Privacy Policy

Draft — to be reviewed by the site operator before launch. Items in square brackets, such as [OPERATOR LEGAL NAME], are placeholders that the operator must complete or confirm. This draft is not legal advice.

Effective date: [EFFECTIVE DATE]

This policy explains what personal information Horoscope & Tarot collects when you use horoscopeandtarot.com, why we collect it, who helps us process it and what choices you have. We have tried to keep it short and plain. If anything is unclear, please contact us.

Who we are

Horoscope & Tarot is operated by [OPERATOR LEGAL NAME] ("we", "us", "our"), [MAILING ADDRESS]. For the purposes of data protection law, we are the controller of the personal information described in this policy.

Information we collect

Information you give us

• Account details. Your email address and sign-in credentials, when you create an account.
• Preferences. The sun sign you choose, your timezone (used so your daily card and readings follow your local date) and your email preferences.
• Optional birth date. Only if you choose to save it, for example to keep your numerology or sign settings. You can use our numerology calculator without saving your birth date.
• Tarot questions. If you submit a question with a tarot reading, we receive the text of your question.
• Saved readings. Readings, cards and notes you choose to save to your account.
• Messages to us. Anything you send when you contact support.

Please don't include sensitive information, such as health details or other people's personal information, in tarot questions or notes.

Payment information

If you subscribe, payments are processed by Stripe. Your card details go directly to Stripe; we never see or store your full card number. We receive limited billing information from Stripe, such as your subscription status, plan, billing country, the last four digits of your card and your payment history.

Information collected automatically

• Essential cookies. A session cookie that keeps you signed in and protects your account. The site doesn't work properly without it.
• Guest tarot token. If you draw a daily card without signing in, we store a first-party token in your browser so we can show you the same card if you return that day. It is not used for advertising.
• Analytics, only with your consent. If you agree, we use analytics to understand how the site is used, such as which pages are visited. Analytics cookies are not set unless you opt in, and you can change your choice at any time via [COOKIE SETTINGS LINK].
• Technical logs. Like most websites, our servers record basic technical information, such as IP address, browser type and the time of a request, to keep the site secure and working.

How we use your information

We use personal information to:

• Provide the site and your account, including your daily card, readings and saved items.
• Process subscriptions and send receipts and billing notices.
• Send the emails you have signed up for, and essential service messages.
• Generate interpretations for tarot questions you submit.
• Answer your messages and provide support.
• Keep the site secure, prevent abuse and fix problems.
• Understand and improve the site, where you have agreed to analytics.
• Meet our legal obligations, such as keeping tax and accounting records.

Where data protection law requires a legal basis, we rely on: performing our contract with you (providing your account and subscription); our legitimate interests (security, fraud prevention and basic service improvement); your consent (analytics and optional marketing emails); and legal obligation (billing records).

We do not sell your personal information, and we do not use it for targeted advertising.

Who processes information for us

We share personal information only with service providers who help us run the site, and only what they need:

• Stripe processes payments and manages subscriptions and the billing portal.
• Mailgun delivers our emails, acting as our processor.
• [AI PROVIDER NAME] processes the text of tarot questions you submit, together with the cards drawn, to help generate an interpretation. [OPERATOR TO CONFIRM: the provider's data retention period and whether submitted content may be used for model training.]
• [HOSTING PROVIDER] hosts the site and its database.
• [ANALYTICS PROVIDER], only if you consent to analytics.

We may also disclose information if required by law, to protect the rights and safety of our users or others, or as part of a sale or reorganization of the business, in which case this policy would continue to apply to your information.

International transfers

Our service providers may process information in the United States and other countries. Where the law requires it, we rely on appropriate safeguards for these transfers, such as standard contractual clauses. [OPERATOR TO CONFIRM.]

How long we keep information

• Account information, preferences and saved readings: for as long as your account is open. When you delete your account, we delete or anonymize this information within [30] days, apart from the exceptions below.
• Tarot questions: stored with the reading if you save it; otherwise kept for [RETENTION PERIOD] for troubleshooting and abuse prevention, then deleted.
• Billing records: kept for as long as tax and accounting law requires, even after your account is closed. [OPERATOR TO CONFIRM PERIOD.]
• Support messages: for [RETENTION PERIOD] after the conversation ends.
• Technical logs: for [RETENTION PERIOD].
• Guest tarot token: stays in your browser for [TOKEN LIFETIME] unless you clear it sooner.

Your choices and rights

You can update your sign, timezone, birth date and email preferences in your account settings, and remove a saved birth date at any time. Every marketing email includes an unsubscribe link.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict some processing, and to withdraw consent. To make a request, email [CONTACT EMAIL] from the address linked to your account. We may need to verify your identity before acting. We will not treat you differently for exercising your rights.

If you have a subscription, please cancel it through Account → Billing before deleting your account. Some billing records must be kept even after deletion, as described above.

If you have a concern we haven't resolved, you may have the right to complain to your local data protection authority.

Security

We use reasonable technical and organizational measures to protect your information, including encrypted connections. No system is perfectly secure, so we can't guarantee absolute security, but we take it seriously and will notify you of a breach where the law requires.

Children

Horoscope & Tarot is not directed to children under 16, and we don't knowingly collect personal information from them. If you believe a child under 16 has given us information, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will let you know by email or with a notice on the site before they take effect. The effective date at the top shows when it was last updated.

Contact

[OPERATOR LEGAL NAME]
[MAILING ADDRESS]
Email: [CONTACT EMAIL]

This policy is governed by the laws of [JURISDICTION / GOVERNING LAW], without limiting any rights you have under the data protection laws of the place where you live.