Privacy Policy

• Sign-up: username, password (stored with one-way encryption), nickname
• Using the Service: your question, chosen category and spread, drawn cards, journal notes and “Spot on / Partly / Missed” marks, today's card, settings
• Without an account: a random browser identifier (cookie taro_guest), readings done in that browser, display settings (cookie)
• PRO email: the recipient email address and a send log
• Share links: if you turn on a share link, anyone with it can see that reading's cards and standard reading. Your question, notes and AI reading are not shown, and you can turn the link off any time.
• Automatically: server and Cloudflare access logs such as access time (we don't store IP addresses in the Service database)

We don't collect national ID numbers, phone numbers or payment details. Please don't write sensitive personal information in your questions.

Only to provide readings, keep your history and stats, keep you logged in, prevent abuse, and answer inquiries. The Operator doesn't use your information for advertising or marketing. Ads shown on the Service are served by Google as described under “Ads and behavioral data” below.

• Account and reading history: deleted immediately when you delete your account (MY → Delete account)
• Readings without an account: deleted automatically after 30 days
• Login sessions: 30 days, or until you log out
• You can delete any single reading from its result screen.

Deleted information can't be recovered. Copies left in server backups are removed as backups rotate.

We don't give your personal information to other people or companies, except when required by law.

• Cloudflare, Inc. (USA) — delivery and security (HTTPS, blocking). Your requests pass through Cloudflare's network while you use the Service.
• The Operator's server (Republic of Korea) — the Service and its database run in South Korea.

Information sent abroad travels over encrypted connections (HTTPS) at the time you use the Service, and is kept and deleted under each provider's policy.

Visitors who aren't logged in and regular members see Google AdSense ads below results, in the card meanings and on share link pages. We don't put ads on the shuffle and pick screens or the login and MY screens, and PRO members don't see ads.

• What's collected: visits to pages with ads, ad views and clicks, browser and device information
• How: Google LLC (USA) collects it automatically with ad cookies and similar technologies. It isn't stored in the Holy Tarot database, and we don't send your questions, reading history or username to Google.
• Why: to show ads, tailor them to your interests, measure them and prevent invalid clicks
• How long: under Google's Privacy Policy (policies.google.com/privacy)
• How to opt out: turn off personalized ads at My Ad Center (myadcenter.google.com), or block third-party cookies in your browser. You'll still see ads, but they won't be tailored to you. Visitors in the EEA, UK and Switzerland are asked for consent first.

You can view, correct and delete your information at any time. Delete readings from their result screens, and delete your account right away under MY → Delete account. For anything else, contact us below.

We use cookies only to keep you logged in (taro_session), to tell whose readings are whose without an account (taro_guest), for display settings (taro_prefs) and your language (taro_lang). On pages with ads, Google uses ad cookies (see “Ads and behavioral data”). Clearing cookies logs you out, and readings done without an account can no longer be opened.

All connections use HTTPS, and passwords are stored with one-way bcrypt hashing. The admin screens are locked behind an extra access control (Cloudflare Access).

Children under 14 should not sign up. If we find such an account, we delete it.

Officer: 송여진 · Contact: cyberx83@naver.com

This English version is provided for convenience. If it differs from the Korean version, the Korean version prevails.