Skip to content
ORAETAROT
中Log in

Personal Data Collection Notice

Effective date: 2026-11-07

ORAE 塔羅 ("we", "us") operates ORAE Tarot (https://orae.tw). In accordance with Articles 8 and 9 of the Personal Data Protection Act of the Republic of China (Taiwan) (the "PDPA"), we provide the following notice about the collection of your personal data. The purpose and category codes below follow the official classification of specific purposes and personal data categories published under the PDPA. For full details of how we handle data, please also read our Privacy Policy.

1. Data collector

  • Name: ORAE 塔羅, operator of ORAE Tarot
  • Contact email: server@orae.tw

2. Purposes of collection

We collect, process and use your personal data for the following specific purposes:

  • 069 Contracts, quasi-contracts and other legal relationships: account registration, sign-in and providing our free services under our agreement with you.
  • 090 Consumer and customer management and services: answering your questions and feedback and handling support requests.
  • 135 Information and communication services: providing online readings, fortunes, Tarot Academy, the journal, notes, share links and data export, and sending service emails such as verification and password reset messages.
  • 136 Information (communication) and database management: storing, managing and backing up your account data and personal records.
  • 137 Information and communication security and management: authentication, preventing abuse and unauthorized access, keeping systems secure and maintaining audit logs.
  • 157 Surveys, statistics and research analysis: producing de-identified or aggregated statistics about how the site is used, so that we can improve the service.

3. Categories of personal data

  • C001 Personal identifiers: email address, display name, password hash, account ID, Google account identifier (if you use Google sign-in), guest identifier, IP address, cookie identifiers, and sign-in and security verification records.
  • C011 Personal descriptions: optional descriptive details you choose to provide, such as a date of birth entered in an optional field on the site (never required).
  • C035 Leisure activities and interests: your preferences on the site, such as spreads you use often, favorite cards and articles, and language and display settings.
  • C132 Unclassified data: the questions you enter, the cards drawn, your journal entries and notes, and the content of messages you send us.

4. Period of use

From when you start using the site until the specific purposes no longer exist, you delete your account, or you ask us to delete your data. When you delete your account, your readings, journal, favorites and notes are deleted with it. The minimal records we must keep by law or for security, such as security and audit logs, are kept only for a limited, necessary period and then deleted or de-identified. Data held in encrypted backups is removed as the backups rotate.

5. Area of use

The area where we operate the site, the area where you are located, and the locations of the servers of the service providers we engage (including our cloud hosting provider Linode / Akamai and our email delivery service), which may be outside the Republic of China (Taiwan).

6. Recipients

  • Us, and the service providers we engage to help deliver the service (such as cloud hosting and email delivery), who are bound by confidentiality obligations.
  • Google, if you choose to sign in with Google.
  • People who have a share link that you deliberately created (limited to the content you chose to share).
  • Competent authorities, when required by law or when they make a request through due legal process.

7. Methods of use

Collection, processing, use and international transfer by automated or non-automated means, within the scope of the purposes above: for example, database storage and backup, display on web pages, email notifications and aggregated statistical analysis. Marketing is not one of our purposes of collection, and we never sell your personal data to any third party.

8. Your rights under Article 3 of the PDPA

You may exercise the following rights over your personal data:

  1. Inquire about and review your data
  2. Request a copy of your data
  3. Supplement or correct your data
  4. Ask us to stop collecting, processing or using your data
  5. Ask us to delete your data

You can view and edit your data, export it as JSON or PDF, or delete your account (password confirmation required) directly in Settings, or you can email server@orae.tw. To protect your data, we may first verify your identity. We will respond within the periods set by the PDPA, and we never charge a fee. Where Articles 10 and 11 of the PDPA or other laws allow or require it, we may decline a request or retain certain records, such as those we must keep by law.

9. If you choose not to provide data

Providing personal data is your choice:

  • Without an email address and password (or Google sign-in), you cannot create an account, but you can still use readings and learning features as a guest.
  • If you block essential cookies, you may not be able to stay signed in, keep your guest readings or use some features properly.
  • The journal and notes are optional features, and not using them does not affect anything else. What you write in a question is up to you; we suggest leaving out details that could directly identify you or anyone else.

10. Data obtained indirectly

If you sign in with Google, we obtain your account identifier, email address and name from Google. As required by Article 9 of the PDPA, we hereby inform you that the source of this data is Google. The purposes, data categories, period, area, recipients and methods of use, and your rights, are the same as described in this notice.