Privacy Policy

Who we are

Controller: OneCardTarot.com (https://onecardtarot.com).
Contact: contact@onecardtarot.com

Scope

This Policy covers our website and tarot features (single-card draws, multi-card spreads, and AI-assisted content). It doesn’t cover third-party sites we link to.

Data we collect

1) Information you provide

We do not use contact forms and do not intentionally collect user-submitted personal data on the site.

2) Information collected automatically

• Usage & device data: pages viewed, clicks, approximate location (country/city), browser/OS, referrers.
• Cookies/local storage: used for analytics and advertising (see below).
• IP handling: IP addresses may be processed transiently by our hosting/CDN and by Google services for security, geolocation, and rate-limiting.

How we use data & legal bases

• Operate and improve the site and tarot features.
• Measure traffic and performance (analytics).
• Display advertising (AdSense) to keep the site free.
• Maintain security and prevent abuse.

Legal bases (EEA/UK):

• Legitimate interests: basic site operation and security.
• Consent: analytics and advertising cookies; ad personalization where required. We request consent via a cookie banner before setting non-essential cookies.

Google services we use

Google Analytics (GA4)

We use GA4 to understand aggregated usage (page views, user flows, general geography, devices). GA4 uses first-party cookies and similar technologies. Reports we view are aggregated; we do not use GA to identify individuals.

You can opt out via the Google Analytics Opt-out Add-on and control cookies via our banner or your browser settings. Learn more in the Google Privacy Policy and How Google uses information.

Google AdSense

We use Google AdSense to show ads. Google and its partners may use cookies or mobile identifiers to serve, personalize, and measure ads.

• EEA/UK: Until you give consent, we show non-personalized ads (contextual). If you consent, ads may be personalized based on your activity. You can change preferences at any time via our cookie banner.
• Elsewhere: Manage ad personalization at Google Ad Settings and via your device’s ad preferences.

More info: Google advertising technologies, Google cookies.

Consent Mode & CMP

In the EEA/UK we use a certified Consent Management Platform (CMP) with Google’s Consent Mode v2. Your choices in the banner determine whether analytics and advertising cookies are set and whether ads are personalized.

Cookies & similar technologies

We use necessary cookies for core functionality and optional cookies for analytics and ads. Where required by law, we obtain your consent before setting optional cookies.

• Analytics cookies (e.g., _ga, _ga_*) — measure traffic and performance.
• Advertising cookies (e.g., _gads, _gac_*) — deliver and measure ads; may support personalization if you consent.

Manage your preferences any time: Cookie Settings.

How we share data

We do not sell personal information. We share data only with service providers acting on our behalf (e.g., hosting/CDN) and with Google as our analytics and advertising provider. We may disclose information if required by law or to protect safety and rights.

International transfers

Data may be processed in countries outside your own. Where required, appropriate safeguards (such as Standard Contractual Clauses) are used by our providers.

Retention

• Analytics data: retained in GA4 according to our settings (typically 2–14 months) in aggregated form.
• Advertising cookies: persist per Google lifetimes; you can clear them or change preferences at any time.
• Server logs: short-term for security and diagnostics.

Your rights (GDPR/EEA, UK)

Depending on your location, you may have rights to access, correct, delete, or restrict processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise these rights, contact us at contact@onecardtarot.com.

You can also lodge a complaint with a supervisory authority. In Poland: the President of the Personal Data Protection Office (UODO).

California privacy (CPRA/CCPA)

California residents may request access, deletion, or correction of personal information, and may opt out of “sharing” for cross-context behavioral advertising. Use the cookie banner to disable advertising cookies, or email us at contact@onecardtarot.com. We do not sell personal information for money.

Children’s privacy

Our site is intended for users aged 13+ and is not directed to children. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us to delete it.

Do Not Track

Our site does not currently respond to “Do Not Track” signals. Use our cookie banner or your browser settings to control cookies.

Changes to this Policy

We may update this Policy from time to time. The “Last updated” date shows the latest version. Significant changes will be noted on this page.

Contact

Questions or privacy requests: contact@onecardtarot.com.