Cookie & Storage Policy

Last updated: June 1, 2026

This policy explains how tarotogo (tarotogo.com) uses browser storage and cookies. We use the term "cookies" broadly to include HTTP cookies and similar technologies such as localStorage (which this app relies on heavily).

1. How to control your choices

When you first visit, a consent banner lets you Accept all, Reject non-essential, or Manage preferences. Your choice is stored in md_consent so we do not ask on every page load. You can change your mind anytime by clearing site data in your browser or contacting us.

Essential storage always runs — without it the app cannot remember your language, license, or journal.

2. Categories

Category	Purpose	Can you opt out?
Essential	Core app function: language, premium license cache, journal mirror, daily card, consent memory, visit counter for PWA prompt.	No — required for the service.
Analytics (optional)	Privacy-friendly visit statistics (e.g. Plausible or Umami). Loaded only after consent.	Yes — reject or turn off in Manage.
Advertising (optional)	Third-party ad cookies if we show ads (e.g. Google AdSense). Loaded only after consent. Never shown to Premium or remove-ads customers.	Yes — reject or turn off in Manage.

3. localStorage keys we use

Key	Category	What it stores	Retention
`md_consent`	Essential	Your cookie preferences (version, timestamp, analytics/ad flags).	Until you clear it or we bump the consent version.
`md_lang`	Essential	Your chosen language (en, es, ru, he, pt).	Until cleared.
`md_license`	Essential	Your premium access key (from checkout email link).	Until cleared or revoked.
`md_ent`	Essential	Cached subscription status (plan, expiry) for UI only — server re-verifies every paid call.	Until cleared or server revokes.
`md_journal`	Essential	Your reading journal (offline mirror; Premium syncs to our server).	Until cleared.
`md_journal_synced`	Essential	Flag that local journal was merged with server.	Until cleared.
`md_daily`, `md_streak`	Essential	Today's daily card and streak counter.	Until cleared.
`md_freeai_used`	Essential	Whether your one free AI reading was used on this device.	Until cleared.
`md_email`	Essential	Email you entered for daily-card signup (convenience).	Until cleared.
`md_visits`	Essential	Visit count for the optional PWA install prompt.	Until cleared.
`md_pwa_dismiss`	Essential	Whether you dismissed the install banner.	Until cleared.

We do not use third-party HTTP cookies on the main app unless you consent to Analytics or Advertising. Checkout redirects (Stripe, Lemon Squeezy, Polar, etc.) may set their own cookies on their domains — see their policies.

4. Third parties

Payment / Merchant of Record — Stripe, Lemon Squeezy, Polar, or similar at checkout (their cookies on their domain).
Cloudflare Workers — our API backend; short-lived IP data for rate limiting (see Privacy Policy).
Resend — transactional email (daily card, license recovery) if enabled.
Anthropic — AI readings are processed server-side via our Worker; your API key never reaches the browser.
Google AdSense (future, with consent) — ad cookies on free tier only.
Analytics provider (optional, with consent) — e.g. Plausible.

5. Contact

Questions about cookies or storage: johnny.bulker@gmail.com. See also our Privacy Policy.