Privacy Policy

1. Introduction

Arcana Noctis is a tarot, AI card-pull chat, horoscope, quiz, learning, credits, and self-discovery service. It is intended for users aged 18 and over. Readings and AI responses are for reflection, entertainment, and self-discovery, not medical, legal, financial, or other professional advice.

This policy is written in plain English and is UK-focused. It is not formal legal advice.

2. Who We Are

Arcana Noctis is responsible for how personal data is handled in the service. For privacy questions or requests, contact support@arcananoctis.net.

3. Information We Collect

Depending on how you use Arcana Noctis, we may collect:

• Account information such as name, username, email address, profile picture, account login data, and authentication details.
• Profile and personalisation information, including guardian, archetype, horoscope, astrology, numerology, quiz, and dashboard preferences or inputs.
• Date of birth where you provide it for horoscopes, numerology, or personalisation.
• Readings, tarot card pulls, AI chat prompts, AI chat responses, quiz answers, quiz results, and related saved history.
• Credit balances, credit transaction history, subscription status, top-up/payment status, invoice/payment IDs, and other payment metadata.
• Anonymous guest session IDs, guest trial cookies or tokens, and guest allowance usage.
• Analytics events, advertising attribution such as UTM parameters or fbclid, device/browser information, IP address, user agent, and server logs.
• Cookies, local storage, and similar technologies used for login, security, preferences, analytics, and guest trials.

4. How We Use Information

• Provide readings, AI card-pull chat, quizzes, horoscopes, learning pages, profiles, and dashboard features.
• Maintain accounts, saved readings, chat history, quiz results, credits, and subscription/top-up access.
• Operate guest trials and prevent abuse of guest allowances.
• Improve features, reliability, security, performance, and user experience.
• Detect, investigate, and prevent fraud, abuse, scraping, spam, and security incidents.
• Send service messages where needed, such as account, payment, subscription, or important service notices.
• Measure analytics and marketing performance where applicable.
• Comply with legal, regulatory, tax, accounting, and payment obligations.

5. Lawful Bases

Under UK GDPR, we rely on different lawful bases depending on the context:

• Contract or service provision, when we need data to provide your account, readings, chat, credits, subscriptions, and related features.
• Legitimate interests, for security, fraud prevention, service improvement, analytics, performance monitoring, and understanding how users interact with the service.
• Consent, where required for optional marketing, non-essential cookies, or similar optional processing.
• Legal obligation, where we must keep records for payment, tax, accounting, regulatory, dispute, or compliance reasons.

6. AI Processing

When you submit prompts, questions, readings, chat messages, quiz context, or related content, that information may be processed by AI systems to generate responses, interpretations, summaries, or follow-up suggestions.

Please do not enter highly sensitive information that you do not want processed. Arcana Noctis is for reflection, entertainment, and self-discovery only. It does not provide medical, legal, financial, psychological, or crisis advice.

7. Sharing Information

We do not sell your personal data. We may share data with:

• Hosting, infrastructure, database, monitoring, security, and server log providers.
• Analytics and advertising measurement providers, where used.
• Stripe for payments, subscriptions, top-ups, invoices, and payment status.
• Google OAuth or other authentication providers used to sign you in.
• Email, support, or service-message providers if used.
• AI processing providers used to generate readings, chat responses, interpretations, or summaries.
• Law enforcement, regulators, courts, or other parties where legally required or necessary to protect rights, safety, or security.

8. Payments

Card and payment details are handled by Stripe. Arcana Noctis does not store full card numbers. We may store payment status, subscription status, invoice IDs, payment IDs, top-up records, credit purchases, and related metadata needed to operate credits, subscriptions, accounting, support, and fraud prevention.

9. Cookies and Guest Sessions

We use cookies, local storage, and similar technologies for login sessions, security, preferences, analytics, attribution, and guest trials. Guest sessions may use anonymous identifiers, cookies, or tokens to provide trial credits, remember guest allowance usage, and prevent abuse.

Blocking cookies or local storage may prevent account login, guest trials, saved preferences, or some parts of the service from working correctly.

10. Retention

• Account data is generally retained while your account is active.
• Reading, chat, profile, quiz, horoscope, and personalisation history is retained until deleted or your account is deleted where possible.
• Payment, subscription, invoice, credit, accounting, tax, and dispute records may be retained as needed for legal, accounting, or regulatory obligations.
• Security logs, server logs, analytics records, and anti-abuse records are retained for limited periods appropriate to security and operations.
• Backups may take time to cycle out, so deleted data may remain in backups for a limited period before removal.

11. Deletion and Account Requests

You can ask us to delete your account or personal data by contacting support@arcananoctis.net. We will delete or anonymise data where possible, but some records may need to be kept for legal, security, fraud-prevention, payment, tax, accounting, backup, or dispute reasons.

12. Your Rights

Where applicable, you can ask to:

• Access the personal data we hold about you.
• Correct inaccurate or incomplete data.
• Erase personal data.
• Restrict how we use your data.
• Object to certain processing.
• Request portability of data you provided to us.
• Withdraw consent where processing relies on consent.

You can also complain to the UK Information Commissioner's Office at ico.org.uk.

13. Children

Arcana Noctis is intended for users aged 18 and over. If we learn that a user is under 18, we may close the account and delete related data where appropriate, subject to legal, security, and operational requirements.

14. International Transfers

Some providers may process data outside the UK. Where required, we use appropriate safeguards, such as contractual protections or other lawful transfer mechanisms, to protect personal data.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will be posted on this page with an updated date. Significant changes may also be communicated through the service where appropriate.

16. Contact

For privacy questions or requests, contact support@arcananoctis.net. You may also want to review our Terms of Service.