Loading report

CertScore.ai report

Loading report

The report is ready; we’re loading its retained findings and evidence.

tarotai.chat tracking, cookie, consent, and accessibility scan | CertScore.ai

Scanned from EU-IR

Coverage & timing · 14 sec

CMS / generator: Not identified
Declared version: Not available

Coverage

Scan scope: Single page
Pages scanned: 1
Scan region: EU-IR

Timing

Observation window: 14 sec

Started: Sep 16, 2026, 2:56:35 PM UTC
Completed: Sep 16, 2026, 2:56:54 PM UTC

Sep 16, 2026, 2:56:35 PM UTC

tarotai.chat

https://tarotai.chat/

Executive overview

Site assessment · Completed

100/ 100

Page score

0 priority issues

1 page scanned

Signal SnapshotStarting page

Consent platformNot identified

Not identified

No consent-platform identity was retained in the completed scan context.

Single page assessment

Overall, this scan did not surface a priority issue in the retained evidence. That is encouraging, but it is not a legal conclusion or proof that every site behavior was observed. Captured consent, runtime, policy, and transport signals should still be read alongside the underlying evidence before decisions are made. No checklist items were technically limited in this retained scan.

Services0

Hidden links—

Forms1

generic form
1 field · unknown

View forms ↗

Requests81

Cookies & storage1

Embedded frames0

Resource counts & classifications

Each resource is counted once. Services group requests, cookies/storage and frames.

Requests81

Non-essential: 0
Classification review: 0
Unknown purpose: 40
Contextual: 41
Essential: 0

Cookies & storage1

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 1
Essential: 0

Embedded frames0

Non-essential: 0
Classification review: 0
Unknown purpose: 0
Contextual: 0
Essential: 0

Priority review

Top issues on this page

0 issues

No priority issues were identified in the assessed evidence. Resource purposes may remain unclassified; inventory labels are separate from priority findings.

Page event timeline

Scan start

Public page observation began

13.62s

Observation end

Retained scan window closed

Supporting evidence

Services & Resources

Resource breakdowns

82 distinct resources = 81 requests + 1 cookies & storage. Services group these resources.

Type mix

Requests81
Cookies & storage1

Evidence mix

Unknown purpose40
Contextual42

Purpose mix

Unknown purpose82

Site relationship

First party82

Services and their member resources
	Type		Priority legend Inventory classifications are separate from priority findings. Unknown purpose means the retained evidence does not establish a purpose. Contextual records an observation; it does not establish necessity or consent exemption.Non-essentialClassification reviewUnknown purposeContextualEssential Shows the highest priority among the service’s resources. Expand the service to inspect individual resources.					Domain	Site relationship		JSON evidence
82		Unclassified resourcesOrigin not fully attributed		Unknown purpose	Policy disclosure · Unknown Unclassified resources Review scope: retained site policy from the homepage scan; this is a disclosure lookup, not a finding about compliance. https://tarotai.chat/privacy-policy Reviewed 2026-09-16T14:56:53.785Z · Complete retained text Evidence SHA-256: 0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1	Location details Unclassified resources Server locations describe the endpoint associated with the captured browser response. They may be CDN edges and do not establish subsequent processing or storage locations. United States 172.67.168.19 · Cloudflare, Inc. · AS13335 Approximate server country · Source: proxy connect iplocate Country database: 2026-09-07 Network database: 2026-09-07 81 of 81 request events assessed; 0 without a retained server IP. Provider headquarters: Unknown Transfer mechanism: Mechanism not assessed Corporate headquarters Provider unknown No verified headquarters reference available. Headquarters and network operator are distinct; neither establishes this site's contracting entity or subsequent data processing locations.	1.52s	tarotai.chat	First party	Captured on 1 page https://tarotai.chat/

0 distinct services, including child services

Forms & fields

1 form

Forms and fields observed on scanned pages. Expand a form to inspect its fields; submitted values are not included.

generic form

—

⚠Unrestricted free text

unknown

Destination not observed

https://tarotai.chat/

generic form 1

Observation reference: collection_form_0

unassociated controls · Captured 2026-09-16T14:56:44.940Z

Form confidence: 78% · direct
Evidence references: [{"refId":"ref_collection_surface_form_0","eventType":"main_document_dom_form","artifactId":"collection_surface_inventory_pre_consent"}]

Fields in generic form 1
Field	Element	Input type	Category	Field review	Required	Selection	State	Autocomplete	Confidence	Evidence refs
e.g.: How is my career development direction?	textarea	textarea	free text	⚠Unrestricted free text	No		Enabled	Not specified	90% · direct	[{"refId":"ref_collection_surface_0_0","eventType":"main_document_dom_control","artifactId":"collection_surface_inventory_pre_consent"}]

Detailed evidence

Evidence RatingsStarting page

29 rows

14positive15contextual

CertScore.ai can make mistakes. Verify all findings.

Consent mechanismNot observed in scan evidence; No operational consent surface was retained in the tested context.Not observed

JSON evidence

complete ConsentControlAssessment v2

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "consent_surface_observed",
  "coverageArea": "Consent mechanism",
  "evidenceState": "not_observed",
  "explanation": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "note": "Whether an actionable cookie/consent banner or CMP preference surface was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.consent_surface_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.consent_surface_observed"
  },
  "statusBasis": "No operational consent surface was retained in the tested context.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: complete ConsentControlAssessment v2"
    ],
    "consentSurfaceState": "not_observed",
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Retained evidence did not confirm an uncontaminated first-layer GDPR/ePrivacy cookie/CMP consent surface.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "consentControlLifecycleEvidence.surfaceClassification"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

CMP frameworkNot observed in scan evidence; Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.Not observed

JSON evidence

runtime capture completed

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cmp_framework_signal_observed",
  "coverageArea": "CMP framework",
  "evidenceState": "not_observed",
  "explanation": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "note": "Whether a consent-management framework, CMP vendor, or CMP runtime signal was observed in the pre-consent/public-web context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cmp_framework_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cmp_framework_signal_observed"
  },
  "statusBasis": "Runtime consent/CMP checks completed for the tested context and did not retain a CMP framework signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: runtime capture completed"
    ],
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "cmpFrameworkSignalObserved": false,
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

CMP framework is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Decline consent controlNot observed in scan evidence; No reject control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "reject_all_path_availability",
  "coverageArea": "Decline consent control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "note": "Whether a first-layer reject, necessary-only, decline, refuse, or equivalent refusal option was observed on a sufficiently retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.reject_all_path_availability.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.reject_all_path_availability"
  },
  "statusBasis": "No reject control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "missingEvidenceNeeded": [],
    "rejectControlObserved": false,
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface reject-path or post-reject comparison evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "rejectPathDepthAndAvailability",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Accept consent controlNot observed in scan evidence; No accept control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "accept_consent_control",
  "coverageArea": "Accept consent control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "note": "Whether a first-layer accept, accept-all, allow-all, or agree control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.accept_consent_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.accept_consent_control"
  },
  "statusBasis": "No accept control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "acceptControlObserved": false,
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface accept consent control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.acceptControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Options / settings / preferences controlNot observed in scan evidence; No options control was retained because no operational consent surface was retained.Not observed

JSON evidence

complete pre-interaction consent-surface inspection

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "options_settings_preferences_control",
  "coverageArea": "Options / settings / preferences control",
  "evidenceState": "not_observed",
  "explanation": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "note": "Whether a first-layer options, settings, preferences, or manage-preferences control was observed on the retained consent surface.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.options_settings_preferences_control.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.options_settings_preferences_control"
  },
  "statusBasis": "No options control was retained because no operational consent surface was retained.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "scoreEffect": "none",
    "evidenceRefs": [
      "Evidence: complete pre-interaction consent-surface inspection"
    ],
    "missingEvidenceNeeded": [],
    "consentSurfaceObserved": false,
    "optionsControlObserved": false,
    "selectedEvidenceReason": "Selected retained same-surface options/settings/preferences control evidence.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "limited",
    "selectedEvidenceArtifactId": "firstLayerConsentChoices.optionsControl",
    "consentOperationalSurfaceConcern": {
      "originKey": "consent.operational_surface.not_observed",
      "canonicalConcernKey": "runtime_artifact:consent.operational_surface.not_observed"
    },
    "firstLayerCookieConsentBannerObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Cookie notice / cookie policy availabilityObserved in scan evidence; A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.Observed

JSON evidence

cookie policy or cookie disclosure surface retained

Not confirmed: granular named-cookie inventory

Not confirmed: cookie preference interface

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "cookie_notice_policy_availability",
  "coverageArea": "Cookie notice / cookie policy availability",
  "evidenceState": "observed",
  "explanation": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "note": "Whether a cookie notice, cookie policy, cookie settings surface, or equivalent cookie disclosure surface was retained.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.cookie_notice_policy_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.cookie_notice_policy_availability"
  },
  "statusBasis": "A durable cookie disclosure surface was retained in the tested context; a granular named-cookie inventory or preference interface was not confirmed.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: cookie policy or cookie disclosure surface retained",
      "Not confirmed: granular named-cookie inventory",
      "Not confirmed: cookie preference interface",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "cookiePolicyUrls": [
      "https://tarotai.chat/privacy-policy"
    ],
    "cookiePolicyPresent": true,
    "cookieNoticeObserved": true,
    "observedPolicyTopics": [
      "cookies",
      "analytics",
      "advertising",
      "sale_or_share",
      "do_not_sell_or_share",
      "global_privacy_control"
    ],
    "missingEvidenceNeeded": [],
    "observedPolicyControls": [
      "global_privacy_control",
      "consent_withdrawal"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "preferenceInterfaceConfirmed": false,
    "granularCookieInventoryConfirmed": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Cookie notice / cookie policy availability is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Tracking & embedded content · Starting page

0 checks need review · 4 checks

Pre-consent non-essential trackingNo request met the tracking-classified threshold before a recorded consent action. Broader third-party requests or embedded services, when present, are reported separately and do not by themselves establish tracking.Not observed

JSON evidence

runtime capture completed

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "pre_consent_third_party_tracking",
  "coverageArea": "Pre-consent non-essential tracking",
  "evidenceState": "not_observed",
  "explanation": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "note": "Whether classified non-essential analytics, advertising, measurement, replay, or similar requests were observed before recorded consent. Site relationship and entity ownership are reported separately.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_third_party_tracking.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_third_party_tracking"
  },
  "statusBasis": "Runtime tracking checks completed for the tested context, and no eligible pre-consent non-essential tracking finding was projected.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: runtime capture completed"
    ],
    "trackerVendorCount": 0,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained pre-consent request/vendor timing evidence; storage evidence is evaluated separately.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "preconsentTimingEvidence": {
      "cookieOrStorage": {
        "preconsentCookieOrStorageExactTimingRetained": false,
        "preconsentCookieOrStorageTimedObservationCount": 0,
        "preconsentCookieOrStorageUntimedObservationCount": 0,
        "preconsentCookieOrStorageInitialInventoryObserved": false
      },
      "thirdPartyTracking": {
        "preconsentThirdPartyTrackingTimedObservationCount": 0
      }
    },
    "selectedEvidenceStrength": "moderate",
    "preconsentTrackingDetected": false,
    "selectedEvidenceArtifactId": "preConsentTrackingRequestEvidence.missing",
    "preconsentCookieOrStorageExactTimingRetained": false,
    "preconsentCookieOrStorageTimedObservationCount": 0,
    "preconsentCookieOrStorageUntimedObservationCount": 0,
    "preconsentCookieOrStorageInitialInventoryObserved": false,
    "preconsentThirdPartyTrackingTimedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

