Privacy policy

Effective from 2026-11-02. Controller: , self-employed under an individual activity certificate, hello@arkana-tarot.com.

What stays in your browser

Readings, the journal, notes, settings, learning progress and your Arkana code are kept only in your browser's local storage. They aren't sent to us unless you ask for a full reading or share a reading link. We use no cookies and no advertising or tracking tools.

What we process on the server

• Daily limits. To run the free limits we count requests by a hash (SHA-256) of the IP address and date. We don't store the IP address itself, and the hash changes daily.
• Credits. We store the Arkana code, the credit balance, purchase times and the Stripe checkout session ID. No name or email is stored with the code.
• Readings. When you ask for a reading, the question and drawn cards are sent to Anthropic PBC (USA) to write it. We don't store them. Anthropic processes data under its commercial terms and data processing terms.
• Payments. Payment is handled by Stripe Payments Europe, Ltd., which processes your email and payment details as a separate controller; we only see the payment status.
• Hosting. The site is hosted by Netlify, Inc., which briefly processes server logs (such as IP addresses) for technical purposes.
• Original artwork. If you switch on the original 1909 card drawings, they load from Wikimedia Commons, so your browser contacts their servers.

Legal basis

We process data to perform the contract (credits, readings) and on the basis of legitimate interest (abuse prevention, limits).

Your rights

You can ask to access, correct or delete your data, restrict processing or object to it. Since no identity is tied to a code, include your Arkana code in the request. You can complain to the State Data Protection Inspectorate of Lithuania (www.vdai.lrv.lt) or your local authority.

Retention

Daily limit records are no longer used after one day. Credit records are kept while the credits are valid and for 12 months after for accounting.