Privacy

The short version

Readings are free and mostly anonymous. Until you make an account, nothing you draw leaves your browser. When you do sign in, we keep the least we can get away with: an email address to know who you are, the readings you choose to save, and a credit balance. Your date, time and place of birth — if you choose to save them at all — are encrypted, and they are never sent to the AI.

There are no analytics, no tracking pixels, no advertising, and nothing is sold or shared for marketing. There is no third-party cookie on this site.

What stays in your browser

A reading you draw without an account is saved only in your own browser's local storage, under kt.readings. It never reaches the server. Clearing your browser data deletes it, and we have no copy — so if that's the only place a reading lives, it's genuinely gone.

Your question is part of that reading. It stays local too, right up until you save the reading to an account, at which point it travels with it. Asking for an AI interpretation also sends the question, since the interpretation is written from it.

What we store when you have an account

• Your email address, from whichever way you signed in, plus your name and avatar if Google or Discord supplied them, plus any display name you set yourself.
• Sign-in credentials from your provider — access, refresh and identity tokens. These are encrypted before they are written down.
• Readings you save: the deck, the spread, the cards drawn and their positions, any stone and bloom you chose, your question and your notes if you wrote them, and the AI interpretation if you asked for one.
• Credits: a ledger of every grant and spend, which is how a balance is calculated and how a refund is possible.
• Saved chart readings: the chart itself — signs, degrees, houses, aspects — and the written report. Deliberately not the birth details that produced it: no coordinates and no exact birth time are stored alongside a report.
• Profile settings: your reading preferences, your timezone, and whether you want a daily card. And your birth details, only if you saved them.

Birth details, specifically

Date, time and place of birth are the most identifying thing this site could hold, so they get separate treatment.

• You never have to save them. The birth chart is free and works fine if you type them in each time — saving exists only to spare you the retyping.
• When saved, they are encrypted (AES-256-GCM) before being written, as one opaque value. A copy of our database shows that you saved birth details and reveals nothing about what they are.
• They are never sent to the AI. A chart reading is written from the geometry — signs, degrees, aspects — and from whether the birth time was known. Not from your birthday, and not from where you were born.
• Looking up a birthplace never leaves our server. The city list ships with the site, so your birthplace is not sent to a geocoding service.
• Clear the date on your profile and save, and they are deleted — not flagged, not archived.

Honest limit: encryption here protects a copy of the database escaping — a leaked backup, an old snapshot, a file handed to the wrong person. It cannot protect against the server itself being compromised, because a running server necessarily holds the key. Anyone claiming otherwise about a site like this is overselling.

Who else sees any of it

As few people as the site can function with. Each of these receives only what its job needs:

• Google, Discord, or Resend — whichever you sign in with. They confirm it's you; Resend also delivers sign-in emails.
• Stripe handles payments. Card numbers never touch our server — we keep only Stripe's customer and subscription identifiers, so we know which account bought what.
• Anthropic writes the AI interpretations. For a tarot reading that means the cards, the spread, the deck, any stone and bloom, your question if you asked one, and the name you asked to be called if you set one — so the reading can address you by it. For a chart reading it means the chart's geometry, and never your birth details.

Nobody else. No analytics provider, no advertiser, no data broker.

Cookies

One, and it is the sign-in session — it's what keeps you logged in. There is no advertising or analytics cookie, which is why this site has no cookie banner to click away: there is nothing to consent to beyond the cookie that makes logging in work.

Deleting things

Individual readings can be deleted from your journal. Birth details can be cleared from your profile. For deleting your whole account and everything attached to it, write in — the tables are set to cascade, so removing the account removes the readings, reports, profile and ledger with it.

One exception worth naming: records of payments are kept, because payment records have to be.

Getting in touch

Questions about your data, or a deletion request: info@kitsunetarot.com

Not yet filled in — This page doesn't yet name who legally operates Kitsune Tarot — the data controller, in the language of UK and EU data law. Set NEXT_PUBLIC_SITE_OPERATOR before relying on it.