Privacy

Without an account,Cartomant keeps nothing about you on its servers. Your readings and journal notes live only in your own browser, on the device you used, and are gone if you clear that browser’s storage.

With an account, your readings and journal notes are saved to your account so they follow you across your devices. That is the only reason the account exists.

• Your email address and a securely hashed password.
• The readings you draw: the cards, the spread, your question, the interpretation, and any follow-up conversation.
• Your private journal notes on a reading.

To write an interpretation and answer your follow-up questions, the cards you drew, your question, and your follow-up messages are sent to our AI provider (OpenRouter, which routes to the language model) to generate the response. This is the one place your reading content leaves Cartomant, and it happens whether or not you have an account.

If you use the app’s camera reading (photographing cards you drew yourself), that photo is sent to the same AI provider once, to identify the cards. The photo is not stored — Cartomant keeps only the cards you confirm, marked as a physical reading.

Your journal notes are never sent to the AI — they are yours alone, stored only so you can reread them.

• No advertising, and no selling or sharing of your data.
• No behavioral tracking or third-party analytics.
• Nothing is done with your data beyond running the app for you.

From your account page you can, at any time:

• Export everything Cartomant holds for you as a single JSON file.
• Delete your account, which permanently erases your email, every reading, and every journal note. This cannot be undone.

Data is kept until you delete it, and is encrypted in transit and at rest.

Questions about your data can go to privacy@cartomant.com.