Last Updated: November 30, 2025
1. Introduction
Welcome to All Night Tarot, operated by The Arcane Fiend ("we," "us," or "our"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services (collectively, the "Service").
By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service.
2. Information We Collect
2.1 Registered Users
When you create an account with All Night Tarot, we collect only the information you choose to provide to us, which may include:
- Email address
- Username or display name
- Password (stored in encrypted form)
- Profile information you choose to add
- Payment information (processed through third-party payment processors; we do not store full credit card numbers)
- Content you create or upload, including tarot readings, images, and other materials
2.2 Non-Registered Users
We do not collect or store personally identifiable information (PII) about visitors who do not create accounts. Non-registered users who view content on our platform remain anonymous to us.
2.3 Automatically Collected Information
We use self-hosted analytics software to understand how users interact with our Service. This analytics software:
- Runs on our own servers (not third-party services)
- Does not track you across other websites or the internet
- Collects only aggregate usage data such as page views, session duration, and general navigation patterns
- Does not create user profiles or link data to individual users
We may also automatically collect technical information such as:
- Browser type and version
- Operating system
- IP address (used only for security purposes and not stored long-term or linked to user accounts)
- Referring website
- Pages visited and time spent on pages
3. How We Use Your Information
We use the information we collect only for the following purposes:
- To provide and maintain the Service: Creating and managing your account, delivering the features you've requested, and providing customer support
- To process transactions: Managing your subscription and processing payments
- To communicate with you: Sending you service-related announcements, updates, and responding to your inquiries
- To improve the Service: Understanding how users interact with our platform through aggregate analytics to enhance functionality and user experience
- To ensure security: Detecting and preventing fraud, abuse, and security incidents
- To comply with legal obligations: Responding to legal requests and preventing harm
4. How We Share Your Information
We do not sell, rent, or trade your personal information to third parties. We do not share your information with advertisers or data brokers.
We may share your information only in the following limited circumstances:
- With your consent: When you explicitly choose to share your content publicly or with other users
- Service providers: With third-party vendors who perform services on our behalf (such as payment processing), and who are contractually obligated to protect your information
- Legal requirements: When required by law, subpoena, or other legal process, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others
- Business transfers: In connection with a merger, sale, or acquisition of all or a portion of our business (you will be notified via email and/or prominent notice on our Service)
5. Your Content and Public Information
Content you create and choose to share publicly (such as tarot readings shared on social media or with other users) may be visible to others. You control what you share and with whom. Please be mindful about what information you include in publicly shared content.
6. Data Retention
We retain your personal information only for as long as necessary to provide you with the Service and for legitimate business purposes, such as complying with legal obligations, resolving disputes, and enforcing our agreements.
When you delete your account (see Section 7 below), we will delete or anonymize your personal information, except where we are required to retain it for legal or security purposes.
7. Your Rights and Choices
7.1 Account Deletion
You have the right to delete your account and all associated data at any time. To delete your account:
- Log in to your account
- Go to your Profile page
- Scroll to the bottom of the page
- Click "Delete Account"
This flag your data for deletion. In seven days, we will permanently delete all of your personal information and content from our servers. Once this process runs, this action cannot be undone.
7.2 Access and Correction
You can access and update most of your personal information by logging into your account and visiting your profile settings. If you need assistance accessing or correcting your information, please contact us at legal@thearcanefiend.com.
7.3 Communication Preferences
You can opt out of receiving promotional emails from us by following the unsubscribe instructions in those emails. Please note that you cannot opt out of receiving service-related communications (such as account verification or transaction confirmations).
7.4 Do Not Track
Because we do not track users across the internet or use third-party tracking technologies, "Do Not Track" browser settings do not affect our Service. We respect your privacy by default.
8. Cookies and Similar Technologies
We use cookies and similar technologies only for essential purposes required for the Service to function, such as keeping you logged in
We do not use cookies for advertising or third-party tracking. You can configure your browser to refuse cookies, but this may limit your ability to use certain features of the Service.
9. Third-Party Services
Our Service may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to read the privacy policies of any third-party sites you visit.
We use third-party payment processors to handle subscription payments. These processors have their own privacy policies and security practices. We do not store your full credit card information on our servers.
10. Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption of passwords
- Secure server infrastructure
- Regular security assessments
- Limited employee access to personal information
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.
11. Children's Privacy
Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us, and we will delete such information from our systems.
12. International Users
Our Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States where our servers are located and our database is operated.
By using the Service, you consent to the transfer of your information to the United States and understand that data protection laws in the United States may differ from those in your country.
13. California Privacy Rights
If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:
- The right to know what personal information we collect, use, and disclose
- The right to request deletion of your personal information
- The right to opt out of the sale of personal information (note: we do not sell personal information)
- The right to non-discrimination for exercising your privacy rights
To exercise these rights, please contact us at legal@thearcanefiend.com or use the account deletion feature described in Section 7.1.
14. European Privacy Rights (GDPR)
If you are located in the European Economic Area (EEA), you have certain rights under the General Data Protection Regulation (GDPR), including:
- The right to access your personal data
- The right to rectification of inaccurate data
- The right to erasure ("right to be forgotten")
- The right to restrict processing
- The right to data portability
- The right to object to processing
To exercise these rights, please contact us at legal@thearcanefiend.com. You also have the right to lodge a complaint with a supervisory authority in your jurisdiction.
15. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. We will notify you of any material changes by:
- Posting the updated Privacy Policy on this page
- Updating the "Last Updated" date at the top of this policy
- Sending you an email notification (if you are a registered user)
Your continued use of the Service after such changes constitutes your acceptance of the updated Privacy Policy.
16. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our privacy practices, please contact us at:
legal@thearcanefiend.com
The Arcane Fiend
5441 S Macadam Ave #4130
Portland, Oregon, 97239
United States
17. Summary of Our Privacy Practices
To summarize our commitment to your privacy:
- We do not sell or rent your personal information
- We do not run advertisements on our platform
- We use a self-hosted Umami instance for analytics. It does not track you across the internet
- We collect only the information you choose to provide
- We do not collect PII from non-registered users
- You can delete your account and all data at any time through your profile settings
- We use your information only to provide and improve the Service
18. Where Your Data Lives
All Night Tarot relies on processing from a few services.
- Emails are powered by Brevo. Their DPA available in their terms of service.
- Server infrastructure and file uploads are on Digital Ocean. Their DPA is available here.
- Server logs are mirrored to Cloudflare. Their DPA is here.
19. Breach Notification Process
In the event of a data breach, all potentially affected users will be emailed.