Privacy Policy

In short

• You can do readings without an account. The AI interpretation and recognising cards from a photo open after a free sign-in (with a link sent to your email): then we keep your email address so we can show your readings on any device. We don’t ask for your name, phone number or a password.
• Subscription payments are taken by Freemius, Inc. (USA). You enter your card details on its page: we never see or store them.
• Your reading (your question, if you wrote one, and the cards you drew) is kept for 30 days, or 12 months if made with a subscription, and then deleted automatically.
• A reading opens by its link, and anyone who has the link will see it, including your question.
• For the monthly limit of free readings we keep an anonymous ID in a cookie and a fingerprint of your IP address, not the address itself.
• Spread interpretations are written by AI: for this, your question and the cards you drew are sent to the Qwen model of Alibaba Cloud (Singapore). Alibaba Cloud does not train its models on them and deletes them on its side within 30 days.
• In “Spread interpretation” you can fill in the cards from a photo or a description in words: the photo and the description are sent to the Qwen model of Alibaba Cloud only to recognise the cards and are not stored anywhere. If you dictate, your browser recognises your speech (for example, Chrome through Google or Safari through Apple), and we receive only the text.
• There are no ads on the site. Google Analytics is turned on only if you allow it in the cookie window; without your consent no Google scripts are loaded. Our own step counters keep only daily totals, with no cookies or IDs. We don’t sell your data.
• You can delete your reading right away with the “Delete reading” button on its page, and your account on the “My readings” page.

Who is responsible for your data

TaroAstral is run by its owner, a private individual (“we”). For any questions about your data, write to support@taroastral.com.

What we keep and why

Reading. Your question (optional, up to 500 characters), the cards you drew and their position, the spread, the language and the time of the reading. We need them to show you the result and open it by its link. The link contains a random 10-character code that is practically impossible to guess. But anyone you send the link to will also see your question, so please don’t include names, contacts, ID numbers or health details in it.

AI interpretation. The text that AI writes from the cards of your reading, the spread and your question. It is stored together with the reading and shown at the same link. So that the same interpretation isn’t written twice, a fingerprint of the reading is stored with it (a one-way transformation of the cards, spread, language and question): an identical reading gets the ready-made text. Interpretations are written for readings linked to an account, and with a subscription they are more detailed. No interpretation is written for the card or rune of the day.

Spread photo and description. If you fill in the cards from a photo or a description, we don’t keep them: the photo and the text are processed in the server’s memory, sent to the Qwen model (see “Who we share data with”) and forgotten straight away. Before sending, your browser shrinks the photo and removes the file’s metadata, including where it was taken. Recognition is available after signing in. To keep to its limit (3 a month without a subscription, 10 a day with one), we record the time of each recognition, its type (photo or text), the account number, the anonymous ID and the IP fingerprint, and the account keeps a count of recognitions for the current month. The photo, the text and the cards are not part of this record.

Anonymous visitor ID. A random string in the ts_vid cookie. It says nothing about you and is signed with a secret key so it can’t be forged. We use it to count your free readings this month and to make sure only the person who made a reading can delete it. It is stored together with the reading.

IP address fingerprint. We don’t store your IP address. Instead we store a fingerprint: a one-way transformation of the address with a secret key (HMAC). It shows that two readings came from the same address, but the address itself can’t be recovered without the key. For IPv6 addresses the fingerprint covers the network (/64). It keeps the limit from being bypassed simply by deleting the cookie.

Account (if you sign in). Your email address, the date the account was created and the date of your last visit. Readings made after you sign in are linked to the account, as are readings made without signing in in the same browser where you asked to sign in. The account lets us show your readings on the “My readings” page on any device and count free readings per account rather than per browser.

Subscription. If the account has a subscription: its term (a month or a year), start and end dates and where it came from (paid through Freemius or granted by the administrator). For a paid subscription, also its Freemius number and whether it renews automatically. We need this to give you more readings, a detailed interpretation and longer storage of your readings. We hold no payment details such as card numbers.

Sign-in link. When you ask for a link, we store the email address, the time of the request, a fingerprint of your IP address and the browser’s anonymous ID: so that no more than 5 emails an hour can be sent to one address, and so that readings from that very browser are linked to the account. We don’t store the link itself, only its one-way fingerprint. The link works for 15 minutes and only once. The email is sent by the email service Resend (see “Who we share data with”).

Sign-in session. A random key in the ts_sid cookie that tells the site you are signed in. The database keeps only its one-way fingerprint: even with access to the database, nobody could use it to get into your account.

Chosen language. Remembered in the lang cookie and in your browser’s storage (localStorage) so the site opens in that language next time.