3rd party iframes before consentNot observed in scan evidence; Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.Not observed

JSON evidence

retained pre-consent iframe inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "third_party_iframe_pre_consent",
  "coverageArea": "3rd party iframes before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "note": "Whether retained scanner evidence showed known 3rd party iframe embeds before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.third_party_iframe_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.third_party_iframe_pre_consent"
  },
  "statusBasis": "Retained iframe inventory did not show known 3rd party iframe embeds before a recorded consent action.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent iframe inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "iframeObservationCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

3rd party iframes before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Social/media embeds or plugins loaded before consentNo eligible social/media provider request was observed before a recorded consent action; plain outbound social links are not counted for this row.Not observed

JSON evidence

retained pre-consent embedded-content inventory

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "social_media_embed_pre_consent",
  "coverageArea": "Social/media embeds or plugins loaded before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "note": "Whether retained network/runtime evidence showed a social, video, media embed, social pixel, or plugin provider loading before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.social_media_embed_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.social_media_embed_pre_consent"
  },
  "statusBasis": "Retained embedded-content checks did not show a social/media embed, plugin, widget, or pixel provider request before consent. Plain outbound links are not treated as evidence for this row.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "placeholderDetected": false,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "socialMediaEmbedObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Social/media embeds or plugins loaded before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Embedded third-party services before consentNo eligible 3rd party embedded content was observed before a recorded consent action.Not observed

JSON evidence

EmbeddedContentObservationCount: 0

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "embedded_content_pre_consent",
  "coverageArea": "Embedded third-party services before consent",
  "evidenceState": "not_observed",
  "explanation": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "note": "Whether retained scanner evidence showed iframe, embed, widget, or visibly integrated third-party services before a recorded consent action. This row does not represent all background analytics or network requests.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.embedded_content_pre_consent.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.embedded_content_pre_consent"
  },
  "statusBasis": "Iframe/runtime checks completed for the tested context and did not retain a concrete 3rd party embedded-content iframe before consent.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained pre-consent embedded-content inventory"
    ],
    "missingEvidenceNeeded": [],
    "preConsentIframeCount": 0,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "embeddedContentObservationCount": 0
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Embedded third-party services before consent is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Policy and transparency · Starting page

8 observed · 11 checks

Privacy notice link/surface discoveredObserved in policy-surface evidence; Privacy notice evidence was retained in public policy-surface evidence; policy surface: https://tarotai.chat/privacy-policy; 23883 policy-text characters retained.Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

Excerpt: Your Rights. u are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information. 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the "Last Updated" date at the top

