Privacy Policy

Operator & Contact Information

Operator of this site: stilltarot. For data-related matters, please email [email protected].

Information We Collect

After you submit a request and pass human verification, this site retains the following data, including logs of incomplete or rejected requests:

The question and optional background context you write.

The cards drawn, orientations (upright or reversed), and question category.

Timestamp of the request, full IP address, approximate country, network provider, and browser type.

A random visitor ID stored in your browser to recognize returning visits from the same browser; it is not a name or user account.

AI token usage, request status, and whether the reading was completed.

Requests that fail human verification are not saved to reading logs.

Purposes of Collection & Use

Data is used to generate readings, enforce rate limits, identify abuse, and analyze usage to improve card meanings, question categories, and site features. In the future, we may also introduce other on-site services, such as paid reports, based on visit history.

This site transmits, stores, and analyzes this data electronically. The operator may review request logs; logs including questions, context, and full IP addresses are retained long-term. Full IP addresses are kept only within our own server logs and are never sent to OpenAI or TypeSafe. We do not sell this data, nor do we make anyone's questions public.

Third-Party Recipients & Processing Locations

OpenAI: Receives the question, background context, and drawn cards to generate the reading. If you proceed to a three-card reading from a yes/no reading, it also receives the brief conclusion from the previous reading. Requests are configured with data retention disabled on our end, but OpenAI handles data in accordance with its own policies.

TypeSafe: Receives the question and background context to evaluate whether it is suitable for a tarot reading. If you proceed to a three-card reading from a yes/no reading, it may also receive the brief conclusion from the previous reading.

Cloudflare: Provides web hosting, database storage, human verification, and web analytics.

Google: Hosts the operator's spreadsheet, which holds a copy of request records (question, context, cards, country and network, browser type, visitor ID and usage; no IP addresses).

Data is transferred internationally to the server locations of OpenAI, Google, Cloudflare, and TypeSafe, where it is processed under their respective data policies.

Data Retention Period

Retained long-term until you request deletion or the site ceases operations.

Your Rights & How to Exercise Them

You may request to access, review, obtain a copy of, supplement or correct, cease collection, processing, or use of, or delete your data.

Please email [email protected] specifying the right you wish to exercise, along with the approximate time of use and a brief summary of your question to help locate your record. We may ask for information necessary to verify the specific record; please do not send identification documents or sensitive personal background upfront.

Your Choice to Withhold Data

You may choose not to submit a question or related details; if you do not provide the information required to generate a reading, the site cannot generate one. Background context is optional, and you can still use the service without it, or read public card meanings and guides directly.

What Not to Submit

Email addresses and Taiwan-format phone numbers in questions and background text are masked automatically before subsequent processing, storage, and transmission to OpenAI or TypeSafe; other phone formats are not, so please leave out contact details. Readings do not need names, phone numbers, addresses, ID numbers, or passwords. When referring to others, simply use terms like "my partner," "my manager," or "a family member." Please also avoid entering sensitive personal details regarding health or pregnancy. Private questions are never placed in URLs, sitemaps, or ad tracking.

Web Analytics & Browser Data

This site uses Cloudflare Web Analytics to monitor traffic without cookies or individual tracking.

This traffic analytics is separate from the reading logs mentioned above; reading logs still contain full IP addresses and random visitor IDs. Your current reading content exists only in your active browser tab; the visitor ID remains stored in your browser until you clear it.

Clearing browser data will remove the reading and visitor ID stored in that browser; it will not delete records already saved on our servers, nor will it delete files you downloaded separately.