Server logs. The server records errors in how the site works. Questions, email addresses, IP addresses and visitor IDs never get there. For AI interpretations, only the outcome and resource usage are logged, never the question or the text. The same goes for spread recognition: only the outcome and resource usage, never the photo, the text or the cards. We don’t keep an access log ourselves (who opened which pages); for Google Analytics, see below.

Step counters. The site counts how many times a day people open the reading tool, draw and reveal cards, use “Reading interpretation” (by photo, in words or by voice) and the “Share” buttons, open the subscription page and press “Subscribe”, and, when someone arrives, which site they came from (just its name, such as google.com, without the page address). Only daily totals are kept: no cookies, no browser id and no IP address, so they cannot show who did what. If your browser has Do Not Track or Global Privacy Control switched on, the page sends nothing.

Google Analytics (only with your consent). If you click “Accept” in the cookie window, the site turns on Google Analytics 4. Google receives the address of the page you open (a reading’s address without its number, which would open the question), the site you came from, the reading steps (the same as our step counters), your device and browser type, language, and approximate country and city based on your IP address. Questions, interpretation texts, email addresses and account numbers are never sent. Google Analytics sets the _ga and _ga_… cookies (for up to 2 years). We have switched off advertising features and Google signals, and detailed data is kept in Google Analytics for 2 months.

Legal basis

• We keep your reading and its link because you asked us to make the reading.
• The AI interpretation is part of the reading you asked us to make.
• We process the photo or description of your spread because you asked us to recognise the cards from it.
• The record of how many recognitions there were: our legitimate interest. Recognition costs the site money, and the limit protects it from abuse.
• The anonymous ID and IP fingerprint are our legitimate interest: the site is free, and the limit protects it from abuse.
• We keep your email and account data because you created the account yourself and asked us to show your readings in it.
• We keep subscription data to provide what the subscription includes.
• We pass your email to Freemius and keep paid subscription data to perform the subscription contract you enter into when you pay.
• Sign-in link requests and how many there are: our legitimate interest in protecting other people’s mailboxes from unwanted links and the site from abuse.
• We remember your language because you chose it.
• Step counters: our legitimate interest in understanding which parts of the site people use. They contain no personal data.
• Google Analytics runs only with your consent. You can withdraw it at any time: “Cookie settings” at the bottom of the page → “Decline”. The site then deletes the Google Analytics cookies and sends nothing more.

If you do mention your health or other sensitive details in a question, we use them only to show your reading and delete them together with it.

How long we keep data

• Question and cards: 30 days from the reading, together with the interpretation text and its fingerprint. Then they are erased automatically and the link stops working. Readings made with an active subscription are kept for 12 months, and that doesn’t get shorter if the subscription ends.
• The anonymous ID and IP fingerprint saved with a reading: no longer than 2 months, since the limit only needs the current month. For readings kept longer, they are erased on the same schedule.
• If you delete a reading with the button, the question, cards and interpretation are erased at once. The date, ID and fingerprint stay until the limit period ends; otherwise deleting a reading would give back a free one.
• Account data, subscription and recognition count: as long as the account exists. If you haven’t visited the site for 2 years, the account is deleted automatically (unless it has a subscription that renews).
• The Freemius subscription number: for as long as the account exists. If you delete your account, the site cancels the renewal at Freemius and erases this data. Receipts and payment records are kept by Freemius as the seller, under its own rules and the law.
• If you delete your account, your email and sessions are deleted at once. Your readings are unlinked from the account and deleted on the usual schedule, 30 days after each reading.
• A sign-in link request: one day.
• Spread photos and descriptions: not kept. A recognition record (time, type, account number, anonymous ID and IP fingerprint): two days.
• Step counters: 400 days.
• Google Analytics: detailed data for 2 months, the _ga cookie for up to 2 years or until you decline. Your choice in the cookie window is kept in your browser’s storage (localStorage) for a year.
• The ts_vid cookie stays in your browser for up to 400 days, the lang cookie and the localStorage entry for up to a year, the ts_sid cookie for 90 days from your last visit or until you click “Sign out”. You can delete them in your browser settings at any time.

Who we share data with

To write the spread interpretation, the site sends your question (if you wrote one), the cards you drew and their positions, the spread, the language and the meanings from our site to the Qwen model of Alibaba Cloud Model Studio, provided by Alibaba Cloud (Singapore) Private Limited (servers in Singapore). We don’t send your ID, IP address or cookies. Under Alibaba Cloud’s terms, this data is not used to train models without separate consent and is deleted on its side within 30 days. Requests that its automated safety checks flag as breaking its rules may be kept for up to 2 years under Alibaba Cloud’s own rules (alibabacloud.com/help/en/model-studio/data-retention-policy). This data is transferred to Singapore.