Policy URL: https://tarotai.chat/privacy-policy

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "privacy_notice_availability",
  "coverageArea": "Privacy notice link/surface discovered",
  "evidenceState": "observed",
  "explanation": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "note": "Whether a reachable privacy notice or privacy policy link/surface was retained. This row does not by itself confirm that substantive notice content was available.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.privacy_notice_availability.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.privacy_notice_availability"
  },
  "statusBasis": "Privacy notice evidence was retained in public policy-surface evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: privacy policy surface retained",
      "Excerpt: Your Rights. u are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information. 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the \"Last Updated\" date at the top",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "policySurfaceSummary": {
      "scanStartedAt": "2026-09-16T14:56:40.164Z",
      "observedTopics": [
        "cookies",
        "analytics",
        "advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "california_privacy_rights",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "third_party_disclosures",
        "vendor_list",
        "consent_withdrawal",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "international_transfers",
        "dpo_contact",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "cookiePolicyUrls": [],
      "cookieDisclosures": [],
      "mentionedControls": [
        "global_privacy_control",
        "consent_withdrawal"
      ],
      "privacyPolicySize": {
        "url": "https://tarotai.chat/privacy-policy",
        "completeness": "complete",
        "documentFormat": "text",
        "compressedBytes": 181700,
        "measurementScope": "selected_usable_privacy_policy",
        "decompressedBytes": 181700
      },
      "privacyPolicyUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "cookie_disclosures": [],
      "policySectionCount": 18,
      "policySurfaceCount": 1,
      "cookiePolicyPresent": false,
      "scannedPageLanguage": "en",
      "privacyPolicyPresent": true,
      "policyPrimaryLanguage": "en",
      "policyLastUpdatedTexts": [
        "Last Updated: September 10, 2026"
      ],
      "policyTextCoverageMode": "section_targeted",
      "retainedPolicySections": [
        {
          "charEnd": 58949,
          "heading": "Free AI Tarot Reading TAROTAI.CHAT",
          "quality": "strong",
          "charStart": 10685,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Your intuitive Tarot AI: draw cards online by hand, ask questions, and chat deeper in the same AI tarot spread. READER Mystic Poet · Mira Vale SPREAD Three Card Question Focus ASK · 0 / 200 Daily Card Begin reading Online Tarot Process Frame your question, draw cards online, and begin an in-depth AI tarot reading. TAROTAI.CHAT offers an authentic online tarot experience built around the full 78 Rider-Waite deck. Type your query, then shuffle and draw cards online yourself. Your AI tarot interpretation maps directly to the specific cards you pull, their upright or reversed orientations, and their designated spread positions. Once TAROTAI.CHAT delivers your initial reading, you can ask follow-up questions within the same session without needing to draw cards online again. TAROTAI.CHAT features the complete 78 Rider-Waite deck, four spreads, and upright/reversed online tarot readings. AI Tarot Journal Log in to TAROTAI.CHAT to maintain your personal reading journal. Automatically archive daily online tarot draws, save pivotal spreads, and store personal reflections."
        },
        {
          "charEnd": 17708,
          "heading": "Frame your question, draw cards online, and begin an in-depth AI tarot reading.",
          "quality": "strong",
          "charStart": 12572,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "TAROTAI.CHAT offers an authentic online tarot experience built around the full 78 Rider-Waite deck. Type your query, then shuffle and draw cards online yourself. Your AI tarot interpretation maps directly to the specific cards you pull, their upright or reversed orientations, and their designated spread positions. Once TAROTAI.CHAT delivers your initial reading, you can ask follow-up questions within the same session without needing to draw cards online again. TAROTAI.CHAT features the complete 78 Rider-Waite deck, four spreads, and upright/reversed online tarot readings. AI Tarot Journal Log in to TAROTAI.CHAT to maintain your personal reading journal. Automatically archive daily online tarot draws, save pivotal spreads, and store personal reflections. Six AI Tarot Reader Personas Switch seamlessly between six distinct Tarot AI reading styles to examine the same online tarot spread through varied interpretive tones and traditions. Online Tarot Conversation History Every spread and subsequent AI tarot dialogue remains fully archived, letting you revisit past reflections whenever you return to TAROTAI.CHAT. Use Cases"
        },
        {
          "charEnd": 31194,
          "heading": "When navigating uncertainty, find clarity on TAROTAI.CHAT",
          "quality": "strong",
          "charStart": 17708,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Relationship Clarity · Navigating Emotional Currents When relationship questions arise, use a Three-card online tarot spread to clarify perspectives. Ask follow-up questions to Tarot AI to explore specific card symbolism. Career Hurdles · Gaining Ground and Focus Facing workplace roadblocks or career choices? Draw cards online with a Celtic Cross spread to let Tarot AI map hidden challenges and potential paths. At a Crossroads · Weighing Potential Paths Torn between two directions? Draw cards online using the Five-card choice spread to compare symbolic trajectories with AI tarot and clarify your priorities. Morning Routine · Daily Card Reflection Draw a Single card online with your free AI tarot credits each morning to reflect on Rider-Waite archetypes and start your day with mindful intention. Four Steps to Your AI Tarot Reading 01 Frame your question Ask about love, career, or life decisions. The more focused your inquiry to the Tarot AI, the more relevant the symbolic insights—no sensitive personal details needed."
        },
        {
          "charEnd": 76858,
          "heading": "Privacy Policy TAROTAI.CHAT",
          "quality": "strong",
          "charStart": 58949,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Last Updated: September 10, 2026 1. Introduction Welcome to TAROTAI.CHAT (\"we,\" \"our,\" or \"us\"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered tarot reading service. By using TAROTAI.CHAT, you consent to the data practices described in this policy. 2. Information We Collect 2.1 Information You Provide Directly Account Information: Email address, username, and password hash (managed by better-auth; never stored in plain text) Tarot Reading Data: Your questions, selected cards, card positions, and conversation history with our AI tarot reader Billing and Credits data: Credits balances, Credits transactions, Stripe customer identifiers, Checkout session identifiers, payment status, and refund or support records Communications: Messages you send to us for support or feedback 2.2 Information Collected Automatically Technical Data: IP address, browser type and version, device type, operating system, screen resolution Usage Data: Pages visited, access timestamps, and technical request data processed in network and security logs Location"
        },
        {
          "charEnd": 59507,
          "heading": "1. Introduction",
          "quality": "strong",
          "charStart": 59094,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Welcome to TAROTAI.CHAT (\"we,\" \"our,\" or \"us\"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered tarot reading service. By using TAROTAI.CHAT, you consent to the data practices described in this policy."
        },
        {
          "charEnd": 65299,
          "heading": "3. How We Use Your Information",
          "quality": "strong",
          "charStart": 62467,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances, reconcile payments, and handle refund or support requests Send verification codes and important service notifications via email Analyze usage patterns in aggregated, de-identified form to improve user experience and service quality Prevent fraud, abuse, and ensure platform security Comply with legal obligations 3.2 Legal Basis for Processing (GDPR) For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve our services, prevent fraud, and ensure security, where such interests are not overridden by your data protection rights Legal Obligation: To comply with applicable"
        },
        {
          "charEnd": 63446,
          "heading": "3.1 Purposes of Use",
          "quality": "partial",
          "charStart": 62524,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances, reconcile payments, and handle refund or support requests Send verification codes and important service notifications via email Analyze usage patterns in aggregated, de-identified form to improve user experience and service quality Prevent fraud, abuse, and ensure platform security Comply with legal obligations"
        },
        {
          "charEnd": 64203,
          "heading": "3.2 Legal Basis for Processing (GDPR)",
          "quality": "strong",
          "charStart": 63446,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve our services, prevent fraud, and ensure security, where such interests are not overridden by your data protection rights Legal Obligation: To comply with applicable laws and regulations"
        },
        {
          "charEnd": 67768,
          "heading": "4.3 Data Retention",
          "quality": "strong",
          "charStart": 66861,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history. Deleting reading history removes history list records, but does not delete independent session records holding question context and interpretations. Logs and Technical Data: Network and security logs (including IP addresses and request headers) are retained by Cloudflare for security, routing, and operational troubleshooting. Residual Data: Following deletion of reading history records, independent session records and technical network logs may persist across operational infrastructure."
        },
        {
          "charEnd": 70913,
          "heading": "5. Third-Party Services and Data Sharing",
          "quality": "strong",
          "charStart": 67768,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "We use the following third-party service providers: 5.1 Infrastructure and Hosting Cloudflare Infrastructure: Cloud hosting (Cloudflare Workers), database storage (Cloudflare D1), and email delivery (Cloudflare Email Sending for verification codes and password resets). Cloudflare processes account data, reading records, and technical logs across its distributed global network. Cloudflare: Content delivery network, DDoS mitigation, and edge routing. Cloudflare processes IP addresses, request headers, and network logs for security and performance. For more information, see the Cloudflare Privacy Policy . 5.2 AI Services WaveSpeed: AI-powered tarot interpretations via API using default model google/gemini-3.7-flash. We send your questions, selected cards, and conversation context to generate responses. We do not intentionally attach direct identifiers like email or name, though submitted content may contain personal data. Review the WaveSpeed Privacy Policy . Stripe: Payment processing for Credits purchases. Stripe may process your email address, payment method details, billing metadata, payment status, and fraud-prevention signals. We do not store full card numbers on our servers. 5."
        },
        {
          "charEnd": 70244,
          "heading": "5.4 International Data Transfers",
          "quality": "strong",
          "charStart": 69671,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Some of our service providers, including AI infrastructure and payment providers, may process data outside of Japan or the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer"
        },
        {
          "charEnd": 70913,
          "heading": "5.5 When We Share Data",
          "quality": "strong",
          "charStart": 70244,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of our users or the public In connection with a business transfer (merger, acquisition, sale of assets), in which case the acquiring party will honor this Privacy Policy"
        },
        {
          "charEnd": 74161,
          "heading": "6. Your Rights and Choices",
          "quality": "strong",
          "charStart": 70913,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "6.1 General Rights You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive your data in a structured, machine-readable format Withdraw Consent: Withdraw consent for processing where we rely on consent Opt-Out: Unsubscribe from marketing communications (though we currently only send transactional emails) 6.2 GDPR Rights (for EEA Users) If you are located in the EEA, you also have the right to: Object: Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell Right to Delete: Request"
        },
        {
          "charEnd": 71817,
          "heading": "6.1 General Rights",
          "quality": "strong",
          "charStart": 70966,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive your data in a structured, machine-readable format Withdraw Consent: Withdraw consent for processing where we rely on consent Opt-Out: Unsubscribe from marketing communications (though we currently only send transactional emails)"
        },
        {
          "charEnd": 72283,
          "heading": "6.2 GDPR Rights (for EEA Users)",
          "quality": "partial",
          "charStart": 71817,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "If you are located in the EEA, you also have the right to: Object: Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority"
        },
        {
          "charEnd": 73469,
          "heading": "6.3 California/CCPA Rights",
          "quality": "strong",
          "charStart": 72283,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell Right to Delete: Request deletion of your personal information Right to Correct: Request correction of inaccurate personal information Right to Opt-Out: Opt-out of the sale or sharing of personal information (Note: We do NOT sell or share your personal information) Right to Limit: Limit the use of sensitive personal information Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights Do Not Sell or Share My Personal Information: We do not sell or share your personal information as defined by CCPA/CPRA."
        },
        {
          "charEnd": 75797,
          "heading": "9. Contact Us",
          "quality": "strong",
          "charStart": 75217,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line."
        },
        {
          "charEnd": 76150,
          "heading": "10.1 Automated Decision-Making",
          "quality": "partial",
          "charStart": 75850,
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "textExcerpt": "Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects."
        }
      ],
      "policyCookieDisclosures": [],
      "privacyPolicyDiscovered": true,
      "processingErrorObserved": false,
      "observedPolicyTopicHints": [
        "cookies",
        "analytics",
        "advertising",
        "sale_or_share",
        "do_not_sell_or_share",
        "global_privacy_control",
        "california_privacy_rights",
        "sensitive_personal_information",
        "profiling_or_automated_decision_making",
        "third_party_disclosures",
        "vendor_list",
        "consent_withdrawal",
        "data_retention",
        "controller_contact",
        "processing_purposes",
        "legal_basis",
        "recipients_or_vendor_categories",
        "data_subject_rights",
        "international_transfers",
        "dpo_contact",
        "supervisory_authority",
        "ai_features",
        "contact_privacy"
      ],
      "policyDocumentProvenance": [
        {
          "sourceUrl": "https://tarotai.chat/privacy-policy",
          "policyTitle": "Privacy Policy | TAROTAI.CHAT",
          "artifactRefs": [
            "policy_excerpt_2872f483",
            "policy_surface_text_2872f483"
          ],
          "effectiveDate": null,
          "observationId": "policy_surface_2872f483",
          "discoveryMethod": "guessed_common_path",
          "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
          "lastUpdatedText": "Last Updated: September 10, 2026",
          "detectedLanguage": "en",
          "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
          "targetRelationship": "target_controller",
          "translationApplied": false,
          "documentOwnerEntity": "tarotai.chat",
          "ownershipConfidence": 0.98,
          "translationTargetLanguage": null,
          "directlyLinkedFromScannedPage": false
        }
      ],
      "policy_cookie_disclosures": [],
      "article13DisclosureSignals": [
        {
          "source": "deterministic",
          "status": "partial",
          "confidence": 0.66,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "evidenceText": "on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO).",
          "disclosureType": "controller_contact",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "supportingContactContext": null,
          "selectedPolicySectionExcerpt": "... 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the \"Last Updated\" date at the top of this policy Your continued use of TAROTAI.CHAT after changes become effective constitutes your acceptance of the revised Privacy Policy. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO). For privacy matters, please contact us at the email address above. 10.3 Business Transfers If TAROTAI.CHAT is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the acquiring party continues to honor this Privacy Policy.",
          "selectedPolicySectionHeading": "Policy text context"
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "specific personal-data processing purpose",
          "evidenceText": "3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances,",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "processing_purposes",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_processing_purposes",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances,",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "processing legal-basis clause",
          "evidenceText": "3.2 Legal Basis for Processing (GDPR) For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "legal_basis",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_legal_basis",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "3.2 Legal Basis for Processing (GDPR) For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "personal-data retention period or criterion",
          "evidenceText": "4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_retention",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_retention",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.",
          "selectedPolicySectionHeading": "4.3 Data Retention",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "enumerated data-subject rights disclosure",
          "evidenceText": "6. Your Rights and Choices 6.1 General Rights You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "data_subject_rights",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_data_subject_rights",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "6. Your Rights and Choices 6.1 General Rights You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive",
          "selectedPolicySectionHeading": "6. Your Rights and Choices",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "international or cross-border transfer disclosure",
          "evidenceText": "When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer 5.5 When We Share Data We do NOT sell, rent, or share your personal",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "international_transfers",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_international_transfers",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer 5.5 When We Share Data We do NOT sell, rent, or share your personal",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "supervisory-authority complaint disclosure",
          "evidenceText": "Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "supervisory_authority",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_supervisory_authority",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy",
          "selectedPolicySectionHeading": "6. Your Rights and Choices",
          "sourceCandidateProductionCredit": false
        },
        {
          "source": "deterministic",
          "status": "observed",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "matchedTerm": "named recipient or meaningful recipient category",
          "evidenceText": "This data is subject to Google's Privacy Policy. 5.4 International Data Transfers Some of our service providers, including AI infrastructure and payment providers, may process data outside of Japan or the EEA.",
          "matchStrength": "equivalent",
          "matchedLocale": "en",
          "disclosureType": "recipients_or_vendor_categories",
