Privacy Policy
How we handle your data
1. Information We Collect
- Account information: your registration email (used as the login identifier) and password. Passwords are stored only as one-way hashes (scrypt) and cannot be restored to plaintext.
- Verification codes: stored only as short-lived hashes and expire after 5 minutes.
- Reading content: your tarot questions and reading results are stored by default only in your browser's local storage (localStorage) and are not uploaded to our servers.
- Character profiles: if you are logged in and character-library sync is enabled, character data (names, settings, relationship notes, etc.) is stored on our servers solely for cross-device synchronization and is accessible only by your own account.
- Avatars: avatar images you upload are stored on our servers.
- Usage statistics: AI call counts and usage (model, token counts, cost estimates) used for quota management; these do not include the content of your questions.
2. AI Processing & Third Parties
AI readings on this site are generated via the DeepSeek API. To generate a reading, your question and relevant character data are sent to DeepSeek for processing. Other than this, we do not use any analytics tools, advertising SDKs, or third-party trackers; your data is not sold or used for advertising.
Payments are processed by Stripe: we do not handle or store your Alipay, WeChat Pay, or bank card details. Stripe may collect the information necessary to complete payments (such as email address and transaction records), subject to Stripe's Privacy Policy.
3. Local Storage
We use localStorage in your browser to save login credentials, interface preferences, and reading records. You may clear this data at any time through your browser settings (reading records cannot be recovered once cleared).
4. Account Management & Data Deletion
- You may change your password on the Settings page (after which logins on all other devices become invalid).
- You may delete your character data and local reading records yourself.
- You may request account deletion on the Settings page (it takes effect immediately with a 5-day cooling-off period, during which you may cancel by logging in; after the period expires, the account and all associated data will be permanently deleted).
- Within 14 days after account deletion, the same email address cannot be used to register again.
- For data export, contact us at 2642449051@qq.com; we will process your request within 15 business days after identity verification.
5. Data Security
The entire site enforces HTTPS-encrypted transmission, passwords are stored as one-way hashes, and data is collected on a minimum-necessary basis. However, please understand that no Internet transmission can be guaranteed to be absolutely secure.
6. Minors
This Service is not intended for users under 18 years of age. If we discover that a minor's data has been collected without guardian consent, it will be deleted.
7. Policy Changes
If this policy is updated, the updated version will be published on this page with the date below; major changes will be announced in the Service.
Last updated: 2026-10-09