Privacy Policy
Last updated: August 2026
1. Who is responsible for your data
Lumenpath Technology Limited, based in Hong Kong, is the data controller for Tarosage. For any privacy question or request, contact support@tarosage.com.
2. Information We Collect
We collect your email address when you create an account. We also store your tarot reading history (questions and card interpretations) to provide your reading history feature. If you join a waitlist, we store the email you provide and which plan you were interested in. If you submit a review, we store its rating, text, optional display name and location, and your permission to publish it after moderation.
3. How We Use Your Information
Your email is used for account authentication and optional daily tarot guidance emails. Your reading history is used solely to display your past readings in your dashboard. We do not sell or rent your personal information, and we never share it with third parties for their own marketing. We only use trusted service providers — for hosting, email, payment processing, and generating your reading — strictly on our behalf and under confidentiality.
4. Data Storage, Security & International Transfers
All data is stored securely in Supabase with encryption at rest and in transit. Authentication is handled via Supabase Auth with industry-standard security practices. Because we and our service providers operate across regions, your data may be processed outside your country; we rely on appropriate safeguards for any such transfers.
5. Cookies, Analytics & Advertising
We use essential cookies for authentication (session management). We use Cloudflare Web Analytics for anonymous, privacy-friendly usage statistics — it does not use cookies or collect personal data. When we run advertising campaigns, we use the Meta (Facebook) Pixel to measure and improve our ads: it may set cookies and share limited event data — such as page views and when you request our free guide — with Meta for advertising measurement and optimisation. You can control ad tracking through your Meta ad preferences and your browser or device settings.
6. Your Rights (GDPR / UK GDPR / CCPA)
Depending on where you live, you have the right to access, correct, delete, export (portability), or object to the processing of your personal data, and to withdraw consent to marketing emails at any time. California residents have the right to know what we collect and to request deletion, and we do not sell personal information. To exercise any right, contact support@tarosage.com or use the account deletion option in your dashboard. We permanently remove account data within 30 days of a deletion request.
7. Contact
For any privacy-related inquiry, email support@tarosage.com.