Privacy Policy

The personal data controller is the Tarot World project. The project has no legal entity: it is run by its owner, a private individual. The owner’s name is not stated in this document. Send all questions about personal data to the address below; the messages are forwarded to the owner.

• Support:[email protected]
• Data questions:[email protected]

Below is everything that reaches us. We do not ask for date of birth, passport or payment data: the site has no payments in money.

• Account: name, email address, password hash (the password itself is not stored), role, registration date, email confirmation status, star balance, restrictions (a ban on publishing or commenting, if applied), dates of a deletion request.
• Consent: the version of the terms and policy you accepted at sign-up, and the date of consent.
• Profile: avatar, if you uploaded one. The photo is cropped to a 256×256 square in WebP, and photo metadata is removed.
• Blog articles: titles, excerpts, text in Russian and/or English, cover image (up to 1600 pixels wide, WebP, no metadata), tags you created, status (draft, published, hidden by a moderator), dates.
• Discussion: comments and threaded replies, comment ratings (like and dislike), article likes and bookmarks, star thank-yous, author follows.
• Reports: what you reported and why, the reason, the report text (up to 500 characters), the date. The moderation decision is recorded with the report.
• Spreads: the question, deck, spread template, the cards drawn, their position (upright or reversed) and whether they are open.
• Assistant: your messages and the oracle’s replies, the dialogue title (the first characters of your first question), ratings of replies and the reason for a rating if you gave one, message usage counters.
• Learning: course enrolments, completed steps, notes on steps, answers to lesson questions, completed courses and certificates. You choose whether a certificate is public and which name appears on it.
• Reviews: text, rating and moderation status. Once approved, a review is shown with your name.
• Contact form: email address, name (optional), message, interface language and date.
• Stars and access: star operations (amount, balance after the operation, type, comment), star requests (amount, comment, decision), access to decks, courses and oracles (purchased or granted by an administrator).
• Technical data: IP address, request time, path without parameters, response code, processing time and request identifier. These go to the server log. Links from emails are stored in the database only as hashes.
• Browser state: see the section “Cookies and local storage”.

Some data is visible to everyone, including search engines. The rest is visible only to you and to the site’s administrators.

• Public: the author’s name and avatar, the text of published articles, cover images, tags, publication date, reading time, view counter.
• Public on the author page: the number of their articles, the number of followers and the month of registration. The list of followers is not shown.
• Public in discussions: your comments with your name and date, the number of likes and dislikes under a comment, the number of likes and star thank-yous on an article. Who exactly gave a like or a thank-you is not shown.
• Public in reviews: approved reviews with your name. A deleted account is shown in reviews as a deleted user.
• Visible only to you: email address, password, star balance and history, purchases, spreads, dialogues with the assistant, notes, bookmarks, the list of your follows.
• Visible only to administrators: who filed a report, moderation decisions, account restrictions, contact-form messages, IP addresses in the server log. The author of an article or comment does not learn who reported it.

Published text can be copied by other people or services. Removing it from the site does not remove copies in other systems.

The table shows what each group of data is used for, the legal basis for processing it and how long it is kept. Details on retention are in “Retention periods”.

The assistant replies with the help of an external AI provider, DeepSeek. When you send a message, the service passes the provider your message text, the earlier replies in that dialogue and the context the dialogue is about: a card, a deck, a spread or a lesson. The service does not add your name or email address to the request. The reply comes back and is stored with us.

The provider generates the reply and, under its own rules, may keep the request. We do not control how long the provider keeps it, so please read its terms.

You give consent to this transfer at sign-up, with one checkbox that also covers the terms and the policy. You can delete a single dialogue in the assistant itself: it is removed together with its messages. You can withdraw consent to the transfer by writing to the data address (requires a decision: how consent is withdrawn).

Do not put passwords, card or document numbers, health information, addresses or other people’s data into messages to the assistant. The assistant is not meant for such topics.

The operator sets the provider and the connection address in the service settings. At present it is DeepSeek. If the provider changes, this policy will be updated, and the new transfer will need separate consent (requires a decision: how that consent is obtained).

Data is stored on the operator’s home server, which runs in Docker: a PostgreSQL database and folders with files. Only the operator has access to the server. Inside the site, administrators see the data for moderation, answering messages, granting stars and reviewing assistant replies.

• Passwords are stored as bcrypt hashes. Links from emails are stored only as hashes.
• Sign-in uses a cookie with the HttpOnly flag, so page scripts cannot read it.
• The site is served over a secure HTTPS connection. Traffic passes through Cloudflare.
• Requests are rate-limited, which protects sign-in, forms and view counting from guessing and manipulation.
• The server log records the method, path, response code and time. Request bodies, headers and cookies are not written to it.
• Account deletions are recorded in a deletion log without the address or the content.

Backups. A copy of the database is made every 6 hours and is checked by restoring it into a temporary database. Files (avatars, covers, the deletion log) are copied daily. The copies are encrypted with a password: one is kept on a second disk of the home server, the other in Google Drive. Google sees only encrypted data.

No system gives a full guarantee. If you notice signs of a break-in or a leak, tell us at the data address.

Service emails are sent from an address on the mail.tarot-world.app subdomain.

Notices do not contain your password, your email address or the text of a report. The name of the person who reported is included in the notice.

We do not sell data or pass it on for advertising. The site has no analytics or advertising services and no third-party trackers. Data is disclosed only when a public authority lawfully requires it, and only to the extent the law requires.

Some recipients process data outside the European Union: DeepSeek, Cloudflare and Google, and possibly Mailjet and Telegram. These services may have servers in countries where data protection rules differ from the ones you know. We choose these services deliberately, but the providers themselves determine where processing happens. If you do not want your messages to reach the AI provider, do not use the assistant.

Requires a decision: whether separate notes on transfers for each provider are needed, and how much detail to give.

• The account and everything you created on the site are kept while the account exists. An article you deleted disappears from the site at once; a comment you deleted is erased and a marker stays in its place. Copies in backups go away as the backups rotate.
• Backups: the database every 6 hours, files daily. Copies, including those on Google Drive, are kept for no longer than 6 months (requires a decision: rotation periods by day and by week).
• The server log (IP address, request paths, response codes) is kept for a limited time, approximately up to 30 days (requires a decision: the exact period).
• Article views: daily rows are kept for two days and then deleted. The view counter stays on the article.
• Links from emails: confirming and changing an address — 24 hours; password reset — 1 hour. After that the link stops working.
• Reports: open reports are kept until a moderation decision, closed ones for as long as moderation needs them (requires a decision: the period).
• The deletion log (account identifier, dates, number of deleted records, the administrator’s reason if there was one) is kept so that deletions can be applied again after a restore from a backup (requires a decision: the period).
• Star operations are kept so that the balance adds up. After the account is deleted they are not linked to you.

You delete the account in the cabinet: you enter your password, then confirm the request through the link in an email. Before that you can download your data as JSON. Once confirmed, the account waits 7 days before deletion. If you sign in with the correct password during that time, the deletion is cancelled. While an unfinished purchase or star request exists, deletion does not start: it has to be finished first.

After the 7 days, the following is deleted or made anonymous.

• Deleted: spreads, dialogues with the assistant and their messages, learning progress, notes, lesson answers, course enrolments, access to decks, courses and oracles, star requests, links from emails, your likes and bookmarks, comment ratings, follows of authors, the avatar and cover images.
• Your articles are deleted together with the comments under them. Open reports on those articles and comments are closed.
• Your comments on other people’s articles: the text is erased. If someone replied to the comment, a “comment deleted” marker stays.
• Star thank-yous you gave remain: they keep the article’s count, and their history in the star log is not linked to you.
• Reports you filed remain for moderation, but their text is erased.
• Reviews and contact-form messages remain, but the name and the email address are erased. A review is shown as a review by a deleted user.
• The email address and the name are replaced with technical values, so the address can be registered again. The password is replaced with a random one, and all sessions end.
• The star balance is set to zero and is not returned: stars are an internal currency with no monetary value. Star records remain without a link to you.

Articles that readers gave stars to are deleted together with the account. Stars given for them are not returned: they are a voluntary thank-you, not a payment.

Deleted data remains in backups until they rotate, for no longer than 6 months. If the service is restored from a backup, the deletion log applies the deletions again, so that a deleted account does not come back.

The browser’s local storage (localStorage) keeps what the interface needs: guest course progress and notes before sign-in, the state of the assistant window (whether it is open, the chosen oracle and dialogue), a note that the spread wizard introduction has been shown, and your choice in the cookie banner. Administrators also keep panel settings and editor drafts. Guest progress is moved to the account on sign-in; the rest is not sent to the server.

The cookie banner is informational: we use only essential cookies and local storage. Your choice (“Got it”) is kept in the browser for 12 months, and the banner is not shown again. The site has no analytics or advertising cookies and no third-party trackers.

• Access and export: you can download a copy of your data in JSON from the cabinet. The export includes your profile, spreads, assistant dialogues, learning, stars and purchases, articles, comments, ratings, bookmarks, follows, reviews, contact messages and the reports you filed.
• Correction: name, email address (with confirmation by email) and password are changed in the profile. You edit your articles yourself in the editor.
• Deletion: the account is deleted under the rules in “Account deletion”.
• Restriction and objection: you can ask us to restrict processing or object to it by writing to us.
• Withdrawing consent: see “Assistant and the AI provider” (requires a decision).
• Complaint: you can contact the competent authority for personal data protection in your country.

We answer requests within a reasonable time (requires a decision: a specific period). To answer, we may ask you to confirm that the request comes from you.

The service is intended for users over 16. We do not knowingly collect data from children under 16. If you learn that a child under 16 has registered, tell us at the data address: we will delete that account.

We update the policy when the way the service works changes. A new version is published on this page with a new date and version number; earlier versions are listed in the history at the bottom. We try to announce significant changes on the site or by email (requires a decision: notice period).

We do not ask for renewed consent: by continuing to use the service after a new version is published, you agree to it. If the transfer of data to the AI provider changes, that will need a separate decision (requires a decision).

Send questions about personal data, requests about your rights and complaints to the data address. General questions about the site go to support.

• Support:[email protected]
• Data questions:[email protected]