Privacy Policy

This policy explains what data Tarotal (tarotal.com) handles when you use the site, readings, accounts, and membership, and what that data is for. The service is operated by Tarotal. For privacy questions, email support@tarotal.com.

You can draw cards without signing in. Signing in, saving readings, subscribing, or contacting us leaves more information that relates to you.

We handle personal data in line with applicable data protection laws.

Information you give us includes the email and display name used to register or sign in. If you sign in with Google, this includes the email, name, and profile photo Google provides.

The questions you enter and the readings that are generated are saved so you can look back at them. Readings made while you are signed in are linked to your account. Readings made while you are not signed in stay with the browser you used at the time, until you delete them or clear that browser’s site data.

Payments are processed by Stripe. We keep your membership status and plan so we can confirm what you can use. We cannot see, and we do not store, your full card number or security code.

When you use the site, we also receive ordinary technical data needed to run and understand the service, such as IP address, browser type, language, and which pages you open.

We use this data to provide readings, show them to you, save them after you sign in, and confirm membership.

Email is used to sign in, reset your password, handle payment questions, and reply when you write to us. We do not publish your reading questions, and we do not turn them into public testimonials.

To keep the site running, fix errors, or prevent abuse, we may look at relevant records when necessary. We will not quote text on the site that includes a real name or otherwise identifies someone.

Technical data is used to keep the site stable, understand how it is used, prevent abuse, and find the cause when something goes wrong.

We do not sell your personal data.

We share what is needed with third parties in order to provide the service. Those providers may handle data under their own terms, privacy policies, and data-processing arrangements. They do not necessarily act only on our instructions. They may also process data for their own legal duties or security.

This currently includes: Stripe, to take payment and confirm membership; a service that generates the reading, which receives what that reading needs; email, which is used only when we send a message; and analytics tools used to understand how the site is used.

The service that generates readings has its own terms. We cannot guarantee that it will not keep what you submit. Do not put anything in a question that you do not want to leave this site.

We may also disclose data when the law, a court order, or the need to prevent fraud and protect users requires it.

A question may include relationships, work, health, beliefs, sexual orientation, or another person’s name and private circumstances. You decide whether to enter that. Please avoid sensitive information that identifies you or someone else, including detailed health records, financial information, identity documents, or other private details that are not needed. Entering it yourself does not mean we have a legal basis to process every kind of sensitive data.

We use what you submit to produce that reading. If you are signed in, we also save it so you can look at it later.

Readings are generated by artificial intelligence from your question. They are not a personal consultation with a human tarot reader, and they are not a substitute for medical, legal, financial, or psychological advice.

You can use some features without signing in. After you sign in, readings are linked to your account.

We use cookies and similar technologies to remember sign-in state and language, and to understand how the site is used. This includes analytics tools such as Google Analytics.

We do not sell your data to advertisers. These tools may collect usage data under their own settings. You can limit or clear cookies in your browser. After you clear them, you will be signed out. Blocking cookies may stop sign-in or membership features from working.

Account data is kept while the account is active. After you ask us to delete the account, we delete account data we no longer need and that the law does not require us to keep. What the law requires us to keep stays until that period ends.

Readings stay until you delete them in your reading history, or until you ask us to delete the account. You can also clear them all at once. This does not cover anything the law requires us to keep. Readings made while you are not signed in stay with the browser you used, until you delete them or clear site data.

Payment and subscription records are kept for as long as applicable accounting, refund, dispute, and tax requirements need them. That may be longer than ordinary account data.

Technical records needed to run the site are kept only until they are no longer needed to fix problems or prevent abuse. They are not kept as a permanent profile. We do not set one fixed number of days for every kind of technical record, because how long something stays depends on whether it is still needed for a problem or a security incident.

Data deleted from the live system may remain in backups for a short time, until that backup is replaced. We do not restore deleted readings from backups for ordinary operations.

Where applicable law allows, you can ask us what data we hold about you. You may also have the right to restrict or object to certain processing, or to receive a copy of the data you gave us. Whether a right applies depends on the basis for processing and the law where you are. Not every right applies in every case. After you sign in, you can see some of this data in your account, and you can delete readings yourself.

You can ask us to delete your account. Email support@tarotal.com from your registered address, with “delete account” in the subject. We will confirm it is you, then delete the account and the readings linked to it that the law does not require us to keep. Transaction records already held by Stripe may not be fully deleted, because they are needed for accounting.

We will reply within a reasonable time. If you think the handling is wrong, you can also complain to the data protection authority where you live.

We take reasonable steps to protect accounts and data. Connections to the site are encrypted.

No website can promise it will never be broken into. Use a password other people cannot guess, do not forward sign-in links, and do not stay signed in on a shared computer.

If a breach may affect you, we will notify affected users and the relevant authorities on the conditions and within the time the applicable law requires.

This service is not meant for anyone under 13. We do not knowingly collect personal data from children. If the law where you live sets a higher age, that law applies. If you believe a child has given us data, email support@tarotal.com and we will delete it.

People who are not yet adults should use the service with a parent or guardian’s consent. This matches the terms of service.

To provide Tarotal, your data may be handled by providers in other countries or regions. Where data crosses a border, we handle that transfer under applicable data protection law, and we will explain the safeguards when the law requires it.

We send partners only what that function needs, such as what is required to produce a reading, and payment handled by Stripe.

Pages may link to other sites, such as a payment page, a sign-in page, or an outside article. Those sites have their own privacy practices. This policy does not cover them.

After you leave tarotal.com, read that site’s own notice. Stripe checkout and Google sign-in are run by Stripe and Google.

Creating an account or paying does not mean you agree to advertising email. For now we mainly send mail the service needs, such as sign-in, password reset, payment results, and replies to questions you sent us.

If we later send product news, the message will include a way to stop. Stopping advertising mail does not affect membership, and it does not stop notices the account or a payment needs.

This policy was last updated on 25 October 2026.

When features or practices change, this policy is updated and published on this page. If a change legally requires your separate consent, we will ask before it takes effect. We will not treat continued use of the site as that consent.

This policy explains how we collect, use, and protect personal data when you use Tarotal. When a particular use legally needs your consent, we will ask for it separately. Using the site, including drawing cards as a guest, is not itself consent.

For privacy questions, access requests, or account deletion, email support@tarotal.com. Write from your account email and say clearly what you want, so we can check that it is you.