Privacy Policy

Effective Date: March 22, 2026 · Last Updated: October 11, 2026

The short version: All sensor data is processed entirely on your device and immediately discarded, and your readings are saved only on your device. Data leaves your device only when you choose to: an AI interpretation sends the names and positions of your cards, and the feedback form sends what you write in it. On the website, display advertising on content pages is served by a third-party ad network (currently Adsterra), which operates under its own privacy policy and may set its own cookies. The iOS and Android apps show no ads. Paid subscription tiers remove the ads on the web.

Introduction

Entropic Tarot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our application handles information when you use our tarot reading service.

Information We Process

Device Sensor Data (Optional)

When you grant permission, the app temporarily accesses:

Microphone Audio — Ambient audio data is sampled to extract random noise patterns from electromagnetic fluctuations. No audio content is recorded, stored, analyzed for speech, or transmitted.
Camera Visual Data — The camera sensor captures thermal noise from individual pixels. No images or video are recorded, stored, or transmitted.
Touch and Mouse Interaction Timing — Precise timing and movement data from your touches or mouse provides microsecond-level jitter. No personally identifying information is derived.

All sensor data is immediately hashed using SHA-256 and discarded. The raw sensor data exists only in volatile memory for milliseconds.

Location Data (Optional)

If you choose to calculate your astrological ascendant, your geographic coordinates are used for the calculation. This data is processed entirely on your device and is never transmitted.

Locally Stored Data

Saved Readings — Stored in your device's local browser storage (localStorage). Never transmitted.
Preferences — Audio mute state and onboarding completion stored locally.

Feedback Form (Optional)

If you send feedback or a feature request, we store your message, the name and email address you enter (both optional), the time, and a shortened network address (the last segment of your IP address is removed, for example 203.0.113.0) to help us filter spam. We use this only to read and reply to your feedback. To have your submission deleted, contact us using the details below.

What We Do NOT Collect

The Entropic Tarot app itself does not collect or transmit:

No personal information (name, email, phone, address), except what you choose to send through the feedback form
No account or login data — there are no accounts
No first-party usage analytics or behavioral tracking
No first-party device fingerprinting
No crash reports or diagnostics sent to us
No first-party cookies for tracking purposes

Note: third-party display ads (see the Advertising section below) operate independently and may collect their own data under their own policies. Paid subscription tiers remove the third-party ads entirely.

Advertising

On the website, content pages (Features, Library, Roadmap, Saved Readings, and Feedback) display banner advertising served by a third-party ad network. The reading flow itself — entropy collection, card selection, shuffle, and reading display — does not contain advertising. The iOS and Android apps do not display any advertising.

The current ad network is Adsterra. Banners are loaded via an iframe served from highperformanceformat.com. The ad network may:

Set its own cookies and local storage
Collect IP address, user agent, referrer URL, and other standard HTTP request data
Use its own tracking technologies for ad delivery, frequency capping, and fraud prevention
Share data with its own advertising partners under its own policies

Adsterra's privacy practices are governed by Adsterra's Privacy Policy. We do not receive any individually identifying information from the ad network — only aggregate impression and revenue reporting.

Subscribers on paid tiers do not see third-party ads, and no third-party ad scripts are loaded on their sessions.

Third-Party Services

The optional AI interpretation feature sends your card reading data (card names and positions only — no personal data, no device identifiers) to Anthropic's Claude API for interpretation. Anthropic's data handling is governed by Anthropic's Privacy Policy.

The optional premium voice (ElevenLabs) sends interpretation text to ElevenLabs' API for synthesis. Their handling is governed by their own privacy policy.

Display advertising is provided by third parties as described in the Advertising section above.

Data Processing

Entropy Generation Pipeline

Collection — Sensor data sampled in real-time
Hashing — Immediately processed through SHA-256 cryptographic hash
Discarding — Raw sensor data destroyed after hashing
Generation — Hash seeds HMAC-DRBG random number generator
Shuffling — Fisher-Yates shuffle produces card ordering
Cleanup — Entropy seed cleared from memory after shuffle

Data Storage & Retention

Entropy Data — Discarded immediately after processing (never retained)
Saved Readings — Stored locally until you delete them
Session Data — Cleared when you close the application
Server Storage — None. No user data is ever stored on any server.

Your Controls

Deny all sensor permissions — the app works with touch-only entropy
Revoke permissions at any time via your device settings
Delete all saved readings from the Saved Readings page
Clear all app data via your browser/device storage settings

Children's Privacy

Entropic Tarot does not knowingly collect information from children under 13. The app does not require any personal information to function.

Data Subject Rights

Since we collect no personal data, most data subject rights (access, correction, deletion, portability) are not applicable. All data resides on your device under your control. You can delete it at any time.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. Material changes will be noted with an updated "Last Updated" date.

Contact

For privacy-related questions, please use the contact form and choose Privacy question. Messages sent through the contact or feedback forms are delivered by Formspree; they contain only what you choose to write (an email address is optional) and are used only to read and answer your message.

Compliance

This application is designed to comply with:

General Data Protection Regulation (GDPR)
California Consumer Privacy Act (CCPA)
Children's Online Privacy Protection Act (COPPA)
Apple App Store Privacy Guidelines
Google Play Developer Privacy Policy Requirements