Privacy Policy

1. Introduction

Arcana Noctis is an AI-powered platform offering tarot, numerology, chat, quizzes, horoscopes, and self-discovery tools. This Privacy Policy explains how we collect, use, share, and protect your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Who We Are

Arcana Noctis is operated by Arcana Noctis Ltd. We are the data controller for the personal data we collect through our website and services. For questions about this policy or your data, contact us at support@arcananoctis.net.

3. Information We Collect

We collect personal data you provide, such as name, email, date of birth, account details, chat history, readings, preferences, and payment information. Essential login, guest-session and security information supports the service. Optional analytics and advertising follow the separate choices described below.

4. How We Use Data

We use your data to provide and improve our services, process readings and chats, personalise content, manage accounts and subscriptions, send important updates, prevent fraud, and analyse usage. We never use your data for unrelated marketing without your consent.

5. Legal Bases

We process personal data under the following lawful bases: performance of a contract for readings, credits, subscriptions, and account features; consent where required; legal obligations; and our legitimate interests in running, protecting, and improving Arcana Noctis.

6. Sharing & Processors

We share data only with trusted processors and service providers who help us operate Arcana Noctis, including hosting, analytics, payment, email delivery, authentication, monitoring, security, and AI processing providers. These partners act under data protection agreements.

7. Payments & Subscriptions

Payments are securely processed by third-party providers such as Stripe, Apple, or Google. We do not store full card details. Subscription data is used to manage access, credits, billing, refunds, and support. Refunds are subject to our Terms & Conditions.

8. Cookies & Analytics

Essential cookies and storage keep login, guest trials and saved preferences working. First-party analytics runs by default to help us understand page visits and where visitors leave, so we can improve the service. You can opt out at any time using the persistent Privacy settings · Analytics opt-out button, including on this page. Previous saved opt-outs are respected. Google advertising is a separate choice and stays off until you explicitly enable it.

When analytics is enabled, we send sanitised page paths, campaign labels, reading and signup milestones, and estimated engagement to our Django service. We exclude questions, reading and chat text, email addresses, authentication tokens and private record IDs. Engagement estimates visible, focused time with recent activity; it does not prove someone is reading.

The returning-browser identifier is pseudonymous, not anonymous, and expires within 90 days without extending its original lifetime. Analytics sessions are scoped to a browser tab and expire after 30 minutes without activity. We do not identify you across devices. Advertising consent allows the Google Ads tag to contact Google; its processing is separate from first-party analytics.

Turning analytics off stops future analytics collection in this browser and removes analytics identifiers and attribution, while keeping essential login and guest-trial storage. An already sent event cannot be recalled. Withdrawal does not erase historical records; contact us using the details on this page to request deletion. Turning off an already loaded ad tag refreshes the page to stop its code. Browser cookie blocking is a separate control and can affect essential features.

9. Data Retention

We keep personal data only for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce agreements. Inactive accounts may be deleted after a period of inactivity, subject to our retention schedule.

10. Your Rights

You have the right to access, correct, delete, restrict, object to, or port your personal data. You can withdraw consent at any time where processing is based on consent. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).

11. Children & Age Limits

Arcana Noctis is intended for users aged 18 and over. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it where appropriate.

12. International Transfers

Some data may be transferred outside the UK or EEA for processing, such as by service providers. We ensure appropriate safeguards are in place to protect your personal data in accordance with UK GDPR.

13. Security

We implement technical and organisational measures to protect personal data, including encryption, access controls, monitoring, and secure infrastructure. While we strive to protect your data, no system is 100% secure.

14. Contact Us

For any questions, requests, or concerns about this policy or your personal data, please contact us at support@arcananoctis.net. We aim to respond within 30 days.