Privacy Policy
Last updated: August 21, 2026.
This policy explains how Mystic Mirror Tarot handles information when you browse the site, request an AI reading, claim a free trial, make a purchase, or contact us. For privacy questions or requests, email [email protected].
1. Information processed
AI readings: when you request a reading, your question, spread type, selected cards, and Secret Key are sent to our backend so it can generate the result and apply the reading quota. The question and result are also held in the current page state so they can be displayed and exported. Leaving or refreshing the page removes that browser view, but this does not by itself prove that backend or service-provider records have been deleted.
Free trials: your email address and captcha response are sent to our backend to deliver a trial key, secure the form, and enforce the one-trial-per-email limit.
Purchases: the selected plan is sent to our backend, which creates a Stripe Checkout session. Stripe hosts the payment page and may process contact, billing, payment-method, fraud-prevention, and transaction information under its own terms.
Site analytics: Microsoft Clarity is optional and loads only after you accept analytics. It may process page and device information, clicks, scrolling, pointer movement, errors, pseudonymous identifiers, cookies, and reconstructed session interactions. Sensitive input fields are intended to be masked by Clarity, but you should not enter sensitive personal information unless it is necessary for the service.
2. How information is used
We use information to provide AI readings, validate Secret Keys and quotas, deliver free or purchased keys, process payments, prevent abuse and fraud, secure and troubleshoot the service, respond to messages, and—when you consent—understand how the site is used.
3. Service providers and disclosures
Information is processed by the infrastructure and service providers needed for these purposes. Named providers visible in this website include Microsoft Clarity for optional analytics and Stripe for hosted checkout and payment processing. Backend hosting, AI processing, security, and transactional-email providers may also process the minimum information required to deliver their part of the service. Information may also be disclosed when required by law or needed to investigate fraud, abuse, or security incidents.
4. Retention
Browser page state lasts only for the active page view. Operational data is retained only as long as needed to provide and secure the service, enforce quotas, resolve support or payment issues, and meet legal obligations. Exact periods can vary by record and provider. Microsoft publishes separate Clarity retention periods, and Stripe retains transaction information according to its policies and legal obligations. Contact us if you need information about a specific record.
5. Your choices and requests
You can accept or decline optional Clarity analytics and reopen the analytics settings below. You can also clear site storage and cookies in your browser. Depending on where you live, you may have rights to request access, correction, deletion, restriction, or a copy of personal data. Email [email protected] with enough information for us to verify and handle the request.
6. Important data-use limits
Do not include another person's private information or unnecessary health, financial, legal, identity, or account details in a tarot question. The service is designed for reflection and entertainment, not confidential professional advice or emergencies.
7. Changes
We may update this policy when the service, providers, or legal requirements change. The updated date above shows the latest published version.