Privacy
About this page
This page honestly explains what data this site collects, why, who it is shared with and how to delete it. Updated 12 October 2026.
What we store
Account: email, password as an irreversible hash (we never see the password itself), your name if you gave one, site language, token balance. If you sign in with Google — also your Google account ID, email and name from it.
Readings: the cards drawn, your question and the interpretation. A guest's readings are linked to the account when they sign in.
Feedback: the text and a contact if you left one.
Technical: instead of the IP address — only its irreversible fingerprint with a secret salt, to limit abuse. We don't store the address itself.
Why
To show you your readings and interpretations, remember your sign-in and language, count tokens, protect the site from spam and password guessing, and improve the site based on your feedback. We don't sell data, show ads or track you on other sites.
Interpretations and AI
Interpretations are written by an AI model. It receives only the cards of the spread and the text of your question — no email, name or anything else about you. A regular interpretation is written by a model on the site's own hardware. A fast one (for tokens) — by a third-party model from Anthropic (USA), which processes the request to write the answer and, under its own terms, does not use it for training. Don't put anything in the question you don't want to share.
Cookies
Only the necessary ones: the sign-in session (up to 30 days), form protection (CSRF), the chosen language (taro_lang) and a guest's list of readings before signing in (taro_guest). No advertising or analytics cookies.
Who else sees the data
The site runs on Amazon Web Services servers (USA) behind the Cloudflare network, which sees IP addresses and protects the site from attacks. Google sign-in is handled by Google. We share data with no one else, unless the law requires it.
How to delete
Your account has a "Delete account" button: it immediately deletes your email, password, name and tokens and ends all sign-ins. Your readings then remain nameless and unlinked to you — they can only be opened by a direct link. If you want them deleted too, or have another question about your data, write to us via "Feedback".
Children
The site is for entertainment and is not intended for children under 16.