Privacy Policy
ARCANA has no accounts and asks for no personal details. This page explains the data a reading does create, and where it goes.
The short version
You do not create an account. We do not ask for your name, birthday, or contact details. The one piece of personal information you give us is the question you type — and because that question is often about a relationship, your health, or your money, we treat it as sensitive.
Your question leaves our servers
To write your reading, we send your question and the cards you drew to a language model. That request passes through OpenRouter and is answered by Google’s Gemini model. We do not control how those providers log requests; please read their own policies before writing anything you would not want a third party to process.
Please do not include full names, addresses, contact details, or identifying information about other people in your question. A reading works just as well with “my partner” as with a name.
What we collect
- Your question and the cards drawn, used to generate the reading.
- Your IP address, held briefly in server memory to rate-limit abuse and recorded in standard host logs.
- Usage events: which spread you chose, how many cards, whether a reading was delivered. The text of your question is never sent to analytics.
- Payment records, handled entirely by Stripe. We never receive or store your card number.
Who processes your data
| Provider | Role | What they receive |
|---|---|---|
| OpenRouter | routes the reading request to the language model | your question text and the cards drawn |
| Google (Gemini) | generates the reading | your question text and the cards drawn |
| Stripe | processes payment | your payment details, which we never see or store |
| Vercel | hosts the site | standard server logs including IP address |
| Google Tag Manager | loads analytics | usage events and cookie identifiers |
| TikTok | measures which advertising led to a reading | usage events, the amount of a purchase, and cookie identifiers |
Cookies
We load analytics through Google Tag Manager, which may set cookies used to measure how the site performs and to attribute visits from advertising. Essential cookies keep your session working. You can block non-essential cookies in your browser without losing the ability to draw a reading.
How long we keep things
Rate-limiting records are discarded within minutes. A purchased reading is retained so that you can return to it after paying. Payment records are retained as long as tax and accounting law requires.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your data, and to object to how it is processed. Because we hold no account, the fastest route is to write to us with your Stripe receipt so we can locate the record.
Children
ARCANA is intended for adults. It is not directed at anyone under 18, and we do not knowingly collect their data.
xfields.ai is the controller of this data. Reach us at the address above.