          "evidenceSource": "gdpr_transparency_topic_candidate",
          "productionCredit": true,
          "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
          "classifierReasonCodes": [
            "matched_recipients_or_vendor_categories",
            "match_strength_equivalent",
            "variant_semantic_clause"
          ],
          "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "This data is subject to Google's Privacy Policy. 5.4 International Data Transfers Some of our service providers, including AI infrastructure and payment providers, may process data outside of Japan or the EEA.",
          "sourceCandidateProductionCredit": false
        }
      ],
      "policyTextExtractionHealth": {
        "policyUrls": [
          "https://tarotai.chat/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00025122472051249844,
          "policyTermCount": 14,
          "alphabeticWordRatio": 0.8483371559633027,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 152
        },
        "policyUrlRetained": true,
        "extractedTextLength": 23883,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "privacyPolicyEvidencePaths": [],
      "discoveredPrivacyPolicyUrls": [],
      "article13CoverageAssessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "policyTextEvidenceProjection": {
        "scanId": "90e76737-bc19-4523-871c-9dfe36217d71",
        "documents": [
          {
            "finalUrl": "https://tarotai.chat/privacy-policy",
            "artifactId": "policy_surface_text_2872f483",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/auxiliary/policy_surface_text_2872f483.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://tarotai.chat/privacy-policy",
            "observationId": "policy_surface_2872f483",
            "redirectChain": [
              "https://tarotai.chat/privacy-policy"
            ],
            "artifactSha256": "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 23883,
              "retainedSectionCount": 18,
              "extractedSectionCount": 54,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_2872f483.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 23929,
            "retainedTextChars": 23883,
            "documentFetchState": "fetched",
            "retainedTextSha256": "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "tarotai.chat",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 23883,
              "retainedTextChars": 23883
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "61f75e6734a62f5f1aa197d69fc7cc437abb5bd69dd2b4cc3ab67be0838e7f82",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "6572b2bd31dabc18f98e929aaf8e83b10b7ca371ecc2b966a0371dfba0b02ef7",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "bef9b1c27a28553f1e2c7977c697739ba9fe7e9df64d38fc4f553e7b206704fd",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "c1bdbfb85fe34d5a67d3936727df3a56d36a3ec2a996c7c3019a9b8377e48ad4",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "9ac42330fe14c5cbf517a2aa7aa69ee217094d2232e3c83641533b15e6a48ac7",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "d2e8124abe5c29b7491229647c7a969807b7de914face722d6e5dca5036879be",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "572beeb8902c0e85253ed9c96e7ee6947f2ba1981b772238e229cc99a18d32e5",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-16T14:56:53.785Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/CanonicalEvidenceBundle.json",
          "sha256": "f49fe78e4e88e98865c7f8036975bb76b886f42a12b387ed36e995fc12ad8a6d",
          "sizeBytes": 710008,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyEvaluationState": "fetched_usable",
      "legalFrameworkValidityMatches": [],
      "missingExpectedPolicySections": [
        "Your privacy controls",
        "Exporting and deleting your information",
        "Retaining your information",
        "Compliance and cooperation with regulators",
        "European requirements"
      ],
      "policy_text_extraction_health": {
        "policyUrls": [
          "https://tarotai.chat/privacy-policy"
        ],
        "nanoInvoked": false,
        "contractVersion": "certscore.policy-text-extraction-health.v2",
        "policyTextQuality": {
          "usable": true,
          "codeSignalCount": 0,
          "codeSymbolRatio": 0.00025122472051249844,
          "policyTermCount": 14,
          "alphabeticWordRatio": 0.8483371559633027,
          "accessChallengeSignalCount": 0,
          "naturalLanguageSentenceCount": 152
        },
        "policyUrlRetained": true,
        "extractedTextLength": 23883,
        "policySurfaceObserved": true,
        "detectedPolicyLanguage": "en",
        "minimumTextLengthRequired": 500,
        "policyTextExtractionStatus": "ok",
        "verifiedPolicyDocumentCount": 1,
        "detectedPolicyLanguageSource": "policy_surface",
        "supportedGdprTransparencyLocales": [
          "en",
          "de",
          "fr",
          "es",
          "it",
          "nl",
          "pl",
          "pt",
          "ru",
          "ja",
          "zh",
          "ar",
          "sv",
          "ro",
          "cs",
          "el",
          "hu",
          "da",
          "fi",
          "sk",
          "bg",
          "hr",
          "nb",
          "sl",
          "lt",
          "lv",
          "et",
          "uk",
          "tr",
          "fa",
          "vi",
          "id",
          "ko",
          "th",
          "he",
          "sr",
          "ca",
          "hi",
          "az",
          "gl"
        ],
        "gdprTransparencyLanguageSupported": true,
        "policyTextEvidenceProjectionStatus": "verified_complete",
        "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
      },
      "retainedPolicySectionHeadings": [
        "Free AI Tarot Reading TAROTAI.CHAT",
        "Frame your question, draw cards online, and begin an in-depth AI tarot reading.",
        "When navigating uncertainty, find clarity on TAROTAI.CHAT",
        "Privacy Policy TAROTAI.CHAT",
        "1. Introduction",
        "3. How We Use Your Information",
        "3.1 Purposes of Use",
        "3.2 Legal Basis for Processing (GDPR)",
        "4.3 Data Retention",
        "5. Third-Party Services and Data Sharing",
        "5.4 International Data Transfers",
        "5.5 When We Share Data",
        "6. Your Rights and Choices",
        "6.1 General Rights",
        "6.2 GDPR Rights (for EEA Users)",
        "6.3 California/CCPA Rights",
        "9. Contact Us",
        "10.1 Automated Decision-Making"
      ],
      "selectedPrivacyPolicyDocument": {
        "documentUrl": "https://tarotai.chat/privacy-policy",
        "observationId": "policy_surface_2872f483",
        "traversalDepth": 0,
        "parentSurfaceUrl": null,
        "parentObservationId": null,
        "selectionReasonCodes": []
      },
      "article13_coverage_assessments": [
        {
          "topic": "automated_decision_making_or_profiling",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "controller_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_retention",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "data_subject_rights",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "dpo_contact",
          "status": "insufficient_retained_evidence",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "policy_absence_coverage_preconditions_not_met",
            "typed_topic_coverage_diagnostic_missing_or_limited",
            "policy_document_content_coverage_incomplete"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "international_transfers",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "legal_basis",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "processing_purposes",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "recipients_or_vendor_categories",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        },
        {
          "topic": "supervisory_authority",
          "status": "observed",
          "sourceUrls": [
            "https://tarotai.chat/privacy-policy"
          ],
          "reasonCodes": [
            "row_specific_disclosure_observed"
          ],
          "coverageStatus": "insufficient",
          "policyDocumentIds": [
            "policy_surface_2872f483"
          ],
          "policyDocumentRoles": [
            "policy_document"
          ],
          "policyDocumentSha256": [
            "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
          ],
          "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
          "unresolvedMaterialPolicyChildUrls": []
        }
      ],
      "discoveredPrivacyPolicyDetails": [],
      "article13DisclosureTypesPartial": [
        "controller_contact"
      ],
      "discoveredPrivacyPolicyStatuses": [],
      "gdprTransparencyEvidenceProfile": "gdpr_transparency_multilingual_article13_v1",
      "policy_text_evidence_projection": {
        "scanId": "90e76737-bc19-4523-871c-9dfe36217d71",
        "documents": [
          {
            "finalUrl": "https://tarotai.chat/privacy-policy",
            "artifactId": "policy_surface_text_2872f483",
            "artifactUri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/auxiliary/policy_surface_text_2872f483.txt",
            "contentType": "text/html; charset=utf-8",
            "documentRole": "policy_document",
            "requestedUrl": "https://tarotai.chat/privacy-policy",
            "observationId": "policy_surface_2872f483",
            "redirectChain": [
              "https://tarotai.chat/privacy-policy"
            ],
            "artifactSha256": "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1",
            "documentFormat": "text",
            "limitationKeys": [
              "policy_section_inventory_bounded",
              "policy_section_text_bounded"
            ],
            "contentCoverage": {
              "status": "truncated",
              "limitationKeys": [
                "policy_section_inventory_bounded",
                "policy_section_text_bounded"
              ],
              "sourceTextChars": 23883,
              "retainedSectionCount": 18,
              "extractedSectionCount": 54,
              "retainedTableRowCount": 0
            },
            "artifactFileName": "policy_surface_text_2872f483.txt",
            "extractionStatus": "complete",
            "artifactSizeBytes": 23929,
            "retainedTextChars": 23883,
            "documentFetchState": "fetched",
            "retainedTextSha256": "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1",
            "targetRelationship": "target_controller",
            "documentOwnerEntity": "tarotai.chat",
            "ownershipConfidence": 0.98,
            "documentTextCoverage": {
              "status": "complete",
              "limitationKeys": [],
              "sourceTextChars": 23883,
              "retainedTextChars": 23883
            },
            "documentEvaluationState": "usable",
            "documentRoleReasonCodes": [
              "multiple_substantive_disclosure_signals_retained"
            ],
            "governingPolicySelection": {
              "rank": 1,
              "score": 85,
              "state": "primary",
              "reasonCodes": [
                "highest_ranked_eligible_governing_policy",
                "target_controller_document",
                "policy_content_coverage_truncated",
                "complete_policy_text_retention",
                "multiple_substantive_disclosure_signals_retained"
              ],
              "contractVersion": "governing_policy_selection.v1"
            },
            "artifactVerificationStatus": "verified",
            "gdprTransparencyTopicCoverageDiagnostics": [
              {
                "topic": "controller_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "processing_purposes",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "61f75e6734a62f5f1aa197d69fc7cc437abb5bd69dd2b4cc3ab67be0838e7f82",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "legal_basis",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "6572b2bd31dabc18f98e929aaf8e83b10b7ca371ecc2b966a0371dfba0b02ef7",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "recipients_or_vendor_categories",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "bef9b1c27a28553f1e2c7977c697739ba9fe7e9df64d38fc4f553e7b206704fd",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_retention",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "c1bdbfb85fe34d5a67d3936727df3a56d36a3ec2a996c7c3019a9b8377e48ad4",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "data_subject_rights",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "9ac42330fe14c5cbf517a2aa7aa69ee217094d2232e3c83641533b15e6a48ac7",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "international_transfers",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "d2e8124abe5c29b7491229647c7a969807b7de914face722d6e5dca5036879be",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "dpo_contact",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              },
              {
                "topic": "supervisory_authority",
                "reasonCodes": [
                  "row_specific_disclosure_observed",
                  "evidence_hash_binding_verified",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "observed",
                "sourceDocumentSha256": "42c859b589c8043df0fa5e13775e15385af262dea0682857b464c68982fe18d6",
                "evidenceSectionSha256": "572beeb8902c0e85253ed9c96e7ee6947f2ba1981b772238e229cc99a18d32e5",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated",
                "sectionExtractionMethod": "html_heading_hierarchy"
              },
              {
                "topic": "automated_decision_making_or_profiling",
                "reasonCodes": [
                  "row_specific_disclosure_not_confirmed",
                  "policy_content_coverage_truncated"
                ],
                "coverageState": "limited",
                "contractVersion": "gdpr_transparency_topic_coverage_diagnostic.v1",
                "evaluationState": "unknown",
                "documentRetentionState": "complete",
                "sectionExtractionState": "truncated"
              }
            ]
          }
        ],
        "generatedAt": "2026-09-16T14:56:53.785Z",
        "sourceBundle": {
          "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/CanonicalEvidenceBundle.json",
          "sha256": "f49fe78e4e88e98865c7f8036975bb76b886f42a12b387ed36e995fc12ad8a6d",
          "sizeBytes": 710008,
          "schemaVersion": "certscore.v2.alpha.1",
          "verificationStatus": "verified"
        },
        "limitationKeys": [
          "policy_section_inventory_bounded",
          "policy_section_text_bounded"
        ],
        "contractVersion": "certscore.policy-text-evidence-projection.v1",
        "projectionStatus": "verified_complete"
      },
      "privacyPolicyTextCharacterCount": 23883,
      "retainedCookiePolicyTextExcerpt": "",
      "validatedDisclosureTypesPartial": [
        "controller_contact"
      ],
      "article13DisclosureTypesObserved": [
        "processing_purposes",
        "legal_basis",
        "data_retention",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "recipients_or_vendor_categories"
      ],
      "retainedArticle13SectionEvidence": [
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "data_retention",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "4.3 Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.",
          "selectedPolicySectionHeading": "4.3 Data Retention"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "data_subject_rights",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "6. Your Rights and Choices. 6. Your Rights and Choices 6.1 General Rights You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive",
          "selectedPolicySectionHeading": "6. Your Rights and Choices"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "international_transfers",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "5.4 International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer",
          "selectedPolicySectionHeading": "5.4 International Data Transfers"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "supervisory_authority",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "6. Your Rights and Choices. Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy",
          "selectedPolicySectionHeading": "6. Your Rights and Choices"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "dpo_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "9. Contact Us. If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website:",
          "selectedPolicySectionHeading": "9. Contact Us"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "controller_contact",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "9. Contact Us. If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website:",
          "selectedPolicySectionHeading": "9. Contact Us"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "processing_purposes",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "extractionLimitation": "selected_policy_section_truncated_by_retention_limit",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "3. How We Use Your Information. 3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances, reconcile payments, and handle refund or support requests Send verification codes and important service notifications via email Analyze usage patterns in aggr",
          "selectedPolicySectionHeading": "3. How We Use Your Information"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "legal_basis",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "3.2 Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve our services, prevent fraud, and ensure security, where such interests are not overridden by your data protection rights Legal Obligation: To comply with applicable laws and regulations",
          "selectedPolicySectionHeading": "3.2 Legal Basis for Processing (GDPR)"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "recipients_or_vendor_categories",
          "evidenceSource": "deterministic",
          "signalObserved": "observed",
          "selectedEvidenceStrength": "strong",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "5.5 When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of our users or the public In connection with a business transfer (merger, acquisition, sale of assets), in which case the acquiring party will honor this Privacy Policy",
          "selectedPolicySectionHeading": "5.5 When We Share Data"
        },
        {
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "coverageArea": "automated_decision_making_or_profiling",
          "evidenceSource": "deterministic",
          "signalObserved": "not_confirmed",
          "extractionLimitation": "section_retained_without_row_specific_disclosure",
          "selectedEvidenceStrength": "limited",
          "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
          "selectedPolicySectionExcerpt": "10.1 Automated Decision-Making. Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects.",
          "selectedPolicySectionHeading": "10.1 Automated Decision-Making"
        }
      ],
