Privacy Policy

Information we use

• Reading content: your question or intention, selected cards, their positions and orientations, and generated readings. If you used earlier follow-up features, those questions and answers may also be present until the reading expires.
• Account and usage information: Free readings do not require an account. A random browser identifier, time zone, and daily usage counts are stored to manage the free allowance and prevent duplicate requests. Earlier signed-in usage may remain associated with its account identifier.
• Astrology inputs: birth dates, birth times, chosen birthplaces and their coordinates and time zones, plus the relationship context you select when comparing two charts.
• Communications: your email address and any information you send when contacting us. If you opt into updates, we keep your email address, signup date, consent version, and signup location (homepage or reading), plus a private unsubscribe token.
• Device and operational information: hosting and sign-in providers may process IP addresses, browser information, request times, and security or error logs to deliver and protect the service.

We use this information to generate responses, handle request retries, enforce daily allowances, resolve errors, and keep the service secure. Avoid entering sensitive information or identifying details about other people.

AI readings and Google Gemini

Readings are generated with Google Gemini AI for entertainment, reflection, and learning. Interpretations are subjective, may not reflect your circumstances, and can be incomplete or inaccurate. They are not professional advice. Your question, selected spread and cards, card orientations, and deck information are sent to Google to generate your reading. Expanded readings include additional insights and up to two follow-up answers. They become available after a purchase or membership unlock.

We do not include your account identifier, sign-in email, or name in the AI prompt unless you put that information into your question yourself. Tarot interpretations are not guaranteed predictions or a substitute for medical, legal, financial, or mental-health advice.

The site uses the paid Gemini API. Under Google’s paid-service terms, prompts and responses are not used to improve Google’s products. Google may retain data for abuse monitoring, security, and legal requirements under its own terms. Disabling optional interaction storage does not eliminate that separate retention. See Gemini API terms and Google’s abuse-monitoring policy.

Temporary readings and retention

This version has no permanent saved-reading library. Expanded readings include PDF downloads and requested PDF email delivery. Readings are shown on the page, with temporary browser storage to help restore the current session. This is not a permanent reading history.

Reading content is temporarily stored on our server so request retries can work. A free reading expires 24 hours after it is created; expanded readings are retained for 30 days. Expired reading records are deleted when the reading service next receives a reading request; deletion may happen later than 24 hours if the service is inactive. Expired readings cannot be used for further follow-ups.

Account identifiers, time zones, and daily usage counters are retained separately to manage the service until removed in response to a verified deletion request. Hosting logs, backups, and service-provider records may follow separate retention schedules; deleting a reading from our active database does not guarantee immediate deletion from those systems.

Optional email updates

Signing up for updates is optional and is not required for free readings or paid features. By submitting the signup form, you agree to occasional Tarot Learning Lab emails about new tools, learning resources, and special offers. We store the signup separately from reading records and do not send the subscriber list to Gemini. The site currently collects signups only; it does not send automated emails or confirmation messages, and signup addresses have not been verified by email.

We keep your signup until you unsubscribe or request deletion. Use the unsubscribe link shown after a new signup or included in future updates, or contact us from the address you signed up with. Unsubscribing through the site removes your address from the active updates list. If you contact us instead, we will process your removal request. Authorized site-owner downloads may contain your email address, signup date, consent information, and unsubscribe link so updates can be managed manually. We will use an up-to-date list before sending.

After a signup, your browser may remember your email address and unsubscribe token in local storage so you can manage that signup. Clearing site data removes this browser copy but does not remove the signup from our server. You can still unsubscribe using a future email link or by contacting us. Email delivery through Gmail or a future mailing service involves that provider; we will update this policy before connecting a new automated delivery service.

Numerology

The numerology tool calculates in your browser. Birth dates and names entered there are held in page memory, are not sent to our server or an external calculation service, and are not saved by the tool. Reloading or closing the page clears its results.

Membership

For membership, we associate your site sign-in identifier with Stripe customer and subscription identifiers, billing-period dates, membership status, and the readings expanded with your monthly allowance. These records let us restore access, track usage, and process cancellation. Stripe handles payment information. Joining does not subscribe you to marketing emails.

Astrology and other services

When you create a birth chart or relationship comparison, the birth date, birth time, birthplace coordinates, city, and time zone for each person are sent through our server to FreeAstroAPI for calculation. We do not send a name or email, and we do not store birth details or chart results in our database. The current chart or relationship comparison is held in page memory until the page closes or reloads. FreeAstroAPI’s Privacy Policy states that request payloads may be logged for debugging for 30 days, access logs may be retained for up to 90 days, and backups are purged within 30 days after deletion. These provider records are separate from our database. Only submit another person’s birth details if you have their permission. Your birth details are not sent to Gemini by the chart tool. The lunar page calculates its displayed phases and planetary positions in your browser without requesting your precise location. When you search for a city, the search text is sent through our server to FreeAstroAPI’s city-search service, under its Privacy Policy linked above. Successful search results may be cached in your browser for up to 24 hours to reduce repeat requests. A separate card-catalog service supplies public deck information; we do not send it your reading questions.

