Last updated: 2026. This page explains what is stored when you use Tarot Knows Everything, why, and how to have it removed.
What we collect
Your question and the reading. The question you type is sent to our server and forwarded to OpenAI to generate the interpretation. We do not store the text of your question or the reading on our servers after it is returned to your browser.
An anonymous account key. If you are not logged in, we set a first-party cookie holding a random identifier. It is how the site remembers your credit balance between page loads. It contains no personal information and is not shared with anyone.
Payment information. Card payments are handled entirely by Stripe. We never see or store your card number. We do store the email address and customer ID Stripe returns, so that a purchase can be matched to a credit balance.
Basic technical logs. The web server records IP addresses and request paths for security and abuse prevention, retained for a short period.
Why we collect it
- To deliver the reading you asked for (legal basis: performance of a contract).
- To keep an accurate credit balance and prevent abuse of the free daily allowance (legitimate interest).
- To meet tax and accounting obligations on payments (legal obligation).
Who else sees it
OpenAI processes the text of your question and the drawn cards to generate a reading. Stripe processes payments. Both are data processors acting on our instructions. We do not sell data, and we do not run advertising or cross-site tracking pixels.
Cookies
We use first-party cookies only: one for your anonymous account key, and one remembering a logged-in session if you have an account. No third-party advertising cookies are set.
How long we keep it
Credit ledgers are kept while an account is active, because a balance has to be auditable. Server logs are kept briefly and then discarded. Reading text is not retained.
Your rights
You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted. Write to support@tarotknowseverything.com and we will respond within 30 days. If you are in the EU or UK you also have the right to complain to your local data protection authority.
Children
This site is not directed at anyone under 18 and we do not knowingly collect data from children.
Changes
If this policy changes in a way that affects what is stored, the date at the top of this page changes with it.
