Privacy Policy

Last updated: July 24, 2026

Privacy in plain language: Tarot Echoes uses your information to provide accounts, cloud sync, Premium access, billing, security, support, and basic website analytics. It does not sell your personal information, does not use your email for newsletters or promotional mail, and does not currently use Google Analytics for personalized advertising.

1. Scope of this policy

This Privacy Policy explains how Tarot Echoes collects, uses, stores, and shares information when you visit the website, create an account, save or synchronize readings, purchase Premium, manage billing, or contact support.

2. Information you provide

Account information: Email address, password-related authentication information handled by the account provider, display name, account identifier, and account-security information.
Saved reading information: When you save or synchronize supported content, records may include reading history, cards drawn, reading type, interpretations, favorites, reminders, dates, preferences, and text you chose to enter or save with a reading.
Billing information: When you purchase Premium, Stripe processes your payment details. Tarot Echoes receives limited billing records such as Stripe customer and subscription identifiers, plan, billing interval, subscription status, renewal or access dates, and payment-status updates. Tarot Echoes does not receive or store your complete payment-card number.
Support information: Information you submit through the contact form, such as your name, email address, subject, message, and any details you voluntarily include.

3. Information stored on your device

Tarot Echoes uses browser storage to keep supported settings and app information available on your device. This may include reading history, favorites, reminders, preferences, session information, and temporary interface state.

When you are signed in and cloud sync is active, supported reading history, favorites, reminders, settings, and account information may also be sent to and stored with the cloud account service so they can be available across devices.

4. Birth-chart and numerology information

Birth-chart and numerology calculations are designed to run primarily in your browser. Your numerology name and birth date are not intended to be stored as a permanent account profile.

Birthplace search sends the place text you enter to an online location service so matching coordinates and time-zone information can be returned. The astrology calculation then runs in the browser. If you choose to save a generated reading or result to history or favorites, the saved result you selected may be stored locally and, while signed in, synchronized with your account.

5. Technical and usage information

Tarot Echoes and its hosting, security, or analytics providers may automatically receive standard technical information when the site is used, including IP address, browser and device type, requested pages or files, date and time, referring page, approximate location, interaction information, error information, and security or server logs. This information is used to deliver the site, understand general usage, diagnose problems, prevent abuse, and protect accounts and services.

6. Google Analytics

Tarot Echoes uses Google Analytics 4 to understand general website traffic and engagement. Google Analytics may measure information such as page views, sessions, scroll activity, outbound-link clicks, referral or campaign source, device and browser characteristics, approximate geographic area, and other enabled website interactions.

Google Analytics uses first-party cookies or similar identifiers, including a cookie commonly named _ga, to distinguish browsers, users, and sessions. Google may process an IP address at collection time for service security and approximate geographic reporting. Google states that Google Analytics 4 does not log or store individual IP addresses.

In the current Tarot Echoes implementation, Google Signals and advertising-personalization signals are disabled. Tarot Echoes does not currently link Google Analytics to Google Ads or use Analytics data for remarketing or personalized advertising. Google processes Analytics information under Google’s own terms and privacy practices.

You can limit Analytics collection by blocking or clearing cookies, using browser privacy controls, or using Google’s Analytics opt-out browser add-on where supported. Blocking Analytics may reduce the accuracy of site-usage reports but should not prevent the core Tarot Echoes website from functioning.

7. How information is used

Information may be used to:

Create, authenticate, secure, and recover your account.
Display your profile and Premium status.
Synchronize supported history, favorites, reminders, and settings.
Provide Stripe Checkout, subscription management, renewal processing, and Premium access.
Respond to support, billing, privacy, and account requests.
Measure general traffic, engagement, referrals, and feature usage through Google Analytics.
Maintain, troubleshoot, improve, and secure Tarot Echoes.
Prevent fraud, misuse, unauthorized access, and payment abuse.
Comply with legal, accounting, tax, dispute, and recordkeeping obligations.

