Privacy Policy

Last updated 30 August 2026

This policy covers https://www.cardsandstars.org, operated by Cards and Stars. It describes what we collect, why, who we share it with, and how to get it removed.

What we collect

If you only read the site

Nothing that identifies you. The daily readings, the 78 card pages and the archive are public and require no account. Our web server keeps standard request logs (IP address, browser user-agent, the page requested, the time) for security and troubleshooting.

If you create an account

  • Email address — to sign you in and to send the readings you have asked for.
  • Password — stored only as a salted hash. We cannot read it.
  • Your preferences — whether you want the daily reading email, and which deck you prefer.
  • Your reading history — which card you drew on which day.

If you subscribe

Payment is handled entirely by Stripe. Your card number never reaches our servers. We store the Stripe customer and subscription identifiers, your plan, its status and its billing period so we know what you have access to.

What we do not collect

We do not run advertising trackers, and we do not sell or rent your data to anyone.

Birth details. Astrological personalisation from your birth date, time and place is not currently collected. If that changes, this policy will be updated before the feature ships and the data will be treated as described here.

Who we share it with

  • Stripe — payment processing and subscription billing.
  • Our email provider — to deliver the messages you have opted into.
  • Our hosting provider — which stores the data on our behalf.

We disclose data otherwise only where the law requires it.

Email

You are emailed only what you opt into. Every message carries an unsubscribe link, and you can turn the daily reading off at any time from your profile. Unsubscribing from mail does not close your account.

Cookies

We set only the cookies the site needs to work: a session cookie to keep you signed in, and a CSRF token to protect form submissions. There are no advertising or cross-site tracking cookies.

How long we keep it

Account data is kept while your account is open. Billing records are kept as long as tax and accounting rules require. Server logs are rotated regularly.

Your rights

You can ask us to show you the data we hold, correct it, delete it, or send it to you in a portable form. Email readings@cardsandstars.org and we will action it. Deleting your account removes your profile, preferences and reading history; billing records we are legally required to retain are kept and nothing more.

Children

This service is not intended for anyone under 16, and we do not knowingly collect their data.

Changes

If this policy changes materially we will say so on this page and update the date above.

Contact

Cards and Stars — readings@cardsandstars.org