Privacy Policy

Who we are#

BigBalli Consulting ("we", "us") publishes Tessera. This page covers the Tessera web app at bigballi.com/Tessera/app/ and the account and payment service behind it. It adds to the BigBalli Consulting privacy policy for all our apps. Where the two differ for the Tessera web app, this page controls.

We do not sell personal information. The web app shows no ads and loads no advertising trackers. When you buy Tessera Pro, our server tells Meta about the purchase so we can measure our ads, as described under Advertising measurement. You can turn that off.

Birth details#

In the web app, your browser computes every chart, and our servers never receive a birth date or time in order to compute anything. The connector for AI assistants works differently, as described under The connector for AI assistants.

• Without Tessera Pro (the demo, or a signed-in account without Pro), the names, dates, times and places you enter stay in your browser tab, in its session storage. They are not sent to us, and they are cleared when you close the tab or sign out.
• With Tessera Pro, the people you save are stored in your account so you can open them on any device: the name you give them, the birth date and time as you typed them, the time zone, the place name you picked, its GeoNames number, and the birth time window you chose. We store no latitude or longitude. The place only tells the app which time zone applied on that date.
• Place search. When you type a place, the text goes to our server so it can look it up in our own copy of the GeoNames database. We do not log it, store it or pass it on, and it never reaches GeoNames.

Birth details never appear in a web address, in our analytics or in our logs. Error reports we send ourselves have the content of people and place searches removed. Only enter another person's birth details if they are happy for you to do so.

What we collect and why#

We do not ask for your real name, and we do not read your contacts, your photos or your device's location.

Who else handles your data#

These providers act for us or serve you directly. Each gets only what it needs.

• Stripe, through Link: payments. Stripe's Managed Payments makes Stripe the merchant of record. It receives your payment details and email address, sends your receipts, handles tax, refunds and disputes, and keeps payment records as the law requires. Its own privacy policy applies to that data. It never receives birth details.
• Cloudflare: delivers our pages and runs the Turnstile check on the sign-in form. It sees your IP address and browser details.
• Email: sign-in links are sent from our own mail server straight to your email provider, which will see them.
• GeoNames: we download its public place database to our own server. Your searches never go to GeoNames. Place data: GeoNames, licensed under CC BY 4.0.
• Meta Platforms: when you buy Tessera Pro, our server reports the purchase to Meta so we can see which Facebook and Instagram ads lead to sales. What we send, and how to stop it, is under Advertising measurement. Meta handles that data under its own terms and privacy policy. It never receives birth details.
• Google Fonts: the Tessera landing page loads its typefaces from Google, which sees your IP address. The web app and these legal pages load no fonts from Google.

We may also disclose information when the law requires it, or to protect people or the service. If the business is sold, the data goes with it under this policy.

How long we keep it#

• Sign-in links expire after 15 minutes and are deleted a day later.
• A session lasts up to 30 days from your last visit, and is deleted when it expires or when you sign out.
• Saved people stay until you delete them or your account.
• Records of Stripe notifications are deleted after 90 days, and records of finished checkouts 30 days after they close.
• Security records are deleted after 12 months.
• Web server logs are rotated daily and kept for about 14 days.
• A Meta ad click ID is used for 90 days after the ad click, and deleted when you opt out or delete your account.
• Stripe keeps its own payment records as the law requires.

Exporting and deleting your data#

Export. Settings, Download my data gives you a JSON file with your email address, your plan and every person you saved.

Delete. Settings, Delete account. For your security this asks for a sign-in less than 15 minutes old. We first cancel a Yearly subscription and delete your Stripe customer record. If Stripe cannot be reached, we stop and tell you instead of deleting half of your account. Then, at once:

• every person you saved is permanently deleted;
• your sessions, unused sign-in links and Pro status are deleted;
• your email address is erased and the link to your Stripe customer is removed.

What remains is an empty account row with no email address, removed for good after 30 days, the record of a checkout you started (an internal account number and a plan, kept up to 30 days so a late payment can be refunded), security records as above, and Stripe's own payment records. If the same Stripe customer holds purchases from another of our products, Stripe keeps that customer for them.

Cookies and browser storage#

The web app sets one cookie, tessera_session, once you sign in. It keeps you signed in, is HttpOnly, Secure and SameSite Lax, applies only under /Tessera/, and lasts up to 30 days. It is required for the account to work and carries no tracking.

The app keeps your language, your theme, your onboarding answers and, if you arrived from one of our ads, the Meta ad click ID in your browser's local storage, and demo charts in the tab's session storage, as described above. Its service worker caches the app's own files so the demo opens quickly and works offline. Your browser's settings clear all of these.

Analytics#

The landing page, the web app and these pages load our own first-party analytics script, which reports to our own server. It records page views with the page path, scroll depth, referrer, screen size and an anonymous visitor identifier kept in your browser. Page paths in the web app never contain a name, a birth detail, a place or a sign-in token, and saved people are identified by random identifiers. We do not use Google Analytics or any advertising tracker, and the script does not follow you to other sites.

Advertising measurement#

We advertise Tessera on Facebook and Instagram. To see which ads lead to purchases, our server tells Meta Platforms when you start a yearly subscription or buy lifetime access. The web app loads no Meta code, so Meta learns nothing from your visit itself.

For each purchase we send Meta the type of purchase, the amount and currency, and the time. We also send your email address hashed with SHA-256, the ad click ID described below if we have one, your IP address and your browser type. Meta compares the hashed email with hashes it already holds and never receives your email in plain text.

If you reach the web app from one of our ads, the link carries a Meta click ID (the fbclid parameter). The app keeps it in your browser's local storage, not in a cookie, and sends it with your sign-in request and your checkout, so we keep it with your account too. We send it with a purchase made within 90 days of the click, so Meta can match the purchase to the ad.

We never send Meta your birth details, your saved people, their names or anything you look at in the app.

To stop it, turn on "Do not share my purchases with Meta" under Settings, Ad measurement, or email [email protected]. Opting out deletes the click ID we hold, and we send Meta nothing about your later purchases. If your browser sends a Global Privacy Control signal, we treat it as the same request and never keep the click ID.

The connector for AI assistants#

Tessera also runs a connector at bigballi.com/Tessera/mcp that AI assistants such as Claude and ChatGPT can call when you ask them about Human Design (how to add it). When you give the assistant a birth date, time and place, the assistant sends them to our server, which calculates the chart and returns it. The connector needs no account.

We store nothing you send to the connector. Birth details and place names are held in memory for that one request, then discarded. They never reach a log, our analytics, an error report or a database.

We keep a daily count of how many times each tool ran and which assistant called it, the Human Design term the explain tool matched (such as gate 34 or Projector, never the words typed) and the language they chose. None of it is tied to a person, an address or a birth date, and we delete it after 90 days. Like every visit to this site, a connector request appears in the web server's access log with the address and time, but without what was sent, and that log is deleted after 14 days. To limit abuse, a hash of the calling address and the times of its requests in the last minute are kept for up to an hour.

The assistant you use has its own privacy policy, and it decides what happens to your conversation, including any birth details you type into it.

The iPhone and Android apps#

The Tessera apps for iPhone and Android are separate from the web app and do not use your web account. Web purchases and store purchases are not shared. The apps are covered by our general policy and by Apple's and Google's own terms.

Your choices and rights#

You can see, change, export and delete your saved people and your account yourself. You can also write to [email protected] to ask what we hold about you, to correct it or to have it erased. We reply within 30 days. If you live in California, the European Union, the United Kingdom or another place with privacy laws, you have the rights those laws give you. We do not sell personal information. The only data we share for advertising is the purchase information under Advertising measurement, and you can opt out of it at any time in Settings or by email. A Global Privacy Control signal counts as that opt-out.

Birth details can be sensitive. We use them only to show the charts you ask for, and you can delete them at any time.

Children#

The Tessera web app is not directed at children under 13, and we do not knowingly collect their information. Tessera Pro is for people 18 and older. If a child has given us information, write to [email protected] and we will delete it.

Security#

Traffic is encrypted in transit. Sign-in links and session identifiers are stored only as hashes, and IP addresses only as keyed hashes. Our database and private files are not served by the web server. Saved data is not encrypted at rest on our server. No system is perfectly secure, and we cannot promise that ours is.

Changes to this policy#

We may update this policy. The date at the top shows the current version, and we will tell you by email or in the app about a change that matters.

Contact#

BigBalli Consulting. Privacy, billing and everything else about Tessera: [email protected].