Privacy Policy

The optional question and drawn cards in the English three-card practice tool stay in the current page’s browser memory. This tool does not send the question to our reading API, an AI provider, or a database. Reloading or closing the page clears this practice state. Site hosting and advertising may still receive ordinary network and cookie information when you visit.

This product does not upload, transcribe, or store audio. Audio retention periods do not apply.

If you use account features, we process your email address, account identifiers, password authentication records, verification and password-reset requests, and session information. If you choose Google sign-in, Google supplies the identity information needed for that sign-in.

Separate server-generated readings store the question, selected spread, drawn cards, interpretation, timestamps, status, and the associated account or anonymous identifier. Historical usage counters may remain stored, but current rule-based readings no longer consume a daily commercial quota. Billing records may include payment-provider customer and subscription identifiers, status, billing periods, and verified event records. We do not store full payment card numbers.

We use information to deliver sign-in and recovery, readings, history, existing billing access, billing support, abuse prevention, and fault investigation. Where applicable law requires a legal basis, processing is based on providing the requested service, legal obligations, legitimate security and operational interests, or consent for activities that require it.

Do not include sensitive personal information about yourself or other people in a reading question.

The database-backed account and reading features do not currently apply an automatic fixed expiry or scheduled deletion period. Records remain stored until removal is processed or they are no longer needed for the service and applicable obligations. There is no self-service account or reading deletion control. Logging out does not delete stored records.

Email support to request access, correction, export, or deletion. We verify identity before acting and explain any information we must retain for security, legal, tax, or transaction obligations. We do not promise an automatic 24-hour deletion period or a fixed backup-erasure deadline. Support requests may be handled manually; no automated account-export feature is promised.

Cloudflare provides production hosting and database infrastructure. Email delivery providers process verification and password-reset messages; the deployment uses SMTP or Resend depending on configuration. Google processes optional OAuth sign-in. Stripe and, where enabled for the relevant checkout, Waffo process payments under their own privacy policies. Waffo test payments are separate from production access.

The currently implemented interpretation engine uses fixed card meanings and rules. It does not send reading questions to a third-party AI model. The English practice tool also makes no AI request. This policy must be updated before introducing a remote AI processing flow.

Third-party providers may process data outside your country. Their handling is also governed by their own terms and privacy policies. We share information as needed to provide the requested feature, comply with law, or protect service security.

Essential cookies support sessions and access to your own anonymous reading records. Google AdSense is included on production pages. Google and its partners may use cookies or similar technologies to deliver, personalize, and measure ads based on visits to this and other websites. You can manage ad personalization at Google’s My Ad Center and manage cookies in your browser. Blocking essential cookies may prevent some account features.

For information on Google’s use of partner-site data, visit https://policies.google.com/technologies/partner-sites. Any consent mechanism required for advertising in a visitor’s jurisdiction must be implemented separately; this text alone does not collect consent.

Depending on your location, you may have rights to access, correct, delete, receive a copy of, or object to certain processing of your information, withdraw consent, and complain to your local data protection authority. Contact support to exercise applicable rights. We use account access controls and server-side authorization, but no online service can guarantee absolute security.

This site is intended for adults and does not target children. If you believe a child has supplied personal information, contact support. Policy changes will be published here with additional notice where required.