Privacy

Signing in

Signing in is optional for tarot readings. Your birth chart and sending an Us invite need an account. If you sign in with Google, Google gives us your name, email address and profile picture. If you sign in with an email code, we only get the email address you type.

The sign-in code is emailed to you through Resend (Resend, Inc., United States), which delivers mail for us. Resend receives your email address and the message with the code, and keeps a delivery record for a limited time under its own data processing terms. It does not get your readings, your question or anything else from your account. The code works once, for 10 minutes. We send no newsletters or marketing mail.

An account can be signed in on up to two devices at once. To enforce that we keep, for each sign-in, an internal session id and when it was last used, but nothing about the device itself. Records of signed-out sessions are deleted after 30 days.

With an account we also note the country you first opened the app from, worked out from your connection by our hosting provider, and when you last opened it. We keep the two-letter country code only, not your IP address. We use it to see where members come from and to set regional prices. It is deleted with your account.

We keep those in a signed cookie in your browser so the app can show who you are. Your email address is also stored alongside your saved readings, as the label that says which readings are yours. Signing out removes the cookie; your readings stay until you delete them.

Your question

When you ask for a reading, your question is sent to our server so the reading can be written. It is used for that request and is not saved afterward.

When AI interpretation is switched on, your question and the cards you drew are also sent to Anthropic, which writes the reading text. Without it, the reading is assembled from our own card knowledge base and your question never leaves our server.

Please don't put anything in a question that you would not want handled this way, such as names, health details, or anything about another person that they haven't agreed to share.

Your readings

A reading record holds the question you asked, the cards that came up and when you drew them. While you are signed out we keep no history: your browser holds only the reading you just drew (under arcalumi.readings.v1), which cards you have collected, and the times you drew, to count the daily limit. None of it reaches us.

When you sign in, the reading you just drew is copied to your account and everything you draw afterward is saved there too. They are held on Supabase (Postgres) in Frankfurt, inside the EU, under your account id. On the free plan we keep your 10 most recent readings and delete older ones as new ones arrive. With a subscription we keep all of them. If you cancel, we keep them for 90 days in case you come back; after that, only the 10 most recent remain.

Each signed-in account is separate, so people sharing a device don't see each other's readings.

Daily free limit

Free readings are limited per day. Signed in, we count them against your account. Signed out, we count them against a scrambled form of your IP address: a one-way hash mixed with the date and a secret, so the same address looks different every day and can't be traced back or linked across days. We never store the address itself, and these counts are deleted after two days. Subscribers aren't counted.

Birth details

The Astrology page can read your birth chart. That only happens if you type your birth date, time and place in yourself. Nothing else in the app asks for them, and a tarot reading never does. The Astrology page needs you to be signed in, and they are stored with your account in Frankfurt so a new phone doesn't lose them.

Delete my birth details on the Astrology page removes them from both places at once. Deleting your account removes them with it.

To find your birthplace, the letters you type in the place box are sent from our server to Photon, a place-name search run by komoot in Germany on OpenStreetMap data. Only the search text goes, not your IP address, your birth date or your account, and we don't keep a log of what was searched.

Signed in, the Astrology page can write a reading of your chart. To do that we send the calculated placements (for example “Sun in Pisces, 12th house”) to our AI provider, Anthropic, not your birth date, time or place. The reading is saved with your birth details and deleted with them.

Ads

Not switched on yet. When it is, free readings will show one ad after your cards are turned and before the result. Shared reading links never show one, and subscribers never see ads.

Ads will be served by Google, which may set cookies in your browser to pick which ad to show and to count it. We do not hand Google your question, your cards, or your reading. The ad sits beside them, not inside them. What Google collects is described in how Google uses data from sites that use its services.

In the EU and UK we will ask before any ad cookie is set, and you can say no. Saying no means you still get your reading. Ads are never a wall in front of it.

What we don't do

No analytics and no tracking pixels of our own. Fonts and card images are served from this site rather than fetched from anyone else. We do not sell or share your information, and we do not use your readings for anything beyond showing them back to you. Not for training and not for targeting ads.

Deleting what's kept

Delete my readings on the Me page erases everything we hold for your account, and clears this browser at the same time. It cannot be undone and you don't have to ask us.

Signing out drops the session cookie but keeps your readings, so you can sign back in and find them. Clearing this site's data removes the browser copy only.

Your rights

You can ask us at any time what we hold about you, to correct it, to delete it, or to stop using it. Email us and we will answer within 30 days. Most of this you can also do yourself with the delete buttons above. If you live in the EU, you can also complain to your data protection authority.

Children

Arcalumi is not intended for children under 13, and subscriptions are for adults (see the Terms). We don't knowingly collect data from children under 13. If you're a parent or guardian and think your child has used Arcalumi, write to support@arcalumi.com and we'll delete their data.

Changes

If we add anything that collects data, this page changes first and the app says so before the change takes effect.

Contact

Questions about any of this: support@arcalumi.com. The rules for using Arcalumi, subscriptions and refunds are in the terms.