Privacy Policy

What we collect

Account. You sign in with Google through Emergent's sign-in service. We receive and store your name, email address and profile picture, plus a sign-in session that expires after 7 days.

Readings. When you draw cards, your question (if you write one), deck, spread and drawn cards are sent to our server. If you save a reading to your journal, we store its question, cards, interpretation, your reflections and any follow-up questions and answers with your account.

Daily Ritual and favourites. Each Daily Ritual card and its interpretation are stored with your account so you can revisit today's card and see your streak. Cards you favourite are stored too.

Usage and billing. We store how many readings you've used and your plan. Payments are handled by Stripe; we don't receive your card number. We store your Stripe customer and subscription IDs, subscription status and renewal date, and records of checkout sessions.

In your browser. Your browser's local storage keeps today's daily card, your streak and your analytics choice. If you're asked to sign in in the middle of a reading, the drawn reading, including its question, is kept in local storage on your device so it can be restored after sign-in. It is deleted as soon as it's restored, when you start a new reading or sign out, if sign-in doesn't complete, or after 24 hours.

How AI processes your text

To write a reading, your question, deck, spread and cards are sent through Emergent's AI service to Anthropic's Claude model. For a follow-up, the original question, the reading and earlier follow-ups are sent as well. Daily Ritual interpretations are written the same way. These providers process the text under their own terms and policies.

Analytics

Only with your permission. HeyCatch is the only analytics service on the site, and it starts only after you choose "Allow analytics". Until then, and if you choose "No thanks", no analytics is collected and no analytics identifiers are stored. You can change your choice anytime with "Analytics choices" at the bottom of every page.

HeyCatch. With your permission, HeyCatch analytics records: page views (the page address with sign-in codes, tokens and payment IDs removed, the site that referred you, reduced to its domain, and campaign tags such as utm_source); limited interactions such as clicks, without the text or attributes of what you clicked; and these product events: sign-in started and completed, reading started and completed, reading limit reached, checkout started, and subscription purchased. Product events carry only the deck, spread, number of cards, whether a question was written (yes or no), your plan, and for purchases the plan and price. They never include your question, reading, journal, reflections, name, email or payment IDs. Clicks on the reading, journal and Daily Ritual screens are not recorded. Session recording is off.

Identifiers. HeyCatch stores a random visitor ID in a first-party cookie and local storage for up to 365 days. When you're signed in, events are linked to an internal account ID (a random code, not your name or email). While analytics is on, requests from the site to our own server carry HeyCatch session headers so activity can be grouped into a visit. HeyCatch also loads a small helper script from its own server.

Other services involved

Emergent hosts the app and its database. HeyCatch provides analytics, as described above, if you allow it. Stripe processes payments. Google provides sign-in identity and the site's fonts. Some images, such as the card back, load from Unsplash's image servers. Each service receives the technical information your browser sends, such as your IP address.

How long data is kept

Saved readings stay in your journal until you delete them. Account details, Daily Ritual records, favourites, usage counts and billing records are kept while your account exists; there is currently no automatic deletion schedule.

Deleting your data

You can delete any saved reading from your journal at any time. There is currently no in-app option to delete your whole account or your Daily Ritual history.

To ask for your account and related data to be deleted, or for any privacy question, email support@thecardlight.com.