Last updated: 2026-09-12
This Privacy Policy explains how tarovie.com ("this site") collects, uses, discloses and processes the personal data of users who visit this site, register an account, and use its AI tarot reading service (together, "the Service").
This site is operated independently by an individual developer, who is the data controller under this Policy. By using the Service, the user confirms that they have read and understood this Policy.
In this Policy:
| Category | Purpose |
|---|---|
| Sign-in method (Google account or email address) | To create and verify the account |
| The unique identifier returned by Google | To link the user's Google account |
| Email address | Account sign-in and service notices |
| The name the user chooses | So the reading can address the user |
| Date of birth | To calculate the sun sign for sign-related readings |
| Gender (optional) | To personalise readings |
| Category | Purpose |
|---|---|
| User ID (a random identifier generated by this site) | To identify the account |
| Daily reading count, number of conversation turns | To meter usage and enforce the free and subscription rules |
| Subscription status, beta-code redemptions | To manage paid entitlements |
| Registration, sign-in, sign-out and deletion events with timestamps | Security auditing and abuse prevention |
| SHA-256 hash of the IP address | Security auditing (this site does not store raw IP addresses) |
| SHA-256 hash of the session token | To maintain the signed-in state |
This site does not store Inputs on its servers, including the original wording of a user's questions and their conversation with the AI reader. That content is held only in the user's own browser and remains under the user's control.
The sole exception: where a user opts in on the share page, this site stores only the Outputs generated by the Service. Even then, no text entered by the user is stored.
The reason for this design is that a tarot question may contain highly private information about health, relationships, religious belief or sex life. By not receiving such data at all, this site removes the possibility of storing or disclosing it.
This site uses the personal data it collects for the following purposes:
This site does not use personal data for advertising, and does not use it to train any model.
This site does not sell personal data. To provide the Service, it discloses only the necessary data to the following processors:
| Third party | Processing | Data involved |
|---|---|---|
| Google LLC | Sign-in verification | The Google sign-in information the user chooses to provide |
| Cloudflare, Inc. | Hosting and security | Access logs, including the IP hash |
| Beijing Volcano Engine Technology Co., Ltd. (Volcengine · Doubao model) | Generating readings | The user's Inputs are sent to its API for processing |
| Creem | Payment processing | The information necessary for payment (Creem acts as Merchant of Record and collects on our behalf) |
Regarding the AI provider: when a user converses with the AI reader, the Inputs are sent to that provider's API to generate the reading. This site has no control over how that provider handles the data and recommends that users review its privacy policy. This site stores no conversation content on its own servers.
Apart from the above, this site discloses personal data only where required by applicable law, regulation, court order or a lawful request from a competent authority, or where necessary to protect the legitimate interests of this site, its users or the public.
This site uses only the cookies strictly necessary to maintain the signed-in state:
Cookies may be blocked in browser settings, but the user will then be unable to sign in and use the Service.
| Category | Retention period |
|---|---|
| Account information | Until the user deletes the account |
| Usage records, entitlement records | Until the user deletes the account |
| Security audit logs | 12 months from creation, then deleted automatically |
| Session token hashes | Until the session expires |
| Conversation records in the user's browser | Managed by the user; this site can neither access nor delete them |
Longer periods apply only where required by law.
This site applies technical and organisational measures appropriate to the risk, including encryption in transit across the whole site (HTTPS), storing session tokens and IP addresses only as hashes, minimising account privileges, and an architecture under which Inputs are never stored.
The Service runs on Cloudflare's global network, so personal data may be transferred to and stored in countries outside the user's own country or region. This site applies safeguards appropriate to the risk for such transfers.
The AI provider used by the Service is located in the People's Republic of China. When a user converses with the AI reader, the Inputs are transmitted to servers in the People's Republic of China in order to generate the reading; this site stores no such content on its own servers. By using the Service, the user acknowledges and accepts such transfers. A user who does not accept them should stop using the Service.
This site provides the user with the following rights:
To exercise these rights, email support@tarovie.com. This site will respond within 30 days of receiving the request.
A user may also delete their account within the site (Settings → Delete account). On deletion, this site erases the account information, usage records, entitlement records and audit logs relating to that user. Conversation records held in the user's own browser must be cleared by the user.
The Service is not offered to anyone under the age of 18. A person under 18 must not register for or use the Service. Where this site discovers that a user is under 18, it will delete the account and the associated data immediately.
This site does not carry out solely automated decision-making producing legal or similarly significant effects, and does not carry out profiling. Outputs are provided for entertainment and self-reflection only and are not a basis for any decision.
This site may revise this Policy from time to time. The revised version will be published on this page and the "Last updated" date at the top will be amended. Where a change is significant, this site will notify users at their registered email address. Continued use of the Service after a revision takes effect constitutes acceptance of the revised Policy.
The data controller under this Policy is the individual operator of this site. There is no company entity, no support telephone line and no public office address.
For any data protection matter, email: support@tarovie.com
This site will respond within 30 days.