      "retainedPrivacyPolicyTextExcerpt": "Privacy Policy | TAROTAI.CHAT DECK · WAITE · 78 · UPRIGHT + REVERSED Free AI Tarot Reading TAROTAI.CHAT Your intuitive Tarot AI: draw cards online by hand, ask questions, and chat deeper in the same AI tarot spread. READER Mystic Poet · Mira Vale SPREAD Three Card Question Focus ASK · 0 / 200 Daily Card Begin reading Online Tarot Process Frame your question, draw cards online, and begin an in-depth AI tarot reading. TAROTAI.CHAT offers an authentic online tarot experience built around the full 78 Rider-Waite deck. Type your query, then shuffle and draw cards online yourself. Your AI tarot interpretation maps directly to the specific cards you pull, their upright or reversed orientations, and their designated spread positions. Once TAROTAI.CHAT delivers your initial reading, you can ask follow-up questions within the same session without needing to draw cards online again. TAROTAI.CHAT features the complete 78 Rider-Waite deck, four spreads, and upright/reversed online tarot readings. AI Tarot Journal Log in to TAROTAI.CHAT to maintain your personal reading journal. Automatically archive daily online tarot draws, save pivotal spreads, and store personal reflections. Six AI Tarot Reader Personas Switch seamlessly between six distinct Tarot AI reading styles to examine the same online tarot spread through varied interpretive tones and traditions. Online Tarot Conversation History Every spread and subsequent AI tarot dialogue remains fully archived, letting you revisit past reflections whenever you return to TAROTAI.CHAT. Use Cases When navigating uncertainty, find clarity on TAROTAI.CHAT Relationship Clarity · Navigating Emotional Currents When relationship questions arise, use a Three-card online tarot spread to clarify perspectives. Ask follow-up questions to Tarot AI to explore specific card symbolism. Career Hurdles · Gaining Ground and Focus Facing workplace roadblocks or career choices? Draw cards online with a Celtic Cross spread to let Tarot AI map hidden challenges and potential paths. At a Crossroads · Weighing Potential Paths Torn between two directions? Draw cards online using the Five-card choice spread to compare symbolic trajectories with AI tarot and clarify your priorities. Morning Routine · Daily Card Reflection Draw a Single card online with your free AI tarot credits each morning to reflect on Rider-Waite archetypes and start your day with mindful intention. Four Steps to Your AI Tarot Reading 01 Frame your question Ask about love, career, or life decisions. The more focused your inquiry to the Tarot AI, the more relevant the symbolic insights—no sensitive personal details needed. 02 Draw cards online yourself Select a Single card, Three-card, Five-card choice, or Celtic Cross spread, then shuffle, reveal, and place cards from the 78 Rider-Waite deck. 03 Receive AI tarot insights and ask follow-ups Our Tarot AI analyzes orientations and spread positions. Continue asking follow-up questions in the same session without needing to draw cards online again. 04 Draw a free daily card No lengthy question needed—draw a Single card online anytime to check in with yourself and set a mindful morning tone. Login & Free Daily Credits Log in to draw cards online and claim your free daily AI tarot credits. Readings are for symbolic self-reflection and do not replace medical, legal, or financial advice. Draw Cards Online Now Monthly Subscription Plans Subscription Credits reset every billing period and do not roll over. Top-up Credits stay separate. Plus Crafted for daily reflection. US$3.99 Monthly 800 Credits / month Subscribe ~80 single-card readings First follow-up question per reading is free. Resets every billing cycle; unused credits do not roll over. Best for frequent use Pro Built for frequent and comprehensive guidance. US$9.90 Monthly 3000 Credits / month Subscribe ~300 single-card readings First follow-up question per reading is free. Resets every billing cycle; unused credits do not roll over. One-Time Purchase Plans Top-up credits do not reset with subscription billing cycles. Starter Light trial for quick insights. US$2.99 One-time purchase 120 Credits Select ~12 single-card readings First follow-up question per reading is free. Top-up credits do not reset with subscription billing cycles. Recommended Standard Ideal for occasional clarity. US$5.99 One-time purchase 360 Credits Select ~36 single-card readings First follow-up question per reading is free. Top-up credits do not reset with subscription billing cycles. Premium Flexible reserve for deeper exploration. US$10.99 One-time purchase 900 Credits Select ~90 single-card readings First follow-up question per reading is free. Top-up credits do not reset with subscription billing cycles. Explore Online Tarot AI tarot interpretations, classic spreads, and the complete 78 Rider-Waite deck. Love & Relationships Use a relationship spread to draw cards online and explore interpersonal dynamics, mutual expectations, and underlying emotional tensions with Tarot AI. Yes / No & Clarity Draw a Single card online tarot reading to pinpoint immediate focal points and receive direct symbolic clarity from our Tarot AI. Celtic Cross The definitive 10-card online tarot spread, interpreted by AI tarot to examine root causes, hidden obstacles, and prospective developments. Three-card Draw cards online in a Three-card layout to trace past origins, present momentum, and emerging patterns with Tarot AI guidance. Free Daily AI Tarot Log in to TAROTAI.CHAT to draw cards online and use your daily free AI tarot credits for a complete reading. Same-Reading Follow-ups Keep your active online tarot spread on the table and explore deeper card symbolism through follow-up conversations with Tarot AI. Online Tarot Spread Library Browse structured TAROTAI.CHAT layouts designed for two-path dilemmas, comprehensive overviews, and daily introspection. 78 Rider-Waite Card Guide Study full Major and Minor Arcana meanings, complete with upright and reversed symbolic guidance from our Tarot AI. AI Tarot Readers One spread, six distinct Tarot AI perspectives. TAROTAI.CHAT includes six unique reader lenses that provide multifaceted AI tarot commentary—from practical steps to symbolic inquiry—without altering the cards you draw online. Mystic Poet · Mira Vale Poetic & Insightful A senior tarot reader with poetic language, revealing truth through metaphors Sora the Star Gazer Gentle & Dreamlike A serene young guide who listens to your inner voice through starlit metaphors and soothing wisdom. Storyteller · Rowan Quill Story-rich & Atmospheric Depicts fate through ancient legends and imagery, creating emotional resonance Rational Seer · Julian Hart Rational & Profound An analytical master who confronts truth directly and inspires deep reflection Elegant Mentor · Iris Hale Divine & Resolute A senior tarot mentor of quiet composure, cutting through illusion with resolute clarity. Playful Confidante · Piper Brooks Playful Intuition · Free-Spirited A vibrant young Gypsy spirit dancing through the tarot cards. With sharp intuition and playful charm, she reads the symbols like an insightful best friend, bringing fresh perspective to your daily curiosities and heart matters. Common Inquiries Questions seekers bring to TAROTAI.CHAT. Relational Resonance · The Lovers In my current relationship, how can I better understand each other's feelings and find our rhythm together? Begin reading Career & Craft · Three of Pentacles Regarding my current career path, how can I clarify my focus and spot opportunities for growth? Begin reading Crossroads & Impasse · Two of Swords When considering my direction forward, how can I tune into my true desires and inner priorities? Begin reading Morning Focus · The Star Looking at my overall state and energy today, what mindset reminder should I keep in mind? Begin reading Kinship & Belonging · Ten of Cups In navigating my family relationships and communication, how can I better balance care with personal boundaries? Begin reading Material Grounding · Nine of Pentacles To build a stronger sense of security in life, where can I begin to improve my financial balance and rhythm? Begin reading Inner Contemplation · The Hermit Reconnecting with myself right now, what does my inner self most need to be understood and cared for? Begin reading Transitions & Momentum · The Chariot Facing potential changes in my life's pace and surroundings, how can I cultivate a grounded mindset to adapt with ease? Begin reading Frequently Asked Questions Frequently Asked Questions How does TAROTAI.CHAT generate AI tarot readings? – Our Tarot AI interprets the exact 78 Rider-Waite cards you draw online, accounting for upright or reversed orientations, spread positions, and your specific question, following the tone of your chosen reader. Is an account required to draw cards online with TAROTAI.CHAT? – Yes. Login is required to use TAROTAI.CHAT. Once logged in, you receive free daily credits to experience standard AI tarot readings. Which online tarot spreads are available on TAROTAI.CHAT? – We support Single card (1 card), Three-card (past-present-future, 3 cards), Five-card choice (two-path comparison, 5 cards), and Celtic Cross (10 cards), each interpreted by Tarot AI. How do same-reading follow-up questions work with Tarot AI? – After your initial online tarot reading is generated, you can ask follow-up questions directly in the same conversation. The system retains your active spread layout and dialogue history for deeper inquiry. Does TAROTAI.CHAT support upright and reversed cards when drawing cards online? – Yes. TAROTAI.CHAT uses the full 78 Rider-Waite deck with both upright and reversed orientations, enabling our AI tarot to offer nuanced, context-aware card interpretations. Can TAROTAI.CHAT readings replace professional advice? – No. Online tarot readings on TAROTAI.CHAT are strictly symbolic reflections intended for personal insight and self-reflection. They do not constitute medical, legal, psychological, or financial advice. TAROTAI.CHAT provides symbolic AI tarot readings intended for personal contemplation and introspection. Readings do not constitute medical, legal, financial, or professional advice. Ready to begin. Log in to TAROTAI.CHAT to write your question and draw cards online using your free daily AI tarot credits. Start Free AI Tarot Reading Privacy Policy TAROTAI.CHAT × ← Back to TAROTAI.CHAT Privacy Policy TAROTAI.CHAT Last Updated: September 10, 2026 1. Introduction Welcome to TAROTAI.CHAT (\"we,\" \"our,\" or \"us\"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered tarot reading service. By using TAROTAI.CHAT, you consent to the data practices described in this policy. 2. Information We Collect 2.1 Information You Provide Directly Account Information: Email address, username, and password hash (managed by better-auth; never stored in plain text) Tarot Reading Data: Your questions, selected cards, card positions, and conversation history with our AI tarot reader Billing and Credits data: Credits balances, Credits transactions, Stripe customer identifiers, Checkout session identifiers, payment status, and refund or support records Communications: Messages you send to us for support or feedback 2.2 Information Collected Automatically Technical Data: IP address, browser type and version, device type, operating system, screen resolution Usage Data: Pages visited, access timestamps, and technical request data processed in network and security logs Location Data: Approximate geographic location derived from IP address (country/region level) Log Data: Request IDs, error logs, session IDs, referrer URLs 2.3 Cookies and Tracking Technologies We use the following types of cookies: Essential Cookies: Required for authentication, security, and basic functionality (session management, login state) Website Analytics: We use self-hosted Umami and Google Analytics 4 to measure site traffic and feature performance. On public pages, these analytics services load by default without requiring click consent, and we do not provide analytics preference controls in the footer; however, they will not load if your browser has Do Not Track (DNT) or Global Privacy Control (GPC) enabled. We do not perform screen or session recordings, and we do not transmit your name, email address, Tarot questions, AI reading interpretations, private URLs, query parameters, or URL anchors to analytics services. Collected data is limited to public page paths, browser language, referring domains, and operational events including account registrations, readings, plan selections, and backend-verified payment confirmations. Google Analytics 4 may use analytics cookies. You can disable cookies through your browser settings, but this may affect your ability to use certain features (such as staying logged in). Important: Please do not include unnecessary sensitive personal information (such as health conditions, financial details, or identifying information about others) in your tarot reading questions. 3. How We Use Your Information 3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances, reconcile payments, and handle refund or support requests Send verification codes and important service notifications via email Analyze usage patterns in aggregated, de-identified form to improve user experience and service quality Prevent fraud, abuse, and ensure platform security Comply with legal obligations 3.2 Legal Basis for Processing (GDPR) For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve our services, prevent fraud, and ensure security, where such interests are not overridden by your data protection rights Legal Obligation: To comply with applicable laws and regulations 3.3 Use of AI and Content Processing AI tarot readings require an account login. When you submit questions for tarot readings, we send your input (questions, selected cards, and conversation context) to our AI infrastructure provider, WaveSpeed (using default model google/gemini-3.7-flash), to generate interpretations. We do not intentionally include direct identifiers (like your account email or name) in these requests, but the content you write may inherently contain personal information. We use these interactions to: Generate personalized tarot interpretations Maintain conversation context for follow-up questions Improve response quality through aggregated, de-identified analysis We do not share your reading content with advertisers. AI data retention and model training are governed by our provider's terms; please refer to the WaveSpeed Privacy Policy for information on their data practices. 4. Data Storage, Security, and Retention 4.1 Data Storage Location Your data is stored and processed using Cloudflare infrastructure, including Cloudflare Workers and Cloudflare D1 database storage, across Cloudflare's distributed network rather than within a single fixed geographic region. 4.2 Security Measures We implement industry-standard security measures including: Encryption in Transit: All data transmission uses HTTPS/TLS encryption Storage Security: Application data and database records are hosted within managed Cloudflare D1 infrastructure with access restricted to authorized operational services. Password Security: Passwords are managed by better-auth and stored as cryptographic hashes (never stored in plain text) Access Controls: Role-based access control and principle of least privilege Backup and Recovery: Data persistence relies on Cloudflare's distributed cloud infrastructure; independent automated backup schedules or recovery windows are not guaranteed. Security Monitoring: Regular security audits and vulnerability assessments While we strive to protect your data, no internet transmission or electronic storage is 100% secure. We cannot guarantee absolute security. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history. Deleting reading history removes history list records, but does not delete independent session records holding question context and interpretations. Logs and Technical Data: Network and security logs (including IP addresses and request headers) are retained by Cloudflare for security, routing, and operational troubleshooting. Residual Data: Following deletion of reading history records, independent session records and technical network logs may persist across operational infrastructure. 5. Third-Party Services and Data Sharing We use the following third-party service providers: 5.1 Infrastructure and Hosting Cloudflare Infrastructure: Cloud hosting (Cloudflare Workers), database storage (Cloudflare D1), and email delivery (Cloudflare Email Sending for verification codes and password resets). Cloudflare processes account data, reading records, and technical logs across its distributed global network. Cloudflare: Content delivery network, DDoS mitigation, and edge routing. Cloudflare processes IP addresses, request headers, and network logs for security and performance. For more information, see the Cloudflare Privacy Policy . 5.2 AI Services WaveSpeed: AI-powered tarot interpretations via API using default model google/gemini-3.7-flash. We send your questions, selected cards, and conversation context to generate responses. We do not intentionally attach direct identifiers like email or name, though submitted content may contain personal data. Review the WaveSpeed Privacy Policy . Stripe: Payment processing for Credits purchases. Stripe may process your email address, payment method details, billing metadata, payment status, and fraud-prevention signals. We do not store full card numbers on our servers. 5.3 Authentication Services Google OAuth: If you choose to log in with Google, we receive your Google account email, name, and profile picture. This data is subject to Google's Privacy Policy. 5.4 International Data Transfers Some of our service providers, including AI infrastructure and payment providers, may process data outside of Japan or the EEA. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer 5.5 When We Share Data We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of our users or the public In connection with a business transfer (merger, acquisition, sale of assets), in which case the acquiring party will honor this Privacy Policy 6. Your Rights and Choices 6.1 General Rights You have the following rights regarding your personal data: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion: Request manual processing and deletion of your account and associated data by contacting [email protected] Data Portability: Receive your data in a structured, machine-readable format Withdraw Consent: Withdraw consent for processing where we rely on consent Opt-Out: Unsubscribe from marketing communications (though we currently only send transactional emails) 6.2 GDPR Rights (for EEA Users) If you are located in the EEA, you also have the right to: Object: Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA): Right to Know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell Right to Delete: Request deletion of your personal information Right to Correct: Request correction of inaccurate personal information Right to Opt-Out: Opt-out of the sale or sharing of personal information (Note: We do NOT sell or share your personal information) Right to Limit: Limit the use of sensitive personal information Non-Discrimination: You will not receive discriminatory treatment for exercising your privacy rights Do Not Sell or Share My Personal Information: We do not sell or share your personal information as defined by CCPA/CPRA. 6.4 How to Exercise Your Rights To exercise any of these rights, please contact us at [email protected] . We will: Respond to your request within 30 days (or as required by applicable law) Verify your identity before processing requests (to prevent unauthorized access) Provide the requested information or action free of charge for the first request (subsequent requests may incur a reasonable fee) For verification, we may ask you to confirm your email address or provide additional identifying information. 7. Children's Privacy TAROTAI.CHAT is not intended for users under 13 years of age (or the minimum age required in your jurisdiction, whichever is higher). We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately, and we will delete such information. 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the \"Last Updated\" date at the top of this policy Your continued use of TAROTAI.CHAT after changes become effective constitutes your acceptance of the revised Privacy Policy. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO). For privacy matters, please contact us at the email address above. 10.3 Business Transfers If TAROTAI.CHAT is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the acquiring party continues to honor this Privacy Policy.",
      "validatedDisclosureTypesObserved": [
        "processing_purposes",
        "legal_basis",
        "data_retention",
        "data_subject_rights",
        "international_transfers",
        "supervisory_authority",
        "recipients_or_vendor_categories"
      ],
      "privacyNoticeAvailabilityObserved": true,
      "evaluatedPrivacyPolicySurfaceCount": 1,
      "discardedArticle13DisclosureSignals": [
        {
          "source": "deterministic",
          "confidence": 0.86,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "evidenceText": "independent session records and technical network logs may persist across operational infrastructure. 5. Third-Party Services and Data Sharing We use the following third-party service providers: 5.1 Infrastructure and Hosting Cloudflare Infrastructure: Cloud hosting (Cloudflare Workers), database storage (Cloudflare",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "recipients_or_vendor_categories"
        },
        {
          "source": "deterministic",
          "confidence": 0.9,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "evidenceText": "on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO).",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "dpo_contact"
        },
        {
          "source": "deterministic",
          "confidence": 0.76,
          "surfaceUrl": "https://tarotai.chat/privacy-policy",
          "evidenceText": "inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs.",
          "rejectReason": "insufficient_row_specific_terms",
          "disclosureType": "automated_decision_making_or_profiling"
        }
      ],
      "staleLegalFrameworkReferenceObserved": false,
      "policyEvidenceProvenanceContractVersion": "certscore.policy-evidence-provenance.v1",
      "gdprTransparencyProductionEvidenceEnabled": true,
      "gdprTransparencyProductionEvidenceDiagnostics": {
        "sourceCandidateCount": 7,
        "candidateDispositions": [
          {
            "topic": "international_transfers",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "legal_basis",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "data_retention",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "recipients_or_vendor_categories",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "processing_purposes",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "data_subject_rights",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          },
          {
            "topic": "supervisory_authority",
            "confidence": 0.86,
            "disposition": "accepted",
            "matchStrength": "equivalent",
            "matchedLocale": "en",
            "rejectionReason": null,
            "sourceObservationId": "policy_surface_2872f483"
          }
        ],
        "acceptedCandidateCount": 7,
        "rejectedCandidateCount": 0,
        "discardedCandidateCount": 0,
        "diagnosticCandidateCount": 0,
        "productionCreditSignalCount": 7
      }
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Legal basis disclosurePolicy text included matching disclosure evidence: "Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

