Tarot Lucky

Privacy Policy

Last Updated: 7/16/2026

1. Introduction

At Tarot Lucky, we respect your privacy and are committed to protecting your personal data. This privacy policy will inform you as to how we look after your personal data when you visit our website (regardless of where you visit it from) and tell you about your privacy rights and how the law protects you.

1. Important Information and Who We Are

Tarot Lucky is the controller and responsible for your personal data. This policy is designed to be compliant with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Data We Collect

We may collect, use, store and transfer different kinds of personal data about you which we have grouped together as follows:

  • Identity and Contact Data: Email address provided during registration.
  • Financial Data: We do not store your credit card information. All payments are securely processed by Stripe.
  • Usage Data: Information about how you use our website, products, and services (such as drawn cards and reading history).

3. How We Use Your Data

We will only use your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

  • To provide and maintain our Service, including generating AI readings based on your interactions.
  • To manage your account and subscription status.
  • To process transactions securely via our payment processor, Stripe.

4. AI Processing

To generate readings, the cards you draw and the questions you ask are processed by an external AI provider (Google Gemini). We do not use your personal contact information in these AI prompts, and your inputs are not used to train global AI models.

5. Your Legal Rights (GDPR & CCPA)

Under certain circumstances, you have rights under data protection laws in relation to your personal data, including the right to:

  • Request access to your personal data.
  • Request correction of your personal data.
  • Request erasure of your personal data (The Right to be Forgotten).
  • Object to processing of your personal data.

If you wish to exercise any of the rights set out above, please contact us at tarotlucky@proton.me.

6. Cookies and Tracking

We deeply respect your privacy. We do not use any marketing, advertising, or invasive tracking cookies (such as Google Analytics or Meta Pixel).

We only use "Strictly Necessary" functional cookies required for the website to operate. These include secure authentication cookies (to keep you logged in to your account) and secure payment session cookies (managed by Stripe to prevent fraud during checkout). Because these cookies are essential for the service to function, they do not require explicit consent under GDPR.