Privacy policy

Disclaimer Terms Privacy

The short version: we keep only what we need to run the service, we never sell your data, and there is no advertising or tracking here. The detail follows.

The data controller is Aster Tarot. Contact: support@astertarot.com.

What we store and why

• Account: your email, your name if you give one, and a securely hashed password (never the password itself). Basis: performance of our contract with you.
• Wallet: your token balance and transaction history. Basis: contract and our legal/accounting obligations.
• Your readings (the journal): the cards drawn, your question, and the reading. Basis: your consent, which you can withdraw by deleting entries or your account.
• Personalisation details, if you choose to add them: your full name and date of birth, used only to work out the numerology numbers we weave into a reading when you switch on "personalise". These are optional, you never have to provide them, and a reading works fine without them. Basis: your consent, withdrawn by clearing these fields in Settings. Every reading also lets you choose a private, general reading that uses none of your personal details.
• Preferences: your chosen theme, deck, reader, reversal setting, and your star sign if you view your daily stars. Basis: our legitimate interest in remembering your settings.

The daily stars email

If you switch on the daily stars email, we send you your horoscope each morning. This is optional and opt-in: it is off unless you turn it on in Settings, and you can turn it off again at any time, either in Settings or using the unsubscribe line in every email. Basis: your consent. This is separate from the occasional service emails we must send to run your account, such as confirming your address or resetting your password.

Sensitive information

Please do not enter sensitive personal details (about health, sex life, religion, or similar) into your question. Your question is sent to an AI language model to write the reading. If you choose to write something sensitive, you consent to it being processed this way to give you the reading.

Who we share it with

• An AI model provider receives the cards and your question to generate the reading. The provider may process this data in another country; where required, we put an appropriate data-transfer safeguard in place.
• A payment provider handles payments; we never see or store your card details.
• If you choose Sign in with Google, Google confirms your identity and passes us your verified email address; we do not receive your Google password.
• We do not sell your data or use advertising or tracking cookies. We use one essential cookie to keep you signed in, and your browser's local storage to remember your preferences (such as your theme). Both are strictly necessary to run the service, so no cookie banner is needed.

Your rights

Wherever you live, you can ask us for a copy of your data, ask us to correct or delete it, object to or restrict processing, and withdraw consent, by contacting us. We aim to respond within one month. If your region has a data-protection authority (for example in the EU, the UK, or California), you also have the right to complain to it.

Keeping and deleting data

We keep your data while your account is active. You can delete your account yourself at any time in Settings; we then remove your personal data within 30 days, except records we must keep for legal or accounting reasons. If a data breach affecting your rights occurs, we will act on it and notify the relevant data-protection authority, and you where required, without undue delay.

Last updated 17 July 2026. Part of the Aster small print, together with the terms and the disclaimer.