3.2 Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve

Matched disclosure snippet: 3.2 Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "legal_basis_disclosure_observed",
  "coverageArea": "Legal basis disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a canonical legal-basis disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.legal_basis_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.legal_basis_disclosure_observed"
  },
  "statusBasis": "Legal basis disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Legal basis disclosure",
      "Excerpt: 3.2 Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.98,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "3.2 Legal Basis for Processing (GDPR). For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds: Contract Performance: Processing necessary to provide the services you requested Consent: You have given explicit consent (e.g., for email communications, account creation) Legitimate Interests: To improve",
      "matchedLocale": null,
      "disclosureType": "legal_basis",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "policy_section_observed",
        "gdpr_legal_grounds_listed",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "legal_basis",
      "originKey": "gdpr_transparency.article13.legal_basis",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.legal_basis",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Retention disclosurePolicy text included matching disclosure evidence: "Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

4.3 Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.

Matched disclosure snippet: 4.3 Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request acc…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "retention_disclosure_observed",
  "coverageArea": "Retention disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "note": "Whether retained privacy-policy evidence included a data-retention disclosure signal.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.retention_disclosure_observed.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.retention_disclosure_observed"
  },
  "statusBasis": "Retention disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Retention disclosure",
      "Excerpt: 4.3 Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.97,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "4.3 Data Retention. 4.3 Data Retention Account Data: Retained while your account remains active, or until you request account deletion by contacting [email protected] Reading History: Retained until manually deleted from your history.",
      "matchedLocale": null,
      "disclosureType": "data_retention",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "policy_section_observed",
        "retention_periods_or_criteria_listed",
        "verified_retention_passage_selected",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_retention",
      "originKey": "gdpr_transparency.article13.data_retention",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_retention",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Controller/contact disclosureNot confirmed by scan evidence; No production-approved topic match was established. A retained candidate was rejected by the canonical projection and remains available for audit; this result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

unprojected controller/contact disclosure candidate

Excerpt: ... 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the "Last Updated" date at the top of this policy Your continued use of TAROTAI.CHAT after changes become effective constitutes your acceptance of the revised Privacy Policy. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include "GDPR Request" or "CCPA Request" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO). For privacy matters, please contact us at the email address above. 10.3 Business Transfers If TAROTAI.CHAT is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the acquiring party continues to honor this Privacy Policy.

