Privacy Policy
Last updated: February 23, 2025
Chaos Tarot ("we," "us," or "our") operates chaos-tarot.com. This Privacy Policy explains how we collect, use, and protect your information when you use our digital divination platform.
1. Data We Collect
Account Information
When you register, we collect your email address and generate a unique access code for your account. We do not require your real name, phone number, or physical address.
Reading & Usage Data
We store your tarot readings, rune castings, journal entries, daily draw history, and streak data so you can revisit and reflect on your divination journey. We also collect basic usage data such as pages visited, feature interactions, and session timestamps to improve the platform.
Payment Information
Payment processing is handled entirely by Stripe. We receive confirmation of your payment status but never see, store, or have access to your credit card number, CVV, or full billing details.
2. How We Use Your Data
- Provide the service — authenticate your account, generate readings, save your journal, and track your streaks.
- Send emails — welcome messages, streak reminders, and occasional product updates. You can opt out at any time by replying UNSUBSCRIBE.
- Analytics — understand how the platform is used so we can improve features, performance, and reliability.
- AI-powered interpretation — your reading context (selected cards/runes and optional question) is sent to Anthropic's Claude API to generate personalized interpretations. We do not send your email or identity to the AI.
3. Payment Processing
All payments are processed securely by Stripe. We never store your credit card data on our servers. Stripe is a PCI-DSS Level 1 certified payment processor. For details on how Stripe handles your payment information, please review Stripe's Privacy Policy.
4. Cookies & Local Storage
Chaos Tarot uses localStorage to store your authentication session and user preferences (such as cookie consent status). We do not use third-party tracking cookies, advertising pixels, or fingerprinting technologies.
Essential cookies set by our hosting provider and payment processor (Stripe) may be used for security and fraud prevention purposes.
5. Third-Party Services
We rely on the following third-party services to operate the platform:
- Stripe — payment processing for one-time and subscription purchases.
- Supabase — database hosting, authentication, and storage. Your data is stored securely on Supabase's infrastructure.
- Resend — transactional email delivery (welcome emails, streak reminders, etc.).
- Anthropic (Claude AI) — AI-powered tarot and rune interpretations. Only reading context is shared; no personal identifiers are sent.
6. Data Retention & Deletion
We retain your account data and reading history for as long as your account is active. If you wish to delete your account and all associated data, contact us at the email below and we will process your request within 30 days.
Upon deletion, your readings, journal entries, streak data, and personal information will be permanently removed from our systems. Some anonymized, aggregated data may be retained for analytics purposes.
7. Data Security
We use industry-standard security measures including HTTPS encryption, secure authentication tokens, and access controls to protect your data. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
8. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of the platform after changes constitutes acceptance of the revised policy.
9. Contact
If you have questions about this Privacy Policy or wish to request data deletion, contact us at: