Privacy Policy

Last updated: January 2026.

What we collect

We collect a minimum amount of data to make this site work and to keep it free.

• An anonymous, signed cookie — used to enforce the daily two-rejection limit. The cookie contains a random ID with an HMAC signature; it does not contain personal information.
• Local storage — your reading and any saved preferences (theme, consent) are stored only in your browser.

AI-generated interpretations

When you request an AI interpretation, our server sends a prompt to OpenRouter, which routes it to the underlying model provider (currently NVIDIA Nemotron). The prompt contains only the nine card names and positions for your draw — no personal information from you. The response is returned to your browser and is not stored on our servers.

OpenRouter is a sub-processor for this purpose. Their privacy practices apply to the data they receive: see openrouter.ai/privacy.

Daily Tarot uses a single site-managed API key held on the server for all AI calls. We do not collect or store any user-supplied keys, and we do not proxy or forward your personal data to the AI provider.

Entertainment disclaimer

Daily Tarot provides fictional, AI-generated interpretations for entertainment and self-reflection only. It is not psychic, medical, legal, or financial advice, and it should not be used as the basis for any real-world decision. Tarot readings are a creative tradition; the outputs of this site are generated by a language model and have no empirical basis.

Analytics

We use Google Analytics 4 (anonymized IP) only after you accept cookies. You can reject analytics and the site will still work fully.

Advertising

We use Google AdSense to show ads. AdSense uses cookies to serve relevant ads. You can reject ad cookies via the consent banner. See Google's advertising policy.

Data retention

Server-side data (the daily-limit counter) is stored in Cloudflare KV keyed by your anonymous ID and resets daily. We do not retain personal data beyond this.

Your rights

You can clear your data at any time by clearing cookies and site data in your browser. Contact us via the address below to exercise GDPR/CCPA rights.

Contact

privacy@dailytarot.example.com