Policy URL: https://tarotai.chat/privacy-policy

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "controller_contact_disclosure",
  "coverageArea": "Controller/contact disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "note": "Whether retained privacy-policy evidence included a controller, privacy contact, or equivalent contact point.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.controller_contact_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.controller_contact_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. A retained candidate was rejected by the canonical projection and remains available for audit; this result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "evidenceRefs": [
      "Evidence: unprojected controller/contact disclosure candidate",
      "Excerpt: ... 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the \"Last Updated\" date at the top of this policy Your continued use of TAROTAI.CHAT after changes become effective constitutes your acceptance of the revised Privacy Policy. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO). For privacy matters, please contact us at the email address above. 10.3 Business Transfers If TAROTAI.CHAT is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the acquiring party continues to honor this Privacy Policy.",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "retainedCandidate": {
      "source": "deterministic",
      "status": "partial",
      "confidence": 0.66,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO).",
      "disclosureType": "controller_contact",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
      "supportingContactContext": null,
      "selectedPolicySectionExcerpt": "... 8. Changes to This Privacy Policy We may update this Privacy Policy periodically to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by: Posting a prominent notice on our website Sending you an email notification (if you have an account) Updating the \"Last Updated\" date at the top of this policy Your continued use of TAROTAI.CHAT after changes become effective constitutes your acceptance of the revised Privacy Policy. 9. Contact Us If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: Email: [email protected] Website: https://tarotai.chat For GDPR-related inquiries from EEA users or CCPA inquiries from California residents, please include \"GDPR Request\" or \"CCPA Request\" in your email subject line. 10. Additional Information 10.1 Automated Decision-Making Our AI tarot readings involve automated content generation based on your inputs. These are for entertainment and self-reflection purposes only and do not constitute automated decision-making with legal or similarly significant effects. 10.2 Data Protection Officer Given the current scale of our operations, we have not appointed a formal Data Protection Officer (DPO). For privacy matters, please contact us at the email address above. 10.3 Business Transfers If TAROTAI.CHAT is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the acquiring party continues to honor this Privacy Policy.",
      "selectedPolicySectionHeading": "Policy text context"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "retained_candidate_not_production_projectable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00025122472051249844,
        "policyTermCount": 14,
        "alphabeticWordRatio": 0.8483371559633027,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 152
      },
      "policyUrlRetained": true,
      "extractedTextLength": 23883,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "controller_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_2872f483"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the controller identity and contact details; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Processing purposes disclosurePolicy text included matching disclosure evidence: "Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances,

Matched disclosure snippet: 3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Au…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "processing_purposes_disclosure",
  "coverageArea": "Processing purposes disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "note": "Whether retained privacy-policy evidence described the purposes for processing personal data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.processing_purposes_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.processing_purposes_disclosure"
  },
  "statusBasis": "Processing purposes disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Processing purposes disclosure",
      "Excerpt: 3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances,",
      "Locale: en",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "3.1 Purposes of Use We use your information for the following purposes: Provide and deliver our tarot reading services Authenticate your account and maintain security Store your reading history for future reference Generate AI-powered tarot interpretations by processing your questions and card selections Process Credits purchases, maintain Credits balances,",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "processing_purposes",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_processing_purposes",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
      "selectedPolicySectionHeading": null
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "processing_purposes",
      "originKey": "gdpr_transparency.article13.processing_purposes",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.processing_purposes",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Recipients/vendor categories disclosedPolicy text included matching disclosure evidence: "When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

5.5 When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of o

Matched disclosure snippet: 5.5 When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "recipients_vendor_categories_disclosure",
  "coverageArea": "Recipients/vendor categories disclosed",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "note": "Whether retained privacy-policy evidence described recipient, vendor, or 3rd party categories.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.recipients_vendor_categories_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.recipients_vendor_categories_disclosure"
  },
  "statusBasis": "Recipients/vendor categories disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Recipients/vendor categories disclosure",
      "Excerpt: 5.5 When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of o",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.95,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "5.5 When We Share Data. We do NOT sell, rent, or share your personal data with third parties for their marketing purposes. We may share data only in the following circumstances: With service providers listed above, solely to provide services to you If required by law, court order, or government request To protect our rights, property, or safety, or that of o",
      "matchedLocale": null,
      "disclosureType": "recipients_or_vendor_categories",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "policy_section_observed",
        "recipient_category_disclosed",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "recipients_or_vendor_categories",
      "originKey": "gdpr_transparency.article13.recipients_or_vendor_categories",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.recipients_or_vendor_categories",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Data subject rights disclosurePolicy text included matching disclosure evidence: "Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion... Data Portability... Withdraw...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion... Data Portability... Withdraw Consent... Object... Restrict Processing... Lodge a Complaint

Matched disclosure snippet: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion... D…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "data_subject_rights_disclosure",
  "coverageArea": "Data subject rights disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "note": "Whether retained privacy-policy evidence described data subject rights or a rights request path.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.data_subject_rights_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.data_subject_rights_disclosure"
  },
  "statusBasis": "Data subject rights disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Data subject rights disclosure",
      "Excerpt: Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion... Data Portability... Withdraw Consent... Object... Restrict Processing... Lodge a Complaint",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.98,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "Access: Request a copy of the personal data we hold about you Correction: Update or correct inaccurate data Deletion... Data Portability... Withdraw Consent... Object... Restrict Processing... Lodge a Complaint",
      "matchedLocale": null,
      "disclosureType": "data_subject_rights",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "policy_section_observed",
        "multiple_privacy_rights_listed",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "data_subject_rights",
      "originKey": "gdpr_transparency.article13.data_subject_rights",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.data_subject_rights",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

International transfer disclosurePolicy text included matching international-transfer disclosure evidence: "International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

5.4 International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer

Matched disclosure snippet: 5.4 International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, s…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "international_transfers_disclosure",
  "coverageArea": "International transfer disclosure",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "note": "Whether retained privacy-policy evidence described international transfers or transfer-relevant endpoint/vendor context.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.international_transfers_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.international_transfers_disclosure"
  },
  "statusBasis": "International transfer disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: International transfer disclosure",
      "Excerpt: 5.4 International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.96,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "5.4 International Data Transfers. When we transfer data internationally, we ensure appropriate safeguards are in place, such as: Standard Contractual Clauses (SCCs) approved by the European Commission Service providers' compliance with recognized data protection frameworks Encryption and security measures during transfer",
      "matchedLocale": null,
      "disclosureType": "international_transfers",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "mini_policy_semantic_review.v2",
      "classifierReasonCodes": [
        "policy_section_observed",
        "transfer_disclosure_present",
        "verified_retained_topic_evidence",
        "policy_review_invariants_applied_v1"
      ],
      "productionCreditProfile": "gdpr_transparency_mini_review_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "international_transfers",
      "originKey": "gdpr_transparency.article13.international_transfers",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.international_transfers",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

DPO contact point (where applicable)Not confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "dpo_contact_point_disclosure",
  "coverageArea": "DPO contact point (where applicable)",
  "evidenceState": "not_testable",
  "explanation": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "note": "Whether retained privacy-policy evidence identified a designated data protection officer or equivalent statutory DPO contact. A generic privacy mailbox is credited under controller/contact disclosure and does not by itself establish a DPO designation.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.dpo_contact_point_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.dpo_contact_point_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.",
        "Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00025122472051249844,
        "policyTermCount": 14,
        "alphabeticWordRatio": 0.8483371559633027,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 152
      },
      "policyUrlRetained": true,
      "extractedTextLength": 23883,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "dpo_contact",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_2872f483"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for an expressly designated Data Protection Officer and contact route, where applicable; retain the exact excerpt and source URL.
2Determine whether DPO designation is required separately. A generic privacy mailbox does not prove a designation.
3If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
4Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Supervisory authority complaintPolicy text included matching disclosure evidence: "Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint...[more evidence available]"Observed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: 6. Your Rights and Choices; update text: Last Updated: September 10, 2026.

Open policy source

Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy

Matched disclosure snippet: Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge…

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "supervisory_authority_complaint_disclosure",
  "coverageArea": "Supervisory authority complaint",
  "evidenceState": "observed",
  "explanation": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "note": "Whether retained privacy-policy evidence referenced a right to complain to a supervisory authority.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.supervisory_authority_complaint_disclosure.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.supervisory_authority_complaint_disclosure"
  },
  "statusBasis": "Supervisory authority complaint disclosure evidence was retained through adapter-approved multilingual GDPR Transparency Article 13 evidence.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: Supervisory authority complaint disclosure",
      "Excerpt: Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy",
      "Locale: en",
      "Policy URL: https://tarotai.chat/privacy-policy"
    ],
    "signalObserved": true,
    "article13Signal": {
      "source": "normalized_concern",
      "status": "observed",
      "confidence": 0.86,
      "surfaceUrl": "https://tarotai.chat/privacy-policy",
      "evidenceText": "Object to processing based on legitimate interests Restrict Processing: Request that we limit how we use your data Lodge a Complaint: File a complaint with your local data protection authority 6.3 California/CCPA Rights If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA) and California Privacy",
      "matchStrength": "equivalent",
      "matchedLocale": "en",
      "disclosureType": "supervisory_authority",
      "evidenceSource": "normalized_gdpr_transparency_article13_concern",
      "productionCredit": true,
      "classifierProvenance": "gdpr_transparency_topic_classifier.v1",
      "classifierReasonCodes": [
        "matched_supervisory_authority",
        "match_strength_equivalent",
        "variant_semantic_clause"
      ],
      "productionCreditProfile": "gdpr_transparency_multilingual_article13_v1",
      "selectedEvidenceStrength": "strong",
      "selectedPolicySectionUrl": "https://tarotai.chat/privacy-policy",
      "selectedPolicySectionHeading": "6. Your Rights and Choices"
    },
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "policyEvidenceAssessment": {
      "result": "disclosure_observed",
      "scoreEffect": "canonical_policy",
      "topicRelevance": "direct",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "sectionHeading": "6. Your Rights and Choices",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "moderate",
    "selectedEvidenceArtifactId": "coverage_policy",
    "gdprTransparencyArticle13Concern": {
      "state": "sufficient",
      "topic": "supervisory_authority",
      "originKey": "gdpr_transparency.article13.supervisory_authority",
      "canonicalConcernKey": "runtime_artifact:gdpr_transparency.article13.supervisory_authority",
      "regulatoryChecklistEligibility": "observed"
    }
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Automated decision-making / profiling disclosureNot confirmed by scan evidence; No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.Not confirmed

JSON evidence

Policy source

Captured page title: Privacy Policy | TAROTAI.CHAT — https://tarotai.chat/privacy-policy

Document heading: Free AI Tarot Reading TAROTAI.CHAT

Source policy language: en; banner/page language: en; translation applied: No.

Policy reached through: Guessed Common Path; directly linked from scanned page: No; retrieved during scan: 2026-09-16T14:56:51.860Z.

Section: Not retained; update text: Last Updated: September 10, 2026.

Open policy source

No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.

