Privacy policy

What Candlelit Tarot keeps, where, and how to erase it. Last updated 10 November 2026.

In short

The app needs no account, no email and no real name. The only email address we ever hold is one you choose to give us for the waitlist.
No ads, no tracking, no analytics cookies, and your data is never sold.
Luna only keeps a journal of your talks if you say yes. You can read, correct, export or erase all of it at any time.

The waitlist (this website)

If you leave your email address on this website, we keep that address, the date, and which page you joined from. Nothing else.
It is used for one email: to tell you Candlelit Tarot is open. It is never sold, shared or used for advertising.
That email has a link that deletes your address from the list straight away. If we have not written yet and you want to be removed, write to the contact address below.
To stop anyone flooding the list, we count sign-ups per network for a day. The network address is kept only as a one-way scrambled code, deleted after two days.
The list is stored in Cloudflare D1, like the rest of Candlelit Tarot. This website sets no cookies and has no ads or trackers.

The app

The rest of this page describes the Candlelit Tarot app, which opens soon.

How Candlelit Tarot knows it is you

On your first visit Candlelit Tarot gives your browser a random secret key in a cookie. Scripts cannot read it and other sites cannot send it. The server stores only a one-way scrambled version of the key (a SHA-256 hash), never the key itself. This is the only cookie, and it lasts two years. If you clear your cookies, Candlelit Tarot will not recognise you any more.

What is kept

Always: your choices (memory on or off, your age answer), your learning progress in the Library and the Journey, your Daily Magic cards and quests, your Moon Dust, and Luna's Collection. These say nothing about your life.
Only if you turn memory on: your conversations with Luna, your readings, the notes Luna asks to remember (each one only after you agree), and short searchable summaries of your talks so she can recall them later.
In a private session: nothing new is saved at all.
Counters: how many messages you and your network sent to Luna's AI today, so the daily allowance stays fair. Your network address is kept only as a one-way scrambled code, and these counters are deleted after two days.

Where it is kept, and who processes it

Candlelit Tarot runs on Cloudflare (Workers and the D1 database). Your data is stored there.
When you talk with Luna's AI, your message, the recent conversation, the cards on the table and (only with memory on) the notes and moments that matter for your question are sent to Cloudflare Workers AI, which runs the model that writes her reply.
Messages about suicide or self-harm are never sent to the AI (see Safety).

Your choices

See and export: Menu > Luna's Journal shows everything Luna remembers; its Privacy tab has "Export my journal", which gives you all of it as a file.
Correct: edit or delete any note Luna remembers, and delete any reading or conversation, in the journal.
Erase: in the same Privacy tab, "Forget everything" deletes your conversations, readings, notes, progress, Daily Magic and Collection. "Delete all my data" also deletes your identity and clears the cookie.
Turning memory off stops new journal entries straight away.

Children

Luna's AI conversation is only for adults (18 and over). Younger visitors can use the readings from Luna's book, the Library, the Journey and Daily Magic.

Contact

Questions or requests about your data: to be added before the public launch.