Your information should serve a clear purpose.

For a free tarot reflection, ASTARAZ should need as little information as possible. An account should be optional until a person wants to save or continue their experience.

• Anonymous session and technical data needed to operate the service.
• Account and contact information when a person chooses to create an account or contact ASTARAZ.
• A tarot question or reading history only when the person chooses to provide or save it.
• Birth details only for a future astrology feature and only after its purpose, controls, and retention are approved.
• Reader application information only for intake, communication, safety review, and future marketplace operations.

Questions, reading content, birth details, messages, identity documents, bank or tax information, and payment details should not be sent to product analytics, session replay, or ordinary logs.

The production service should provide understandable consent choices, withdrawal where consent is the basis, access or export, correction where applicable, and deletion of eligible information. Some records may need to be retained for a purpose that counsel must identify and explain.

TODO — Confirm the applicable jurisdiction(s), lawful bases, rights workflow, processor list, international-transfer position, retention schedule, backup expiry, legal-hold rules, and privacy contact.

No final age, minor, parental-consent, advertising, or reader-service policy is asserted in this scaffold. The public audience, product behavior, and any age controls must be reviewed together before launch.

TODO — Insert counsel-approved age and minor-safety policy only after it is implemented and tested.