To fill in the cards from a photo or a description, the site sends a photo of your spread (shrunk, without information about where it was taken) or your text, together with the spread layout, to the same Qwen model. We don’t send your ID, IP address or cookies. The terms are the same as for interpretations: the data is not used to train models and is deleted within 30 days, except for requests flagged by the safety checks. Please photograph only the cards: no faces, documents or other personal items.

The “Dictate” button uses the speech recognition built into your browser. The sound is processed not by our site but by the browser maker’s service (for example, Google in Chrome, Microsoft in Edge, Apple in Safari) under its own privacy policy (policies.google.com/privacy, privacy.microsoft.com, apple.com/legal/privacy). Your browser will ask for permission to use the microphone; you can withdraw it in your browser settings. We receive only the finished text from the field, when you send it yourself. If you’d rather not use your voice, just type.

Sign-in emails are sent by the email service Resend, Inc. (USA) from servers in Ireland (EU). It receives the address you asked us to send the link to and the text of the email with the link; your ID, IP address and readings are never passed on. Resend keeps a sending log (address, subject, time, whether the email was delivered) for a limited time, under its own privacy policy (resend.com/legal/privacy-policy). Data may be transferred to the USA.

Emails to support@taroastral.com pass through Cloudflare, Inc.’s email forwarding service (USA): it receives the email and passes it straight on to our Gmail (Google) mailbox without storing the text. Cloudflare keeps a short forwarding log (sender and recipient addresses, subject, time) under its own privacy policy (cloudflare.com/privacypolicy). Data may be transferred to the USA.

Google Analytics (if you allowed it in the cookie window) is provided by Google Ireland Limited (for visitors from the EU and Switzerland) or Google LLC (USA). Data may be transferred to the USA; Google takes part in the EU–US Data Privacy Framework. How Google handles data: policies.google.com/privacy.

When you subscribe, you go to the payment page of Freemius, Inc. (USA), which sells the subscription as the merchant of record. The site passes it your account’s email address so the payment is linked to your account. You enter your name, card details and billing address on the Freemius page; they are processed by Freemius and its payment providers (Stripe, PayPal) under their own privacy policy (freemius.com/privacy). Freemius tells us the subscription number, plan, dates and payment status, but not your card details. This data is transferred to the USA.

There are no other recipients. We don’t sell data or show ads. Apart from Google Analytics with your consent and the Freemius payment page you go to yourself, your browser loads everything from our site only.

The site runs on a rented server in a data centre in the Netherlands (EU). The hosting provider keeps the server running but does not use the site’s data.

Data may be disclosed only when we are legally required to do so.

If we add other services, we will update this policy in advance and ask for your consent where needed.

Cookies

Essential cookies: ts_vid for the free reading limit, lang for your chosen language and ts_sid if you are signed in. The only optional cookies are Google Analytics (_ga, _ga_…), set only after you consent in the cookie window. You can change your choice under “Cookie settings” at the bottom of any page. If your browser has Do Not Track or Global Privacy Control switched on, the window isn’t shown and Google Analytics stays off unless you allow it yourself in “Cookie settings”. The Freemius payment page is on its own site: any cookies there are set by Freemius under its own policy.

Your rights

If you haven’t signed in, we don’t know who you are, so we can find your data only by the link to your reading. If you have, your email and readings are shown on the “My readings” page.

• Delete a reading with the “Delete reading” button on its page (in the browser where you made it) or by writing to support@taroastral.com with the link to the reading.
• Delete your account with the “Delete account” button on the “My readings” page or by writing to support@taroastral.com from the address linked to the account.
• Find out what data we hold about you, correct it, restrict or object to its use: write to support@taroastral.com. We will reply within 30 days.
• Complain to a data protection authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, your national data protection authority.

Children

The site is intended for people aged 18 and over. We don’t knowingly collect children’s data. If you learn that a child has left personal details on the site, write to us and we will delete them.

Security

The site opens only over a secure connection (HTTPS). The database is not reachable from the internet, and secret keys are kept only on the server. Sign-in links and session keys are stored only as one-way fingerprints. Only the site administrator can see the list of accounts (email, sign-in dates, number of readings, subscription), in an admin panel protected by a separate password; it shows no questions or reading texts. No one can rule out every risk online, so we keep as little data as possible for as short a time as possible.

Changes to this policy

A new version will appear on this page with a new date. We will announce important changes (for example, new services that would receive data) on the site in advance.