tarot
Checking session...
tarot

Legal

Privacy Policy

Effective May 28, 2026

1. Data We Collect

When you sign in with Google, we receive your name and email address from Google OAuth. We store your reading history (which cards were drawn and AI-generated interpretations) associated with your account. If you purchase credits, we store your Stripe customer ID and a record of credit transactions — we never see or store your raw payment card numbers; those are handled entirely by Stripe. For guest sessions, we set a first-party browser cookie (tarot.guest_id) to associate readings with your device.

2. How We Use Your Data

We use the data we collect to deliver and improve the reading experience, manage your credit balance, process payments, associate reading history with your account across devices, and respond to support requests. We do not sell your data or use it for advertising.

3. Data Storage

Account and reading data is stored in Neon Postgres hosted in the US. Payment card data is stored and processed exclusively by Stripe — tarots.world never has access to raw card numbers or CVVs.

4. Third-Party Processors

We share your data only with the processors required to operate the service:

5. Cookies

We set one first-party cookie (tarot.guest_id) to maintain guest reading sessions. We do not use third-party tracking cookies, advertising pixels, or analytics SDKs.

6. Data Retention

Account data is retained for as long as your account is active. The guest cookie expires after one year. You may request deletion of your account and associated data at any time by emailing us at hello@tarots.world.

7. Children

tarots.world is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with their information, please contact us so we can delete it.

8. Contact

Questions about this policy or requests to access or delete your data? hello@tarots.world