Privacy Policy

This Privacy Policy explains how KartiTaro.ru (the “Service”) handles information about visitors when you use our website — free online tarot readings, card meanings, AI tarologist chat on Love Tarot, and booking a live tarologist consultation.

Detailed rules for personal data processing under applicable law are set out in our Personal Data Processing Policy.

By using the Service, you confirm that you have read and understand this Policy.

1. Scope

The Service provides interactive tarot readings and related features. This Policy applies to information collected when you browse the site, draw cards, use AI chat, or book a consultation.

2. What information we use

In general, this may include:

• Reading content: questions or focus text you enter; card names, positions, and interpretations shown to you;
• AI tarologist chat: messages you send in Love Tarot to receive a reply;
• Consultation booking: your chosen date and time, plus reading details sent to the tarologist;
• Technical data: IP address, browser and device type, access time, server logs;
• Analytics: aggregated site usage and navigation statistics via Yandex Metrika (see section 3).
• Browser storage: language preference, pseudonymous visitor ID, reading snapshot, and AI session identifiers (see section 3).

Free readings do not require registration or an email address.

3. Cookies and local storage

The Service uses cookies and browser storage needed for its operation:

• kartitaro_vid — pseudonymous visitor ID (up to 365 days);
• kartitaro_reading — snapshot of your latest spread (up to 24 hours);
• kartitaro_locale in localStorage — your language choice;
• kartitaro_ai_session and kartitaro_ai_reading_fp in sessionStorage — AI chat continuity on Love Tarot.

Yandex Metrika (analytics): the Service uses Yandex Metrika to measure traffic and how features are used. Metrika may set cookies such as _ym_uid, _ym_d, and yandexuid, and collect technical and behavioural data (pages viewed, clicks, link transitions, referrer, device and browser type, approximate location from IP). Webvisor (session replay) may be enabled. Processing is carried out by Yandex LLC according to the Yandex Metrika terms of use and Yandex Privacy Policy. You may opt out: yandex.ru/support/metrica/general/opt-out.html.

You can block or delete cookies in your browser settings. Disabling essential cookies may limit consultation handoff and some features.

4. Sharing with third parties

We do not sell your data. Information may be shared only as needed to run the Service:

• hosting and infrastructure providers (including Yandex Cloud for AI chat and Cloud.ru for static assets);
• Yandex LLC — web analytics service Yandex Metrika;
• Yandex LLC — Yandex Mail and Yandex Calendar when you book a consultation and for related notifications;
• the tarologist — reading details and booking time;
• when required by law or with your consent.

5. Security and retention

We use HTTPS, access controls, and other reasonable measures to protect data. Reading cookies are short-lived; server logs are kept for security (typically up to 12 months); AI dialog data is stored for no more than 14 calendar days; physical deletion from the database occurs within 5 days after the retention period expires (scheduled purge every 5 days), unless law requires longer storage. Analytics data in Yandex Metrika is stored according to Metrika account settings and Yandex documentation (aggregated statistics — typically up to 12 months; Webvisor records — per enabled retention settings).

6. Consent management

We keep an append-only audit log of your consent choices (grant, deny, withdraw) in our database, linked to a pseudonymous visitor_id, with the policy version and page where the choice was made. This log is not deleted when you withdraw consent — it records the history of your decisions as required for accountability.

You can manage preferences at any time via Privacy settings in the site footer: enable or disable analytics (Yandex Metrika), AI chat personal data processing, and consultation booking data processing. Withdrawing consent stops the related feature (e.g. Metrika will not load; AI chat and booking require a new grant). When we update this Policy, we may ask you to confirm affected consents once for the new version.

Future paid features may use a payment partner (e.g. YooKassa); separate payment consent will apply when those features launch.

7. Your rights

Depending on applicable law (including Russian Federal Law No. 152-FZ where it applies), you may request access, correction, or deletion of your personal data, withdraw consent where processing is consent-based, or lodge a complaint with a supervisory authority.

Contact: smartotsail@yandex.ru

8. Changes

We may update this Privacy Policy from time to time. The current version is always on this page; the update date is shown at the top.

9. Contact

Questions about privacy and personal data:

Email: smartotsail@yandex.ru