1. Information We Collect

We collect only the information necessary to provide our service:

• Payment information — Processed entirely by Stripe. We never store your card number, CVV, or full payment details on our servers.
• Email address — If you provide one at checkout, used only to deliver your reading and for service-related communications.
• Session data — Anonymous identifiers to maintain your reading session. Not linked to your identity.
• Usage data — Pages visited, spread selections, and interaction events collected through analytics tools (Google Analytics 4). This data is aggregated and anonymized.

2. How We Use Your Information

• To process your payment and deliver your reading
• To send your reading results if an email was provided
• To improve our service through aggregated analytics
• To comply with legal obligations

We do not sell, rent, or share your personal information with third parties for marketing purposes.

3. Cookies and Tracking Technologies

We use the following technologies:

• Essential cookies — Required for the reading session to function. Cannot be disabled.
• Analytics cookies — Google Analytics 4 to understand how visitors use our site. You can opt out via Google's opt-out tool.
• Advertising pixels — Meta Pixel and TikTok Pixel may be active on this site to measure advertising effectiveness. You can manage preferences through your browser or ad settings.

4. Data Retention

We retain your email address and reading records for up to 12 months, after which they are permanently deleted. Payment records are retained as required by law (typically 7 years) but are stored solely by Stripe under their own privacy policy.

5. Your Rights (GDPR / CCPA)

Depending on your location, you may have the following rights:

• Access — Request a copy of the personal data we hold about you
• Deletion — Request that we delete your personal data ("right to be forgotten")
• Correction — Request correction of inaccurate data
• Portability — Request your data in a machine-readable format
• Opt-out — California residents may opt out of the sale of personal information (we do not sell personal data)

To exercise any of these rights, contact us at privacy@arcana.com. We will respond within 30 days.

6. Third-Party Services

Our service relies on the following third-party providers, each governed by their own privacy policies:

• Stripe — Payment processing (stripe.com/privacy)
• Google Analytics 4 — Usage analytics (policies.google.com/privacy)
• Meta — Advertising measurement (facebook.com/privacy/policy)

7. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe a minor has provided us with personal information, please contact us immediately at privacy@arcana.com.

8. Security

We implement industry-standard security measures including HTTPS encryption, secure session handling, and limited data retention. However, no method of transmission over the Internet is 100% secure.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date.

10. Contact Us

For privacy-related questions or to exercise your rights, contact us at:
Email: privacy@arcana.com