Privacy Policy
Last updated:
This page explains how information is handled when you visit the Hocus Pocus website, use its interactive features, or get in touch with us.
Who to contact
This website is operated by Hocus Pocus. For privacy questions or requests about your information, contact us by email: Knock three times
Visiting the website
Your browser sends technical information, including your IP address, browser information and requested page, to the hosting service so it can deliver the website. Our interest in operating a working website is the basis for this essential processing.
We use a self-hosted security check to protect our contact address from automated harvesting. It runs only when you request the address, without additional cookies or third-party tracking.
A necessary preference cookie remembers your privacy choices for 180 days. It contains no unique visitor identifier. See our Cookie Policy for the cookie’s contents and your browser storage options.
When you get in touch
The contact link opens your email application. If you send us a message, we receive the email address, name, message and any attachments you choose to include. We use these to respond to your enquiry and discuss your project.
This processing supports our legitimate interest in responding to correspondence or, when you ask about working with us, taking steps towards a contract at your request. You decide what to send; please include only information relevant to your enquiry.
Optional analytics
We use optional analytics to understand how our website is used and improve your experience. Analytics is enabled only with your consent. You can use the website without accepting analytics and change or withdraw your consent at any time in Cookie settings.
For more information, read our Cookie Policy.
The mirror and other magical features
The mirror asks for camera permission only after you activate it. It requests video only, without microphone access. The live preview stays in your browser: the website does not record, upload or analyse your face. Camera access stops when you close the mirror, move it out of view, hide the page or leave it.
Your progress through the sections and your tarot draws remain in the current page’s memory and reset when you reload. The crystal ball’s messages and tarot cards are entertainment; they do not use your camera image to make predictions or decisions about you.
Managing your choices
You can change or withdraw Analytics consent at any time using Cookie settings on this page or our Cookie Policy, both linked from the footer. Switch Analytics off and choose “Save settings”. Closing the settings panel without saving keeps your previous choice.
Withdrawal stops new collection, cancels pending browser requests where possible, clears the temporary visit token and discards unsent interaction data. It does not automatically erase information already received. Camera permission is separate and can also be managed in your browser’s site settings.
Service providers and external links
Hosting and email services process the technical information and messages needed to deliver the website and our correspondence. Optional analytics goes through this website to our analytics server. The website does not load advertising pixels or third-party social embeds.
If you follow a social media or other external link, you leave this website. The destination’s own privacy policy applies to information you share there.
Storage and retention
The preference cookie expires 180 days after you save it. Interactive progress and temporary visit tokens are held in page memory, and the mirror’s camera feed is not stored by the website.
Server-held analytics and email correspondence are separate from this browser storage. Their storage periods depend on the server’s retention settings and the purpose of the correspondence, including any ongoing project or applicable record-keeping requirements. For current storage periods or a request to delete information already received, use our protected email link: Knock three times
Your privacy rights
Where applicable data protection law provides these rights, you can request access to your personal information, correction, deletion, restriction of processing or a portable copy. You may also object to processing based on legitimate interests and withdraw consent without affecting the lawfulness of earlier processing. Some rights depend on the circumstances.
Contact us using the email above to make a request. You can also raise a concern with your local data protection authority. The European Commission’s guide to data protection rights explains the rights available under the GDPR.
Changes to this policy
We will update this page when the website’s handling of information changes. The date above shows the latest revision. Changes to optional collection purposes require a fresh choice before those purposes are enabled.