Privacy Policy

Last updated: October 31, 2026

This Privacy Policy explains what information DailyTarotSpin.com (the "Site"), operated by Brand Exchange LLC ("we," "us"), collects, how we use it, and the choices you have. We do not sell your personal information.

Information you give us

• Account details: your email address, display name, and password (stored only as a secure one-way hash; we can never see it).
• Optional profile details: your sun sign, if you choose to add it.
• Your questions and readings: any question you type before a spin, the cards drawn, and the reading we generate, which are saved to your reading journal.
• Messages: anything you send us by email.

Payment information

Payments are handled by Stripe. Your card details go directly to Stripe and are never stored on our servers. We receive limited information from Stripe, such as the last four digits of your card, the amount, and whether a payment succeeded, so we can add credits and keep records. Stripe's use of your information is described in Stripe's Privacy Policy.

Information collected automatically

• Usage and device data: pages visited, referring site, campaign tags, browser and device type, approximate time zone, and IP address.
• Cookies: we use a sign-in cookie to keep you signed in, and first-party analytics cookies to understand visits. If enabled, we also use Google Analytics and Microsoft Clarity, which set their own cookies and collect usage data (Clarity may record how pages are used, such as clicks and scrolling). You can block or delete cookies in your browser; the Site will still work, but you will need to sign in again.
• Security checks: sign-up and sign-in forms use Cloudflare Turnstile to block bots, which processes limited technical data about your browser.
• Device identifier: we store a random identifier in your browser (a cookie and local storage) and record it, with your IP address, when a free reading is claimed. We use these only to prevent fraud and abuse of free offers, such as one person claiming many free readings.

How we use information

• To create and run your account, process purchases, and provide spins, readings, and keepsakes.
• To send account emails such as confirmations, password resets, receipts, and important notices.
• To understand and improve the Site, prevent fraud and abuse, and keep the Site secure.
• To comply with legal obligations and enforce our Terms.

We will only send marketing emails if you have agreed to receive them, and every marketing email includes a way to unsubscribe.

AI-generated readings

To write your interpretation, we send your three cards and, if you provided them, your question, first name, and sun sign to our AI provider, Anthropic, which processes them to generate the reading and returns it to us. We do not send your email address or payment details. Please avoid including sensitive personal information in your questions.

Who we share information with

We share information only with service providers that help us run the Site, under agreements that limit their use of it: our web and email host, Stripe (payments), Anthropic (reading generation), Cloudflare (security and content delivery), and, if enabled, Google Analytics and Microsoft Clarity (analytics). We may also disclose information if required by law, to protect our rights or users' safety, or as part of a sale or transfer of our business.

How long we keep information

We keep your account and reading journal for as long as your account is open. When you close your account, we delete or anonymize your personal information within 90 days, except for records we must keep for tax, accounting, fraud-prevention, or legal reasons (such as payment records), which we keep only as long as required.

Your choices and rights

You can update your name and sun sign on your Account page. To get a copy of your information, correct it, or delete your account and data, email [email protected]. Depending on where you live (for example California, or the EU and UK), you may have additional rights to access, correct, delete, or restrict use of your personal information and to not be discriminated against for using them. We will respond within the time the law requires. We do not sell or "share" personal information for cross-context behavioral advertising.

Security

We use industry-standard safeguards, including encrypted connections (HTTPS), hashed passwords, and encrypted storage of sensitive settings. No method of transmission or storage is completely secure, but we work to protect your information.

Children

The Site is intended for adults 18 and older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, please contact us and we will delete it.

Where information is processed

We are based in the United States, and your information is stored and processed in the United States and in other countries where our service providers operate.

Changes to this policy

We may update this Privacy Policy. If we make material changes, we will post the new version here with a new "last updated" date and, where appropriate, notify you by email.

Contact us