privacy & cookies

Draft — pending legal review before launch. Last updated: July 2026.

The short version: your readings stay on your device, we set no advertising or tracking cookies, and we only email you if you ask — and confirm — that we may.

who we are

philosophyoftarot.com is operated by Spotted Cat Studio, Luxembourg (the "controller" in GDPR terms). Contact: hello@philosophyoftarot.com.

your journal stays with you

Readings and journal entries you save are stored in your browser's local storage, on your device. They are never transmitted to us or anyone else. Clearing your browser data deletes them; the export button gives you a copy anytime. This storage is strictly necessary for the journal feature you invoke, which is why no consent banner is required for it.

cookies

We set no advertising, profiling, or third-party cookies. Site analytics, when enabled, are cookieless and aggregate (no personal identifiers, no cross-site tracking). Your light/midnight preference is stored locally on your device only.

email — only if you ask twice

If you enter your email for "your card of the month", we store it (unconfirmed) and send you one confirmation link — double opt-in. We never email an unconfirmed address, and every email carries an unsubscribe link that also deletes your address. Purpose: sending you the newsletter you requested (legal basis: consent, Art. 6(1)(a) GDPR — withdrawable anytime).

where data lives

Any personal data we hold (your email; later, optional account data) is stored with Supabase in Frankfurt, Germany (EU) and processed via serverless functions pinned to Frankfurt (Vercel). Data-processing agreements are in place with both providers. We do not transfer your personal data outside the EU.

your rights

You may request access, correction, deletion, or export of your data, and withdraw consent at any time: hello@philosophyoftarot.com. You may also lodge a complaint with the Luxembourg data protection authority (CNPD, cnpd.lu) or your local authority.

what we never do

We don't sell or share your data, we don't profile you, and readings are never linked to advertising. Readings are offered for reflection and entertainment — not medical, psychological, financial or legal advice.