What Mantle keeps, and what it doesn't.

What Mantle stores

• Your account — your username, a one-way hash of your password (never the password itself), and, if you give one, your email address (used only to verify the account and to reset a forgotten password).
• Your readings — the questions you ask, the cards drawn, and any reflections or notes you write. These are visible to you alone unless you choose to mint a share link.
• Subscription records — if you subscribe, an identifier for your Stripe customer and your subscription's status and renewal date. Mantle never sees or stores your card details — those go straight to Stripe.
• Minimal technical data — your IP address is used momentarily to rate-limit abuse, and Mantle keeps an aggregate count of how much the Read Together feature is used, so the service's costs can be understood. Neither is used to profile you.

No trackers, no analytics

The pages you read load nothing from third parties — fonts and assets are served by Mantle itself, and there are no analytics scripts, advertising tags, or tracking pixels anywhere. Mantle sets only the cookies it needs to keep you signed in and to protect forms from cross-site abuse. That is what the sign-up page means by “no third-party requests”: the page in your browser talks only to Mantle.

Who else touches your data

To operate, Mantle relies on a few outside services. Each receives only what it needs:

• Read Together (OpenRouter). When you generate a synthesis, the content of that reading — your question and the cards drawn — is sent to OpenRouter, which relays it to a large-language-model provider to compose the reflection. Please don't enter anything into a question that you wouldn't want processed by an outside AI service.
• Email (Resend). Account-verification and password-reset messages are sent through Resend. Messages you send from the contact form are delivered to the operator's inbox.
• Payments (Stripe). If you subscribe, Stripe handles the checkout and your payment details on its own secure systems. Stripe sets its own cookies on Stripe's checkout pages, not on Mantle.
• Hosting. Mantle runs on a server rented from a cloud host, which necessarily processes the traffic between you and the app.

Each of these providers handles data under its own privacy terms. Mantle does not sell your data, and does not share it with anyone beyond the providers named above.

Keeping and deleting

Your readings stay until you delete them or delete your account. Deleting your account removes your account and every reading and saved spread tied to it — there is no undo. You can do this yourself from your account page. Note that records held by Stripe for a completed payment, and any billing records required by law, are retained by Stripe under its own policies.

Children

Mantle is not intended for use by anyone under 16.

Reaching us

Mantle is operated from the State of Georgia, United States. For any question about your data — including a request to see or delete it — write to support@mantleoracle.com or use the contact form.

Last updated: 27 July 2026.