Private by design.

Your reading

To create a reading, BoardroomTarot processes the question you enter, the cards you draw and the resulting interpretation. The question and spread are sent from the site to BoardroomTarot’s server-side reading service and to OpenAI to generate the reading.

BoardroomTarot also keeps the original question and the time it was submitted under a 30-day retention policy so the service owner can understand what visitors are asking. A daily deletion job removes records once they are more than 30 days old. This first-party record does not include optional context, cards, readings, interpretations, account details or IP addresses. It is held separately from analytics and is available only through a password-protected owner view.

Accounts and public activity

BoardroomTarot does not currently require an account, create a public profile or publish your questions and readings. The site does not currently provide a saved reading history.

Analytics and advertising

BoardroomTarot uses a Google tag to measure visits, progress through the reading flow and completed-reading conversions. It also uses Vercel Web Analytics to measure page views, visitors and the same reading-flow stages. These analytics events contain event names only—for example, that a question was submitted or a card was drawn. They do not include your question, optional context, card names, reading or interpretation, and your question is not used for advertising.

Google may use cookies or similar identifiers for measurement. Its handling of that data is governed by Google’s own policies and your browser or Google privacy settings.

Vercel Web Analytics is cookie-free and includes pages viewed and basic aggregated information about visits such as referrers, location and device or browser type. Questions, optional context, cards, readings and interpretations are not sent to Vercel Web Analytics or included in analytics event properties or URLs.

Service providers

The site is hosted on Vercel and uses OpenAI to generate readings. Those providers may process operational and request data under their own terms, policies and account settings.