Your privacy is not a feature — it is the foundation of what we do. As a tarot reading service, Tarot Mania holds itself to the highest standards of data ethics. This policy explains what we collect, why, and how you can control it.
What We Collect
We collect your Google account identifier (email address and profile name) for authentication. We store your account details, credit balance, and payment history associated with your account. Reading content is stored only in your browser's local storage — it is never sent to or stored on our servers.
How We Use Your Data
Your credit balance and account data are stored securely on our servers. We do not use your readings to train AI models. We do not sell, share, or analyse your reading content for any commercial purpose.
Data Encryption
Account data and payment records are encrypted at rest using AES-256. Transmission uses TLS 1.3.
Data Retention
We retain your account data for as long as your account is active. You may delete your account and all associated data at any time from your account settings. Deletion is permanent and irreversible. Accounts that have had no login activity for 12 consecutive months are classified as dormant. Dormant accounts are automatically and permanently deleted, including all account metadata, payment records, and any unused purchased session credits. Reading content is stored only in your browser's local storage and is not held on our servers. To prevent your account from becoming dormant, you must log in at least once every 12 months. To prevent abuse of the free introductory session, we retain a one-way cryptographic fingerprint (SHA-256 hash) of your email address for 30 days after deletion. This fingerprint cannot be reversed to recover your address and is used for no other purpose. After 30 days it is automatically deleted.
Third-Party Services
We use Google OAuth and Bastyon for authentication. AI interpretation of your tarot spreads is powered by Google Gemini — your spread content is transmitted to Google’s Gemini API for processing and is not retained by Google after the response is returned. We do not share your account identity or payment data with any third party. Please refer to Google’s Privacy Policy for details on how Gemini API data is handled.
Your Rights
You have the right to access, correct, export, and delete all data we hold about you. To exercise these rights, contact us at {contactEmail} or use the Account & Data controls on your Dashboard.
Contact
Questions about this policy? Reach us at {contactEmail}. We respond to all privacy enquiries within 72 hours.