Privacy Policy

Last updated: February 21, 2026

Starlight AI Tarot respects your privacy. This policy explains how we collect, use, disclose, and protect personal data when you use the Service; by using the Service, you acknowledge this policy.

Controller Information

The data controller is Starlight AI Tarot, Level 3, Core C, Cyberport 3, 100 Cyberport Road, Hong Kong, Hong Kong SAR.

Eligibility

The Service is intended only for individuals aged 18 or older, and we do not knowingly offer it to minors.

Personal Data We Collect

We collect only what is needed to operate the Service: account email for login, authentication/session state, usage and technical logs (such as IP, device/browser metadata, timestamps, and error/security diagnostics), AI prompts/questions/context, and cookie/local storage consent and preference settings.

Data We Do Not Require

We do not require first name, last name, phone number, or location data for core features.

How We Use Data and Legal Bases

We use data for account management, authentication, AI tarot reading delivery, security and troubleshooting, support/legal responses, and legal compliance. Where GDPR applies, legal bases include contract, legitimate interests, legal obligation, and consent where required.

Cookies and Local Storage

We use limited essential authentication/session cookies and local storage/cookies for consent and preferences (such as language). This policy does not state advertising or remarketing tracking use.

Third-Party Processors

We rely on trusted processors: Supabase for authentication and account/session infrastructure, and Google Gemini / Google Generative AI for processing prompts and context to generate tarot readings.

Sharing, Transfers, and Retention

We disclose data only when necessary to processors, for legal obligations, security protection, or business transfer scenarios with safeguards. Data may be processed internationally with appropriate safeguards and retained only as long as needed for policy purposes and legal requirements.

Your Rights

Depending on applicable law, you may have rights to access, correction, deletion, restriction, objection, portability, and consent withdrawal. If you are in the EEA/UK, you may lodge a complaint with your local data protection authority.

CCPA Statement and Language

We do not sell or share personal information for cross-context behavioral advertising. California residents may submit a Do Not Sell or Share My Personal Information request. If versions conflict, the English version prevails.

Contact Us

If you have any questions about this Privacy Policy, You can contact us:

Email: contact@starlightaitarot.com