Privacy Policy

Last updated: July 2026

1. What we collect

When you take the quiz we collect: your first name, your email address, your answers to the quiz questions, and the question you ask the cards. We use this to compose your reading and — with your explicit consent — to send you Roza’s letters.

Your reading itself is stored so it can be shown to you again at a private link that only you receive. Anyone who has that exact link can open that page, so treat it like a letter — do not share it if you want it private. If you choose to leave journal lines under a reading, those are stored with it, and deleted together with the rest of your data on request.

2. Legal basis & consent (GDPR)

Emails are sent only after you tick the consent box. You can withdraw consent at any moment — every email we send includes an unsubscribe link, and you can always write to roza@rozatarot.com to be removed immediately.

3. Who processes your data

To compose your reading, the question you type, your first name and your quiz answers are sent to Anthropic PBC (USA) — the provider of the text-generation model behind Roza’s readings — under its commercial data-processing agreement, with EU Standard Contractual Clauses as the transfer safeguard. Anthropic does not use this data to train its models.

Contacts are stored with our email service provider (Resend) and payment data with our payment provider (Lemon Squeezy), who acts as merchant of record. We never see or store your card details.

We share your data only with these named processors, only as needed to run the service. We never sell it, and we share it with no one else.

A gentle tip from Roza herself: when you whisper your question to the cards, there is no need to include full names or details that identify other people — the cards know who you mean.

4. Your rights

You may request a copy of your data or its complete deletion at any time — write to roza@rozatarot.com and it will be done within 30 days.

5. Cookies & local storage

The site uses no advertising trackers. It keeps a small amount of functional storage on your own device — your name, your past readings, the morning card you turned — so the table can remember you. Clearing your browser storage erases it.