scrolls, Bazaar listings and any links you add.

You decide what to include, and you can edit or unpublish your profile from your dashboard.

When you send an enquiry or request a booking, we process the details you provide — such as your name, email address, preferred times and your message — and share them with the practitioner you contacted so they can respond. We keep a record of bookings and their status so both sides can manage them.

• ✧Direct and group messages you send are stored so they can be delivered to, and read by, the people you send them to.
• ✧Video sessions use your camera and microphone only while the session is live. Sessions are not recorded.
• ✧To connect a video call, technical connection information (such as network addresses) is processed by network services used to establish video sessions — public connection servers operated by Google and Cloudflare and, when a direct connection is not possible, a network relay service.

Payments — memberships, paid scrolls and bookings — and practitioner payouts are processed by Stripe. You enter card and bank details on pages hosted by Stripe; Hexe Guild does not receive or store your full card number. We receive information such as payment status, amount, and Stripe customer, subscription or account identifiers so we can provide what you paid for and show your payment history.

Practitioners who set up payouts provide identity and banking information directly to Stripe, under Stripe's own privacy policy.

• ✧If you contact support, report content or block someone, we keep that record so we can act on it.
• ✧To limit abuse such as spam or repeated sign-in attempts, we count requests using a one-way hashed form of identifiers such as your IP address or email address. The raw values are not stored for this purpose.
• ✧Actions taken by our administrators are logged for accountability.

Hexe Guild sets only the cookies it needs to operate — to keep you securely signed in. We do not use analytics, advertising or social-media tracking technologies. The full, current list is on our Cookie Policy, and you can review it at any time in Cookie Preferences.

• ✧To run the registry, your account and the features you use.
• ✧To process payments and payouts.
• ✧To send account, booking and message notifications by email.
• ✧To keep the platform safe, prevent abuse and respond to reports and support requests.
• ✧To show Premium practitioners how often their public profile is viewed and how visitors found it. Each view is recorded as a count with a time, a general source (for example “Registry search”) and, for links from other websites, that website’s domain — never who viewed it, your IP address, or any cookie.
• ✧To meet legal obligations that apply to us.

Hexe Guild does not sell personal data. We share information only as needed to provide the service:

• ✧With other members, when you publish content or contact, book or message someone.
• ✧With service providers who process data on our behalf: Supabase (authentication, database and file storage), Stripe (payments and payouts), Resend (email delivery), Vercel (website hosting), network services used to establish video sessions, and Google Fonts (typefaces).
• ✧When required by law, or to protect the safety of our members or the platform.

We keep information for as long as it is needed to provide the service, meet legal obligations, resolve disputes, or maintain the safety of our members and the platform. Some records, such as payment and booking records, may therefore be kept after an account is closed.

• ✧Edit or unpublish your profile and content from your dashboard.
• ✧Block members from messaging you in Settings.
• ✧Review cookies and storage in Cookie Preferences.
• ✧If you have an account, ask us for a copy of your information, to correct it, or to delete your account through Support, as described below.

If you have an account, sign in and contact us through Support in your dashboard with any question or request about your information.

We will update this page when our practices change and revise the date at the top. If a change affects optional cookies or tracking, we will ask for your choice again before it applies.