Privacy Policy

1. Data We Collect

When you sign in with Google, we receive your name and email address from Google OAuth. We store your reading history (which cards were drawn and AI-generated interpretations) associated with your account. If you purchase credits, we store your Stripe customer ID and a record of credit transactions — we never see or store your raw payment card numbers; those are handled entirely by Stripe. For guest sessions, we set a first-party browser cookie (tarot.guest_id) to associate readings with your device.

2. How We Use Your Data

We use the data we collect to deliver and improve the reading experience, manage your credit balance, process payments, associate reading history with your account across devices, and respond to support requests. We use advertising measurement pixels to understand how users discover and return to the site. We do not sell your data to third parties.

3. Data Storage

Account and reading data is stored in Neon Postgres hosted in the US. Payment card data is stored and processed exclusively by Stripe — tarots.world never has access to raw card numbers or CVVs.

4. Third-Party Processors

We share your data only with the processors required to operate and measure the service:

• Google — OAuth sign-in, Tag Manager, and Ads conversion measurement. Google Privacy Policy
• Stripe — payment processing. Stripe Privacy Policy
• Neon — database hosting. Neon Privacy Policy
• Meta, Snap, TikTok — advertising pixels for conversion measurement (loaded only when the respective pixel ID is configured).

5. Cookies and Analytics

We set one first-party cookie (tarot.guest_id) to maintain guest reading sessions. We also load Google Tag Manager and Google Ads on every page visit. Advertising pixels from Meta, Snap, and TikTok may be present depending on site configuration. These are used exclusively for measuring ad performance and are not used to build personal profiles for ad targeting.

6. Data Retention

Account data is retained for as long as your account is active. The guest cookie expires after one year. You may request deletion of your account and associated data at any time by emailing us at hello@tarots.world.

7. Children

tarots.world is not directed at children under 13. We do not knowingly collect personal information from anyone under 13. If you believe a child has provided us with their information, please contact us so we can delete it.

8. Contact

Questions about this policy or requests to access or delete your data? hello@tarots.world