Privacy Policy
1. The short version
Britannia Tarot collects as little as it can. You can have a reading without giving us your name. Nothing here is sold to anyone, and there is no advertising.
One thing is worth saying plainly at the top: the questions you ask are the most personal thing this app holds. Section 4 says exactly what happens to them.
2. Reading without an account
You can use the app without registering. Your readings are then stored against an anonymous identifier held in a cookie-backed session. That identifier is not linked to you, and when your browser session ends it is gone — along with the readings attached to it.
That is deliberate rather than a limitation: nobody is asked to sign up before they have tried the thing. An account is what keeps a reading.
3. If you create an account
We store your display name, your email address and a hashed password (we never hold the password itself). If you had readings before registering, they are moved onto your account so you do not lose the reading that prompted you to sign up.
We use your email address to activate the account and to let you reset your password. Every optional email has an unsubscribe link.
4. Your questions
A question, the card drawn for it, and the reading you were given are stored together so that your journal works and so a later reading can refer back to an earlier one.
People ask this kind of app about their health, their relationships, their money and their families. We treat what you type accordingly:
- Your questions are never published, never shown to another user, and never used to advertise anything to you.
- When you ask for the longer reading, your question is sent to an external AI provider along with the card and its traditional meaning, because that is what writes the reading. It is sent without your name, your email address or your account identifier. The provider processes it to produce the reply; providers are outside the UK, so that text leaves the UK.
- The short answer you get immediately does not involve any of that. It is looked up on our own server, so a reading you do not expand is never sent anywhere.
- We do not read individual questions to see what people are asking. Where we look at questions at all, it is in aggregate — how long they are, how many are asked — to see whether the app is working.
If you would rather a question was not stored at all, delete the reading from your journal; it is removed along with everything sent about it.
5. Spoken questions
You can speak a question instead of typing it. There are two ways that can happen, and which one your device uses is your browser's decision, not ours.
Your browser transcribes it. Most browsers have speech recognition built in, and where one does, we use it and no recording is sent to us at all. Be aware that this is the browser's own feature and not every browser runs it on the device — some send the audio to their maker's speech service to do it. That is between you and your browser, under its own privacy policy, and we neither receive the audio nor know that it happened.
Or a recording is sent to us to transcribe. This is the fallback for browsers with no speech recognition of their own. The recording goes to our transcription provider, comes back as text, and is deleted in the same request — it is never stored on our servers, never written to your journal, and never attached to the reading. Only the text is kept.
Either way the text lands in the box as a draft you can correct, and nothing is asked of the cards until you press the button yourself.
The microphone is only ever accessed at the moment you press the button to use it.
6. Using the app
The Android and iOS apps work against the same server, and everything above applies to them too. Two things differ on a phone:
- There is no cookie. The app generates a random identifier the first time you open it and sends that with each request, which is what lets you have a reading without an account. It is not built from anything about your phone, it is not shared with anyone, and uninstalling the app destroys it along with anything attached to it.
- Signing in with Google or Apple happens on the device. Your provider hands the app a signed token, the app passes it to us, and we check it with the provider. We learn your email address and name; we never see your password.
The apps carry no advertising, ask for no permissions beyond the internet and the microphone you choose to use, and do not read your device's advertising identifier.
7. Cookies
Two kinds, and only one of them is up to you.
- Strictly necessary. A session cookie, which is what keeps you signed in and holds readings you have before registering. The app cannot work without it, so we do not ask permission for it.
- Analytics. One Google Analytics cookie, so we can count visits. It is off until you say otherwise: when you first arrive, nothing is stored and Google is told you have not consented. Choose "Allow all" and the cookie is set; choose "Necessary only" and it never is. The app is exactly the same either way.
You can change your mind at any time from the Cookies link in the footer of every page. We ask again once a year regardless.
There is no advertising and no cross-site tracking on this site.
8. Third parties
- The AI provider that writes the longer readings, as described in section 4.
- Google Analytics, if you allow it. Google processes the visit data on our behalf and is in the United States, so that data leaves the UK.
- Google or Apple, if you choose to sign in with them. They tell us your email address and name and nothing else.
Fonts and images are served from this site rather than from a content network, so ordinary browsing does not hand your IP address to anybody else.
9. How long we keep it
Readings and account data for as long as the account exists. Deleting your account deletes your readings and your questions with it. Readings from before you registered end with the browser session.
10. Your rights
You can ask for a copy of your data, ask us to correct it, or delete your account outright from your profile page. If you would rather ask a person, contact us.