OpenAI’s Sites and sign-in services and Cloudflare hosting infrastructure help deliver the site. Their processing is subject to their applicable policies, including OpenAI’s Privacy Policy and Cloudflare’s Privacy Policy. Information may be processed in countries other than your own.

Browser storage, advertising, and sharing

We use an essential cookie containing a random identifier to track the free-reading allowance in your browser. It expires after 30 days without use and is not used for advertising. The allowance does not synchronize across devices. To let you resume after navigating or refreshing, we keep your current question, cards, and interpretation in this tab’s session storage for up to 24 hours. Beginning a new reading replaces the current session; this is not a saved-reading history. Closing the tab or clearing site data normally removes this session, although browser session-restore features may retain it. We save your age confirmation and acknowledgment of this Privacy Policy in local storage on your device so you do not need to repeat it each visit. Clearing site data removes that confirmation. The hosting or sign-in service may use cookies needed for access and security. You can remove or block cookies and browser storage in your browser settings, but doing so may prevent reading features from working or require you to confirm your age again. Clearing browser storage does not itself delete records already held by us or our providers. Acknowledging this Privacy Policy is not consent to advertising or other optional tracking.

We do not add advertising trackers, sell personal information, or share it for cross-context behavioral advertising. We use service providers to perform the functions described in this policy, not to target you with advertisements. The site does not change its essential operation in response to Do Not Track signals. We disclose information to service providers as described above and may disclose it when required by law or to protect the service.

Your choices and privacy requests

You can choose not to submit a reading, clear the site’s local storage, or contact us to request access, correction, or deletion of information associated with your account. Depending on where you live and which laws apply, you may also have rights to receive a copy of your information, object to or restrict certain processing, withdraw consent where processing relies on it, and complain to your local privacy regulator. We will respond as required by applicable law. You will not be penalized for exercising applicable privacy rights. We may need to verify your identity before fulfilling a request. Some information may need to be retained for security or legal obligations.

For privacy questions or requests, email tarotlearninglab@gmail.com. Tell us which tool you used and approximately when. For guest readings, an email address alone may not identify your records because readings are linked to a random browser identifier. We may need additional information to locate and verify the request; we will explain what is needed. Do not send passwords, API keys, or unnecessary sensitive information. If you contact us, we use your email and message to respond to your request.

Purchases

When checkout is enabled, Stripe processes one-time payments and recurring memberships. We do not collect or store your full payment-card details. Billing details and invoices can be managed through Stripe from the Membership page. When checkout is labeled as a sandbox test, no real payment is collected.

Adults only

Tarot Learning Lab is intended for adults aged 18 and over. We do not knowingly collect information from children. If you believe a child has submitted information, contact us so we can investigate and remove it.

Security and changes

We use access controls and encrypted connections to help protect information, but no online service can guarantee complete security. We will update this page and its effective date when our practices change. For material changes, we will provide a prominent notice on the site and obtain any consent required by applicable law. We update this explanation when new data-handling features are introduced.

Payments and PDF delivery

Stripe receives the selected product and checkout details; we do not send Stripe your question, selected cards, or interpretation. We store an order identifier, checkout session identifier, status, and your browser reader identifier to verify purchases. Expanded readings are retained for 30 days, and website order records for up to 90 days; cleanup occurs when the reading service is used. Downloads are generated in your browser. When you request an emailed PDF, we generate it on our server and send your email address and PDF contents to Resend for delivery. Emails come from readings@tarotlearninglab.com; replies go to tarotlearninglab@gmail.com. We use your checkout email to prefill the delivery field, which you can edit. PDF copies are eligible for deletion after 30 days; delivery records (recipient, timestamp, version, and provider message identifier) after 90 days. Cleanup runs when email delivery is used. Resend processes email and delivery data under its own privacy policy. Requesting a PDF does not subscribe you to marketing updates. New PDF emails include a private recovery link, valid during the reading’s 30-day access period. We store a hash of the link token and a per-reading access grant when it is opened in a new browser. The token is also kept privately with its email attachment for safe send retries. Anyone with the link can access that reading; keep it private. Expired recovery links and grants are removed when the recovery endpoint is used. Clearing your reader cookie removes browser access until you use a valid recovery link. Stripe may retain billing and transaction records under its own retention requirements. See Stripe’s Privacy Policy.