Privacy

What stays on your device

Questions you type, the cards, coins and lines you draw, your journal, and the names and birth details you enter in the numerology, gematria and astrology calculators are worked out in your browser. They are never sent to us or to anyone else.

Some of it is saved in your browser's local storage so it is there next time: your journal and its autosave setting, a random number that fixes your daily card, whether reversed cards are on, and, only when you tick “Remember on this device”, your birth date, time and place and any other place you ask the site to remember. Display settings for some charts are saved too. To remove all of it, untick the box, press “Forget them”, delete entries on the journal page or clear your browser data.

What our server sees

Like any website, our host receives the normal request for each page and file, which includes your IP address and browser type. Our host is Cloudflare, which delivers the site from its network and protects it from attacks. When you search for a birth place, your browser downloads a small list of places filed under the first two letters you type (for example the “lo” list for London), so the server sees which list was requested, never the full name, your birth date or your birth time.

Share links put the reading or chart after the # in the address. Browsers do not send that part to servers, but anyone you send a chart link to can read the birth details in it. Tarot and I Ching share links carry only the cards or lines, never your question.

Google Analytics, only if you accept

On your first visit a small banner asks whether we may use Google Analytics. Until you click Accept, the Google Analytics script is not loaded, no Google Analytics cookie is set and nothing is sent to Google Analytics. If you click Reject, it stays that way.

If you click Accept, Google Analytics 4 counts visits for us. It sets two cookies on our domain (_ga, and _ga_ followed by an ID) that hold a random number, so a later visit is recognised as the same browser; by Google's default they last up to two years unless you clear them or withdraw. Google receives the page address without anything after ? or # (our code removes those parts, so share links with readings or birth details never reach Google), the previous page address cut the same way, your browser, device type, screen size and language, an approximate location (country and city) that Google works out from your IP address, and how long you stay.

We also send a few events that say which tool was used, never what you put into it: a reading (the spread or tool name and the deck), a chart (which astrology calculator), a calculation (which numerology, gematria or Saturn return calculator), and a press on Share, Download image or Save to my journal. We never send your question, names, birth date, time or place, coordinates, or the cards, lines or numbers that came up.

Our code switches off Google signals and ad personalization, so the Google Analytics data is not used for advertising. According to Google, Google Analytics 4 does not log or store IP addresses. Event-level data is kept for 2 months, the shortest period Google Analytics offers; after that only aggregate reports remain. Google handles the data as our service provider and may process it outside your country, including in the United States.

How to change your mind

Use the “Cookie settings” link at the bottom of every page to open the banner again. Choosing Reject stops Google Analytics at once and deletes the _ga cookies of this site. Your choice is saved in your browser's local storage (orbitarot.consent) so the banner does not come back on every page; if you clear your browser data, the choice goes too and the banner returns.

Cloudflare Web Analytics

We also use Cloudflare Web Analytics, which counts page views in aggregate. Cloudflare adds its small script to our pages from its own network. It sets no cookies, does not use your browser's storage and, according to Cloudflare, does not fingerprint visitors. Before it sends anything, the script removes everything after ? and # from the address, so share links stay private there too. Because it does not follow individual people, it runs without asking.

Ads

The site shows ads served by Google AdSense. Google and its partners, as third-party vendors, use cookies to serve ads based on your previous visits to this site and to other websites. Google's use of advertising cookies lets it and its partners show you ads based on your visits to this site and/or other sites on the internet.

You can opt out of personalized advertising in Google's Ads Settings. You can also opt out of some third-party vendors' use of cookies for personalized advertising at www.aboutads.info/choices. Google explains how it uses information from sites that show its ads at policies.google.com/technologies/partner-sites.

If you are in the European Economic Area, the United Kingdom or Switzerland, you are asked for consent before advertising cookies are used, and you can change your choice at any time. If you decline, you may still see ads, but they are not personalized.

The ads never use your questions, readings, names or birth details.

Contact

Questions about this page or your data: hello@orbitarot.com.

Effective date: 8 October 2026. Last updated: October 12, 2026