Privacy
Last updated: 2026-07-26
The short version
Drawing a card stores nothing about you. No account, no cookies, no profile. Visits are counted anonymously so we know the site is being used.
Premium questions are kept to understand what people ask about, deliberately unlinked from who asked them. The only address we hold is one you choose to give us.
Who is responsible
Kettu SRL, Rue Gérard 51, 1040 Etterbeek, Belgium (enterprise number 0799.357.105) is the controller of the personal data described here. Write to info@freetarot.help about anything on this page.
Drawing a card
Nothing is stored about you. The written interpretation for each card is generated once and cached by card, orientation and language — not by person — so the same card gives the same reading to everyone. The same is true of the spoken audio.
Visit statistics
We count visits with Umami, which we run on our own server. It sets no cookies, does not follow you between sites, and records no personal data — a page view, a country, a referrer, a screen size. We do this to know whether the site is worth running. Our legitimate interest, and there is nothing here to opt out of because nothing identifies you.
Questions
When a subscriber asks a question, the question text is stored so we can understand what people come here for. It is stored on its own: no identifier, no subscription reference, no address, no session. We cannot tell you which questions were yours, and neither can anyone else — that is the point of storing them this way.
Timestamps are deliberately coarse for the same reason. Questions people typed without a subscription are kept the same way, dated to the day only. Both are deleted after 90 days.
The beta waitlist
If you leave an address to be told when asking opens, we store that address and the language you were reading in, on our own server, and use it for that one message. It is never attached to a question. You can ask us to delete it at any time and we will.
Paying
Payments run through Stripe. We never see or hold your card details. What reaches us is a customer reference, the dates your subscription runs between, and whether you have asked a question yet — no name, no address, no card.
Stripe holds your name, email and payment details as a separate controller under its own privacy policy, and issues your receipts.
Who else sees anything
The readings and answers are written by a language model run by Ollama, in the United States. What is sent is the card, its orientation, the language, and — for a premium question — the text of the question. Nothing identifying you is sent, because we do not have anything identifying you to send. This is a transfer outside the EU, and it is the only one.
Beyond Ollama and Stripe, nobody. No advertising networks, no third-party trackers, no analytics company, and we do not sell or share data with anyone.
Where it is kept, and for how long
Everything we store sits on a single server we rent in Helsinki, Finland, inside the EU.
Questions are deleted after 90 days. Waitlist addresses are kept until we send that message or you ask us to remove yours. Subscription records are kept while the subscription lasts and afterwards for as long as Belgian accounting law requires.
Cookies
We set no cookies. If you subscribe, your browser stores your access link locally so you do not have to paste it in each visit; that stays on your device, is never sent anywhere except to prove your subscription, and clearing your browser data removes it.
Your rights
You can ask for a copy of what we hold about you, correct it, have it deleted, restrict or object to how we use it, or take it elsewhere. Where we rely on your consent — the waitlist — you can withdraw it at any time.
Write to info@freetarot.help. There is one honest limit: because questions are stored with nothing linking them to a person, we genuinely cannot find "yours" to show or delete. That is a deliberate design decision and it protects you, but it does mean that particular request is one we cannot fulfil.
If you think we have handled your data badly, you can complain to the Belgian Data Protection Authority, Rue de la Presse 35, 1000 Brussels, or to the authority where you live.
Children
This site is not aimed at children, and a subscription requires you to be 18. We do not knowingly collect anything from a child.
Changes
If what we store changes, this page changes with it — the date at the top tells you when it last did.