Privacy Policy

TaroTaper works inside Telegram: you do not create an account with us, and Telegram tells the bot who you are by your Telegram user ID. We keep your journal of readings and your settings on our server, so they are there whenever you open TaroTaper. Readings are written by DeepSeek's language model from your cards and your question. TaroTaper has no advertising and no analytics or tracking.

When you use the bot or open the Mini App, Telegram passes us your Telegram user ID, your first name, your username (if you have one) and the language of your Telegram app. Requests from the Mini App carry Telegram's signature, which we check to make sure they really come from you.

We store your user ID and your language. Your first name is used only to greet you in the Mini App and is not stored; your username is not used.

In our database, linked to your Telegram user ID, we store:

• Settings — your language, your time zone offset (so that your day starts at your midnight and reminders come at your hour), whether reminders are on and at what hour, and whether you have finished the introduction.
• Your journal — every reading: its type and date, the question you wrote (if any), the cards drawn, the reading text and the rating you gave it. Cards of the day from the earlier version of TaroTaper are kept in your journal as well.
• Progress and access — your streak and best streak, whether your free Three cards reading has been used, how many prepaid readings you have left and when TaroTaper+ ends.
• Payments — for each payment: the Telegram payment ID, what was bought, the amount in Stars, whether it was a subscription renewal, the date and, if it was refunded, the date of the refund.

When you ask for a reading, our server sends DeepSeek the cards drawn (their names, positions and whether they are reversed), the language of the reading and the question you wrote, if any. DeepSeek's model writes the text of the reading, which we show you and save in your journal.

We do not send DeepSeek your Telegram user ID, your name, your username or any other identifier. DeepSeek processes these requests on servers in the People's Republic of China. Please do not put in a question anything you would not want to share, such as health details or other people's names and contacts.

Readings and TaroTaper+ are paid with Telegram Stars. Payments are processed by Telegram; Stars themselves are bought from Telegram or through Apple or Google. We never receive your card number or other payment details, only the payment information listed above. A TaroTaper+ subscription is managed in Telegram, where you can cancel it at any time.

Reminders are off unless you turn them on. If you do, Telegram asks you to allow the bot to message you, and the bot then sends one message a day at the hour you chose, only if you have not drawn your card yet. You can turn reminders off with the /reminders command or in the Mini App's settings. If you block the bot, reminders are turned off automatically.

The Mini App sets no cookies and stores nothing for tracking or advertising. It loads Telegram's official Mini App script from telegram.org; its fonts and card images come from our own server.

Telegram

TaroTaper runs on Telegram, which also processes payments in Stars. Telegram's handling of your data is governed by its Privacy Policy (telegram.org/privacy).

Cloudflare

The bot, our reading service, the database and the Mini App run on Cloudflare (Workers, D1 and Pages). Data is encrypted in transit and processed on Cloudflare's global network, which may include data centers outside your country. Cloudflare's handling of data is governed by its Privacy Policy (www.cloudflare.com/privacypolicy).

DeepSeek

DeepSeek receives the cards, the language and your question to write a reading, and processes them on servers in the People's Republic of China. DeepSeek's handling of data is governed by its Privacy Policy (cdn.deepseek.com/policies/en-US/deepseek-privacy-policy.html).

No Analytics or Advertising

TaroTaper uses no analytics, advertising or tracking services.

• To give you the readings you ask for, keep your journal and provide what you bought — this is necessary to provide TaroTaper to you.
• To send reminders — only with your consent, which you give by turning them on and can withdraw at any time.
• To keep payment records, handle refunds and prevent abuse — on the basis of our legitimate interests and our legal obligations.

We keep your settings, progress and journal for as long as you use TaroTaper. If you ask us to delete them, we do so within 30 days. Payment records are kept for as long as needed to handle refunds and disputes and to meet accounting obligations. Our server does not keep logs of your requests, and its error messages contain no questions or readings.

TaroTaper is not directed at children under the age of 16, and we do not knowingly collect their data. If you believe a child has used TaroTaper, please contact us and we will delete their data.

We share data only with the services described above and only to run TaroTaper. We do not sell, rent or trade your data, and we do not share it for advertising. Because DeepSeek's servers are in the People's Republic of China and Cloudflare operates worldwide, your data may be processed in countries whose data protection laws differ from those of your country.

All connections — between Telegram, the Mini App, our server, our database and DeepSeek — are encrypted with HTTPS/TLS. Every request from the Mini App is checked against Telegram's signature, and our reading service accepts requests only from our own bot, not from the internet. Only the developer has access to the database.

You can ask us to show you the data we keep about you, to correct it, to send you a copy, or to delete your journal and the rest of your data. Write to us from the Telegram account you use with TaroTaper, or by email; we may ask you to confirm the request from that account. Questions about payments go to the /paysupport command in the bot. Blocking the bot stops reminders but does not delete your journal — to delete it, write to us. You also have the right to complain to the data protection authority in your country.

We may update this Privacy Policy from time to time. Any changes will be reflected on this page with an updated effective date. We encourage you to review this policy periodically.

If you have any questions or concerns about this Privacy Policy, please contact us at:

B.S.NikishinG@gmail.com · Telegram @nikibstudio