← Zürich Tarot

Privacy policy

Last updated: 21 October 2026

This policy explains what personal data tarotlocal.com (“Zürich Tarot”, “we”) processes, why, and what your rights are. It applies under the Swiss Federal Act on Data Protection (FADP/nDSG) and, for visitors from the EU/EEA, the GDPR.

Who is responsible

Irina Bolotova
Zürich, Switzerland
Email: hello[at]tarotlocal.com

What we process and why

Using the site without an account

Your daily card draw and any reflections you save “in this browser” are stored only in your browser’s local storage on your device. They are not sent to us. You can remove them at any time by deleting the entries or clearing your browser’s site data.

When you visit, our hosting provider processes technical data needed to deliver the page securely (for example your IP address, browser type and time of access). This is necessary to run the website.

With an account

If you create an account or sign in, we process:

• Account data: your email address and, if you sign in with Google, your name and profile picture as provided by Google. This is handled by our sign-in provider, Clerk.
• Your journal: for each day you save, the date, the three cards drawn, your “three good things” and your note. These are stored in our database so you can see them on all your devices.

We process this data to provide the account and the synced journal you asked for. We do not use your journal for advertising, do not sell it, and do not read it except where needed to fix a technical problem or when required by law.

Service providers

We use the following providers, who process data on our behalf:

• Cloudflare, Inc. (USA): hosting of the website and storage of the journal database (Cloudflare Pages and D1).
• Clerk, Inc. (USA): accounts, sign-in and session management. Clerk sets cookies that are necessary to keep you signed in.
• Google (USA/Ireland): only if you choose “Continue with Google” to sign in.
• Google Fonts: the page loads a typeface from Google’s servers, which receive your IP address when the font is requested.

These providers may process data in the USA. Where data is transferred abroad, it is protected by appropriate safeguards such as the Swiss-U.S. and EU-U.S. Data Privacy Framework or standard contractual clauses.

How long we keep data

Your journal entries are kept until you delete them. You can delete single entries, or your whole journal with “Delete my journal data”. When you delete your account, your journal is deleted automatically. Technical access data is kept only as long as needed for security and operation.

Your rights

You can ask for access to your data, correction, deletion, restriction of processing, and a copy of your data in a common format (you can also use “Download my journal” at any time). You may object to processing and, where processing is based on consent, withdraw consent. Write to hello[at]tarotlocal.com. You also have the right to complain to a data protection authority, in Switzerland the Federal Data Protection and Information Commissioner (FDPIC).

Changes

We may update this policy when the site changes. The date at the top shows the latest version.