8. Service providers and information sharing

Tarot Echoes shares information only as needed to operate the service, process transactions, provide requested features, protect the service, or comply with law. Current service categories include:

Supabase: Account authentication, database storage, cloud sync, account records, Premium entitlement records, and server-side functions.
Stripe: Checkout, payment processing, subscription management, customer portal access, fraud prevention, and billing events.
Hostinger: Website hosting, file delivery, network operation, and related server or security logs.
Google Analytics: Website traffic, referral, device, approximate-location, and interaction measurement using cookies or similar identifiers. Google Signals and advertising-personalization signals are disabled in the current site tag.
Content-delivery and asset providers: The Supabase browser library and some site assets or traditional card images may load from external content-delivery or image services. These providers may receive standard request information such as IP address, browser details, and the requested file.
Location and time-zone services: Birthplace search sends the search text needed to return matching places, coordinates, and time-zone information.
Email and support providers: Contact-form messages may pass through hosting and email systems used to deliver and respond to support requests.

Tarot Echoes may also disclose information when reasonably necessary to comply with law, protect rights or safety, investigate fraud or abuse, enforce the Terms of Use, or respond to a valid legal request.

9. Payment privacy

Stripe collects and processes payment, billing, identity, fraud-prevention, device, and transaction information under Stripe’s own privacy practices. Tarot Echoes stores only the limited customer, subscription, plan, and status information needed to provide and manage Premium access.

10. Cookies, sessions, analytics, and browser storage

Tarot Echoes uses cookies or similar browser-storage technologies that are necessary for sign-in sessions, security, saved preferences, cloud sync, checkout returns, and normal site operation. It also uses Google Analytics first-party cookies or similar identifiers for general traffic and engagement measurement.

You may block or clear cookies and browser storage through your browser settings. Doing so can reduce Analytics measurement, sign you out, or remove device-only history and preferences. Depending on where you live, applicable law may require consent before non-essential analytics storage is enabled.

No third-party advertising system or promotional email list is intentionally enabled in the current version. Google Analytics is configured without Google Signals or advertising-personalization signals. If advertising, behavioral profiling, or materially different analytics tools are added later, this policy will be updated as required.

11. No sale of personal information

Tarot Echoes does not sell personal information. It does not share personal information for cross-context behavioral advertising and does not use account email addresses for newsletters or promotional mail.

12. Data retention

Account and synchronized content may be retained while your account remains active and as reasonably needed to provide the service.
Device-only information remains until you clear it, remove it through the site, reset the browser, or uninstall the browser or app environment.
Support messages may be retained as needed to respond, document the request, prevent abuse, and maintain business records.
Google Analytics event and user data may be retained according to the Analytics property settings and Google’s retention procedures. Aggregated reports may remain available for longer periods.
Billing, transaction, tax, dispute, fraud-prevention, and subscription records may be retained for legal, accounting, security, and operational requirements even after account deletion or cancellation.
Backups, logs, and records held by service providers may remain for a limited period under their retention and security procedures.

13. Your choices and privacy requests

You may use site controls to remove supported history or favorites, change your display name, sign out, manage billing, and cancel Premium. You may also clear local browser storage, block Analytics cookies, or use browser privacy tools to limit measurement.

To request access, correction, deletion, or another privacy action for your Tarot Echoes account, submit a request through the contact form using the email address connected to the account. Identity verification may be required before account data is disclosed or deleted.

Deleting an account or requesting data deletion does not automatically erase records that Tarot Echoes or its providers must retain for legal, accounting, fraud-prevention, payment-dispute, or security reasons. Cancel Premium separately through Manage Billing to stop future renewal charges.

14. Security

Tarot Echoes uses reasonable administrative and technical safeguards intended to protect account, cloud, and billing information. These include HTTPS, account authentication, restricted server-side secrets, database access controls, and third-party payment processing. No internet service or storage system can guarantee absolute security.

15. International processing

Tarot Echoes and its service providers may process information in the United States and other countries where they or their infrastructure operate. Privacy protections and legal requirements can differ between locations.

16. Children’s privacy

Tarot Echoes is not directed to children under 13, and it does not knowingly create accounts for or collect personal information from children under 13. If you believe a child has provided personal information, contact Tarot Echoes so the information can be reviewed and removed where appropriate. A person purchasing Premium must meet the age requirements stated in the Terms of Use.

17. Changes to this policy

This policy may be updated when Tarot Echoes changes its accounts, storage, billing, providers, features, or legal obligations. The revised date will appear at the top of the page. Material changes may also be announced on the site or through an account-related notice when appropriate.

18. Contact

Questions about privacy, cloud data, billing records, or account deletion can be submitted through the Tarot Echoes contact form.

Depending on where you live, privacy law may provide additional rights. Tarot Echoes will review valid requests in accordance with applicable law.