Privacy Policy

Effective Date: March 22, 2026 · Last Updated: March 22, 2026

The short version: Entropic Tarot itself collects no personal data. All sensor and reading data is processed entirely on your device and immediately discarded — nothing is transmitted to or stored on our servers. Display advertising on content pages is served by third-party ad networks (currently Adsterra), which operate under their own privacy policies and may set their own cookies and tracking. Paid subscription tiers remove the third-party ads.

Introduction

Entropic Tarot ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how our application handles information when you use our tarot reading service.

Information We Process

Device Sensor Data (Optional)

When you grant permission, the app temporarily accesses:

Microphone Audio — Ambient audio data is sampled to extract random noise patterns from electromagnetic fluctuations. No audio content is recorded, stored, analyzed for speech, or transmitted.
Camera Visual Data — The camera sensor captures thermal noise from individual pixels. No images or video are recorded, stored, or transmitted.
Touch Interaction Timing — Precise timing data from touch interactions provides microsecond-level jitter. No personally identifying information is derived.

All sensor data is immediately hashed using SHA-256 and discarded. The raw sensor data exists only in volatile memory for milliseconds.

Location Data (Optional)

If you choose to calculate your astrological ascendant, your geographic coordinates are used for the calculation. This data is processed entirely on your device and is never transmitted.

Locally Stored Data

Saved Readings — Stored in your device's local browser storage (localStorage). Never transmitted.
Preferences — Audio mute state and onboarding completion stored locally.

What We Do NOT Collect

The Entropic Tarot app itself does not collect or transmit:

No personal information (name, email, phone, address)
No account or login data — there are no accounts
No first-party usage analytics or behavioral tracking
No first-party device fingerprinting
No crash reports or diagnostics sent to us
No first-party cookies for tracking purposes

Note: third-party display ads (see the Advertising section below) operate independently and may collect their own data under their own policies. Paid subscription tiers remove the third-party ads entirely.

Advertising

Content pages of the App (Features, Library, Roadmap, Saved Readings, and Feedback) display banner advertising served by a third-party ad network. The reading flow itself — entropy collection, card selection, shuffle, and reading display — does not contain advertising.

The current ad network is Adsterra. Banners are loaded via an iframe served from highperformanceformat.com. The ad network may:

Set its own cookies and local storage
Collect IP address, user agent, referrer URL, and other standard HTTP request data
Use its own tracking technologies for ad delivery, frequency capping, and fraud prevention
Share data with its own advertising partners under its own policies

Adsterra's privacy practices are governed by Adsterra's Privacy Policy. We do not receive any individually identifying information from the ad network — only aggregate impression and revenue reporting.

Subscribers on paid tiers do not see third-party ads, and no third-party ad scripts are loaded on their sessions.

Third-Party Services

The optional AI interpretation feature sends your card reading data (card names and positions only — no personal data, no device identifiers) to Anthropic's Claude API for interpretation. Anthropic's data handling is governed by Anthropic's Privacy Policy.

The optional premium voice (ElevenLabs) sends interpretation text to ElevenLabs' API for synthesis. Their handling is governed by their own privacy policy.

Display advertising is provided by third parties as described in the Advertising section above.

Data Processing

Entropy Generation Pipeline

Collection — Sensor data sampled in real-time
Hashing — Immediately processed through SHA-256 cryptographic hash
Discarding — Raw sensor data destroyed after hashing
Generation — Hash seeds HMAC-DRBG random number generator
Shuffling — Fisher-Yates shuffle produces card ordering
Cleanup — Entropy seed cleared from memory after shuffle

Data Storage & Retention

Entropy Data — Discarded immediately after processing (never retained)
Saved Readings — Stored locally until you delete them
Session Data — Cleared when you close the application
Server Storage — None. No user data is ever stored on any server.

Your Controls

Deny all sensor permissions — the app works with touch-only entropy
Revoke permissions at any time via your device settings
Delete all saved readings from the Saved Readings page
Clear all app data via your browser/device storage settings

Children's Privacy

Entropic Tarot does not knowingly collect information from children under 13. The app does not require any personal information to function.

Data Subject Rights

Since we collect no personal data, most data subject rights (access, correction, deletion, portability) are not applicable. All data resides on your device under your control. You can delete it at any time.

Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices. Material changes will be noted with an updated "Last Updated" date.

Contact

For privacy-related questions, contact us at:
Email: privacy@entropytarot.com
Subject Line: Entropic Tarot Privacy Inquiry

Compliance

This application is designed to comply with:

General Data Protection Regulation (GDPR)
California Consumer Privacy Act (CCPA)
Children's Online Privacy Protection Act (COPPA)
Apple App Store Privacy Guidelines
Google Play Developer Privacy Policy Requirements