Privacy Policy

Midnight Tarot is an independently operated website offering AI-assisted tarot readings for reflection and entertainment. In this policy, “we,” “our,” and “the service” refer to Midnight Tarot.

When you use the service, we may process the question and optional context you provide, the spread and cards you select, the reading and follow-up questions generated from them, your chosen language, timestamps, and an anonymous browser credential used to keep your readings connected to the same browser.

We also record limited product events such as whether a reading or follow-up was started or completed. These events do not contain your question, context, card names, or reading text.

Your question, optional context, selected cards, and the instructions required to create a reading are sent to our AI provider, DeepSeek. This processing is necessary to generate the reading you request. Do not enter information that you do not want processed by an AI service, including sensitive identifying, medical, financial, or legal details.

Reading records, follow-ups, and limited analytics are stored with Supabase. The website may be hosted by a cloud hosting provider. These providers process information only as needed to operate, secure, and maintain the service.

Your browser also stores a private archive, preferences, session progress, and the anonymous credential that connects this browser to cloud records. Clearing browser storage or switching browsers can remove local history.

We do not sell personal information. A reading is accessible to anyone who receives its unique share link. Share links are designed to be difficult to guess and are not intended for search-engine indexing, but you should only share them with people you trust.

We keep cloud reading and follow-up records while they are needed to provide the archive, sharing, abuse prevention, and service operations. Removing a reading through the available deletion controls requests removal of its associated cloud record. Some security records may be retained where required for legal compliance.

You may avoid providing optional context, delete readings from your archive, clear local browser data, and ask us to access, correct, or delete information associated with your browser credential where applicable. Legal rights vary by location and may include objection, restriction, portability, or a complaint to a data-protection authority.

We use access controls, server-side credentials, and rate limits. No online service can guarantee absolute security. Midnight Tarot is not directed to children under 13.

Questions or privacy requests can be sent to the support address published on our Support page.