Privacy Policy

• Free readings and the daily card work without an account. We keep no name for you unless you give one.
• When you ask Sunaree a question, your words go to an AI provider to generate the answer. Sunaree is a character; the readings are written by AI.
• If you buy something, Stripe handles the payment. We never see your card number.
• If you give us an email address, it goes to our email provider (Brevo), and we say exactly what we will send you at the point you give it.
• We use Google Analytics and the Meta Pixel to understand how the site is used. Section 5 explains how to opt out.
• You can ask for a copy of your data, or have it deleted, at any time by emailing us.

Readings and chat (no account needed). The question you type, the cards drawn and the reply. To generate the reply, your question (and, for follow-ups, the earlier exchange) is sent to an AI provider, currently Anthropic for chat and OpenAI for readings, under contracts that prohibit them from training on your data. A rolling copy of your last few exchanges stays on your own device so Sunaree can follow a conversation. On our server we keep only what is needed to enforce daily limits: a hashed identifier and a count for the current day.

Sunaree's memory (optional). If you switch on “she remembers”, we store the names of the cards from your last three readings and their dates, tied to a random token on your device, so later readings can refer back. Switching it off deletes that record. We never store your questions for this feature.

Birth date (optional). If you give a birth date for a birth chart, Your Sky or a reading, we use it to work out your star sign, life-path number and planetary positions. It is stored only where the feature needs it: Your Sky keeps it against your membership; a one-off reading does not keep it.

Purchases. When you buy a question pack, a written report or a membership, Stripe collects your payment details directly. We receive a payment reference, the email address you gave Stripe, your country and the amount. We store the payment reference to unlock what you bought and, for written reports, the report text itself so it stays available to you.

Membership (The Circle). Your subscription status, the email on the subscription, your language and usage counters (questions asked today, follow-ups this month). The daily practices store what they need: The Ask keeps the intention you seal and the cards drawn toward it for 28 days; Your Sky keeps your birth date; Arcanum keeps your guesses, streak and any rivalries you create; Wordweave keeps your level and sparks on your device.

Emails you ask for. When you request a reading by email, the daily card, the free Monday forecast or a sign-in link, your email address and language go to Brevo, our email provider, with a record of what you asked for and when. The daily card asks you to confirm by clicking a link before anything else is sent. Every marketing email carries an unsubscribe link.

Push notifications (optional). If you enable them, we store the push subscription your browser gives us so we can send the daily card and streak reminders. Disabling notifications in your browser ends this.

Abandoned checkouts. If you start a purchase and leave, Stripe may email you a link to finish it, following the choice you made on the payment page. We do not send our own reminders.

Feedback and support. Emails you send us are kept as ordinary correspondence.

Transfers outside the UK and EU rely on the providers' standard contractual clauses and the UK addendum. We do not sell personal data, and we do not share it with anyone not listed here, except where the law requires it.

• Contract: delivering the readings, purchases and memberships you asked for.
• Consent: Sunaree's optional memory, push notifications and marketing emails.
• Legitimate interests: keeping the service secure and within its daily limits, preventing abuse, and understanding in aggregate how the site is used.

The site itself sets no advertising cookies. It uses your browser's local storage for things the service needs: your daily-limit counters, chat continuity, your membership or pack token, and your language.

We use Google Analytics 4 to understand how the site is used in aggregate and the Meta Pixel to measure our advertising. Both set their own cookies when you visit. We do not use them to identify you personally, and we strip sign-in and membership tokens from what they receive.

To opt out: install Google's Analytics opt-out browser add-on, adjust your Meta ad settings, or block third-party cookies in your browser. The site works fully without either.

You can ask us at any time to see the data we hold about you, correct it, delete it, stop marketing, restrict how we use it, or receive a copy in a portable form. Email us from the address you used with us and we will respond within one month. You can complain to the UK Information Commissioner (ico.org.uk) or your local EU data-protection authority. Residents of California and other US states with privacy laws have the same rights, and we do not sell personal information.

To do it yourself: unsubscribe links end emails, switching off Sunaree's memory deletes it, cancelling a membership ends its processing at the end of the period, and clearing browser storage removes everything stored on your device.

TarotCards.io is for adults. You must be 18 or over to buy anything or hold a membership. We do not knowingly collect data from anyone under 18; if you believe we have, email us and we will delete it.

Sunaree Ko is a fictional character. Readings, chat and reports are written by AI in her voice, for reflection and entertainment. They are not medical, legal, financial or psychological advice, and no reading predicts or promises an outcome. Please do not use the chat for emergencies.

We update this page when our processing changes, and members are told by email of anything material. Previous versions are available on request.

MBM Ventures LLC (Wyoming, USA), operator of TarotCards.io. Email [email protected].