Skip to content

Draft for legal review before launch

Privacy Policy

This draft privacy policy describes how The Magician collects, uses, and protects personal data. Replace the placeholders below before launch: [COMPANY LEGAL NAME], [COMPANY ADDRESS], [CONTACT EMAIL], [RETENTION PERIOD], and [JURISDICTION].

1. Who is responsible

The data controller for this service is [COMPANY LEGAL NAME], [COMPANY ADDRESS]. If you have questions about privacy or want to exercise your rights, contact us at [CONTACT EMAIL].

2. What we collect

  • Account details such as your email address, display name, and account role.
  • Tarot content you create with the service, including readings, chat messages, spread results, and stored IP address data attached to spread records.
  • Payment records and credit ledger entries needed to operate paid readings.
  • Essential technical data needed to keep you signed in and protect the service from abuse.

3. Why we use your data

We use your data to create and store readings, let you return to your account, process payments, provide customer support, protect the service, and comply with legal obligations.

4. AI processing

Reading questions and messages are sent to Google Gemini to generate tarot interpretations and follow-up responses. Do not include sensitive personal information that you would not want processed by an AI provider.

5. Payments and Stripe

Payments are processed by Stripe. We do not receive or store your full card details; Stripe handles card entry, payment authorization, and secure payment processing. You can read Stripe's privacy policy here: https://stripe.com/privacy.

6. Cookies

We currently use only strictly necessary cookies to run the service, including login/session cookies and cookies required for secure Stripe checkout. We do not currently use analytics or marketing cookies.

7. Retention

We keep personal data only as long as needed for the purposes above, unless the law requires a longer period. Financial records may be retained for legal, accounting, or tax reasons. Replace this placeholder with the final retention schedule: [RETENTION PERIOD].

8. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your data, and to object to certain processing. You can already use the self-service tools in your account page to download your data or delete your account.