Full evidence JSON

{
  "assessmentStatus": "coverage_limitation",
  "checklistItemId": "automated_decision_making_profiling_disclosure",
  "coverageArea": "Automated decision-making / profiling disclosure",
  "evidenceState": "not_testable",
  "explanation": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "note": "Whether adapter-approved Article 13 evidence retained automated decision-making or profiling disclosure context for review.",
  "status": "Not confirmed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.automated_decision_making_profiling_disclosure.not_confirmed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.automated_decision_making_profiling_disclosure"
  },
  "statusBasis": "No production-approved topic match was established. This neutral result does not establish that the disclosure is absent.",
  "retainedEvidence": {
    "remediation": {
      "kind": "steps",
      "steps": [
        "Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.",
        "If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.",
        "Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording."
      ]
    },
    "signalObserved": "not_confirmed_canonical_projection_unavailable",
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "canonicalProjectionState": "normalized_concern_unavailable",
    "policyEvidenceAssessment": {
      "result": "extraction_incomplete",
      "scoreEffect": "none",
      "topicRelevance": "unknown",
      "contractVersion": "certscore.policy-topic-evidence-assessment.v1"
    },
    "policyEvidenceProvenance": {
      "sourceUrl": "https://tarotai.chat/privacy-policy",
      "policyTitle": "Privacy Policy | TAROTAI.CHAT",
      "artifactRefs": [
        "policy_excerpt_2872f483",
        "policy_surface_text_2872f483"
      ],
      "bannerLanguage": "en",
      "contractVersion": "certscore.policy-evidence-provenance.v1",
      "discoveryMethod": "guessed_common_path",
      "documentHeading": "Free AI Tarot Reading TAROTAI.CHAT",
      "lastUpdatedText": "Last Updated: September 10, 2026",
      "detectedLanguage": "en",
      "retrievalTimestamp": "2026-09-16T14:56:51.860Z",
      "targetRelationship": "target_controller",
      "translationApplied": false,
      "documentOwnerEntity": "tarotai.chat",
      "ownershipConfidence": 0.98,
      "directlyLinkedFromScannedPage": false
    },
    "selectedEvidenceStrength": "missing",
    "policyTextExtractionHealth": {
      "policyUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "nanoInvoked": false,
      "contractVersion": "certscore.policy-text-extraction-health.v2",
      "policyTextQuality": {
        "usable": true,
        "codeSignalCount": 0,
        "codeSymbolRatio": 0.00025122472051249844,
        "policyTermCount": 14,
        "alphabeticWordRatio": 0.8483371559633027,
        "accessChallengeSignalCount": 0,
        "naturalLanguageSentenceCount": 152
      },
      "policyUrlRetained": true,
      "extractedTextLength": 23883,
      "policySurfaceObserved": true,
      "detectedPolicyLanguage": "en",
      "minimumTextLengthRequired": 500,
      "policyTextExtractionStatus": "ok",
      "verifiedPolicyDocumentCount": 1,
      "detectedPolicyLanguageSource": "policy_surface",
      "supportedGdprTransparencyLocales": [
        "en",
        "de",
        "fr",
        "es",
        "it",
        "nl",
        "pl",
        "pt",
        "ru",
        "ja",
        "zh",
        "ar",
        "sv",
        "ro",
        "cs",
        "el",
        "hu",
        "da",
        "fi",
        "sk",
        "bg",
        "hr",
        "nb",
        "sl",
        "lt",
        "lv",
        "et",
        "uk",
        "tr",
        "fa",
        "vi",
        "id",
        "ko",
        "th",
        "he",
        "sr",
        "ca",
        "hi",
        "az",
        "gl"
      ],
      "gdprTransparencyLanguageSupported": true,
      "policyTextEvidenceProjectionStatus": "verified_complete",
      "policyTextEvidenceProjectionContractVersion": "certscore.policy-text-evidence-projection.v1"
    },
    "selectedEvidenceArtifactId": "coverage_policy",
    "article13CoverageAssessment": {
      "topic": "automated_decision_making_or_profiling",
      "status": "insufficient_retained_evidence",
      "sourceUrls": [
        "https://tarotai.chat/privacy-policy"
      ],
      "reasonCodes": [
        "policy_absence_coverage_preconditions_not_met",
        "typed_topic_coverage_diagnostic_missing_or_limited",
        "policy_document_content_coverage_incomplete"
      ],
      "coverageStatus": "insufficient",
      "policyDocumentIds": [
        "policy_surface_2872f483"
      ],
      "policyDocumentRoles": [
        "policy_document"
      ],
      "policyDocumentSha256": [
        "0248b4e12e6db5f6a204f6d262ce59690b40ceb4304c9a8e06cd531b025952c1"
      ],
      "assessmentContractVersion": "gdpr_transparency_article13_coverage_assessment.v1",
      "unresolvedMaterialPolicyChildUrls": []
    },
    "gdprTransparencyReportStatusContract": "observed_not_confirmed_no_match_found.v1"
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

1Review the governing policy section for the applicable automated decision-making or profiling disclosures; retain the exact excerpt and source URL.
2If relevant wording exists, record it for review and investigate extraction coverage. Unconfirmed evidence alone does not establish a missing disclosure.
3Retest the same policy version or record the revised version; verify that the extracted passage supports this specific topic, rather than nearby or unrelated wording.

Storage & tracking techniques · Starting page

0 checks need review · 3 checks

Non-essential pre-consent cookies/storageNo eligible cookie or browser-storage write was observed before a recorded consent action.Not observed

JSON evidence

Aggregate pre-consent storage count: 0

Assessment reconciliation: reconciled

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "pre_consent_cookies_storage",
  "coverageArea": "Non-essential pre-consent cookies/storage",
  "evidenceState": "not_observed",
  "explanation": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "note": "Whether non-essential cookies or browser storage were observed before a recorded consent action.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.pre_consent_cookies_storage.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.pre_consent_cookies_storage"
  },
  "statusBasis": "The retained pre-consent storage inventory was classified and did not contain eligible non-essential storage. Essential, consent-management, security, and functional storage remains contextual evidence only.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Aggregate pre-consent storage count: 0",
      "Assessment reconciliation: reconciled"
    ],
    "cookiesSeenCount": 0,
    "missingEvidenceNeeded": [],
    "selectedEvidenceReason": "Selected retained concrete cookie/storage evidence for storage timing; request-only tracking evidence is not used as storage proof.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "cookiesBeforeConsentCount": 0,
    "selectedEvidenceArtifactId": "preConsentCookieOrStorageEvidence.missing",
    "preConsentStorageAssessment": {
      "status": "classified_zero",
      "evidenceRows": [],
      "provenWriteCount": 0,
      "assessmentVersion": "pre-consent-storage-assessment-v1",
      "unclassifiedCount": 0,
      "reconciliationStatus": "reconciled",
      "snapshotPresenceCount": 0,
      "aggregateObservedCount": 0,
      "classifiedEssentialCount": 0,
      "classifiedNonEssentialCount": 0,
      "attributedPreConsentRecordCount": 0,
      "excludedFunctionalOrConsentCount": 0
    },
    "preConsentStorageAssessmentStatus": "classified_zero",
    "rowLevelEssentialityEvidenceRetained": false,
    "preConsentStorageClassificationLimitation": false,
    "preconsentCookieOrStorageExactTimingRetained": false,
    "eligibleNonEssentialCookieStorageFindingProjected": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Session replay signalNo eligible session replay or behavioral-recording vendor was observed in retained runtime evidence.Not observed

JSON evidence

retained session replay / fingerprinting coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "session_replay_fingerprinting_review",
  "coverageArea": "Session replay signal",
  "evidenceState": "not_observed",
  "explanation": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "note": "No eligible session replay, behavioral recording, or fingerprinting-like signal was observed in the tested context.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.session_replay_fingerprinting_review.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.session_replay_fingerprinting_review"
  },
  "statusBasis": "Runtime vendor/fingerprinting checks completed for the tested context, and no eligible replay or fingerprinting finding was projected.",
  "retainedEvidence": {
    "remediation": {
      "kind": "none",
      "steps": [],
      "message": "No remediation is established by this check alone. Retain its evidence and reassess after relevant changes."
    },
    "evidenceRefs": [
      "Evidence: retained session replay / fingerprinting coverage summary"
    ],
    "sessionReplayCount": 0,
    "missingEvidenceNeeded": [],
    "sessionReplayObserved": false,
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "sessionReplayRuntimeCoverageRetained": true,
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

No remediation is established by this check alone. Retain its evidence and reassess after relevant changes.

Device identification / fingerprinting signalNo eligible device-identification or fingerprinting signal was observed in retained runtime evidence.Not observed

JSON evidence

retained fingerprinting/browser API coverage summary

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "device_identification_fingerprinting_signal_observed",
  "coverageArea": "Device identification / fingerprinting signal",
  "evidenceState": "not_observed",
  "explanation": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "note": "Whether browser/device entropy, fingerprinting, or identifier-like device collection signals were observed in retained runtime evidence.",
  "status": "Not observed",
  "tone": "neutral",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.device_identification_fingerprinting_signal_observed.not_observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.device_identification_fingerprinting_signal_observed"
  },
  "statusBasis": "Runtime fingerprinting/device-identification checks completed for the tested context and did not retain an eligible signal.",
  "retainedEvidence": {
    "evidenceRefs": [
      "Evidence: retained fingerprinting/browser API coverage summary"
    ],
    "missingEvidenceNeeded": [],
    "fingerprintingObserved": false,
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "runtimeCaptureCompleted": true,
    "runtimeEvidenceRetained": true,
    "selectedEvidenceStrength": "missing",
    "selectedEvidenceArtifactId": "coverage_policy",
    "fingerprintingRuntimeCoverageRetained": true
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Device identification / fingerprinting signal is currently rated Not observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

GPC observation and comparison · Starting page

Observation complete

Bounded GPC observation completed. GPC was observed on the main-document request and browser property. The CMP's sale/sharing opt-out state was unavailable. No qualifying classified requests were observed in this bounded capture. Paired activity comparison: no observable response.

Site response: No observable response. The matched passive comparison did not observe a qualifying reduction in classified tracking activity with GPC.

Bounded observation: complete. 77 retained request attempts; 0 blocked before transmission. Scope: main document and retained HTTP requests.

CMP GPC signal: unknown. Visible acknowledgment: not observed in the supported search.

Sec-GPC: 1Main-document navigator.globalPrivacyControl: trueDelivery: verified · Coverage: complete77 retained request proofs

Signal	Baseline	GPC	Delta	Baseline only	Shared	GPC only
Cookies	0	0

Transport security · Starting page

5 positive · 5 checks

HTTPS delivery for scanned pagesObserved in scan evidence; The scanned page was served over HTTPS in the retained transport observation.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_https_delivery",
  "coverageArea": "HTTPS delivery for scanned pages",
  "evidenceState": "observed",
  "explanation": "Whether the retained scanned page was served over HTTPS.",
  "note": "Whether the retained scanned page was served over HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_https_delivery.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_https_delivery"
  },
  "statusBasis": "The scanned page was served over HTTPS in the retained transport observation.",
  "retainedEvidence": {
    "finalUrl": "https://tarotai.chat/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://tarotai.chat/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://tarotai.chat/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://tarotai.chat/",
      "https://tarotai.chat/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=tarotai.chat",
        "validTo": "Dec  8 05:06:49 2026 GMT",
        "inputUrl": "https://tarotai.chat/",
        "validFrom": "Sep  9 04:06:52 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTPS delivery for scanned pages is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Typed comparison evidence

{
  "assessment": {
    "contractVersion": "certscore.gpc-response-assessment.v3",
    "generatedAt": "2026-09-16T14:56:53.689Z",
    "status": "no_observable_response",
    "findingTitle": "No observable GPC response",
    "scoreEffect": "none",
    "legalInterpretation": "not_assessed",
    "comparison": {
      "comparable": true,
      "protocol": "passive_baseline_with_sec_gpc",
      "baselineArtifact": {
        "lane": "runtime_evidence",
        "sha256": "df09aaf35b9848cfd590ff586a5c7ed0d7810df77fb4dbaf4b04755507432576",
        "sizeBytes": 502818,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      },
      "gpcArtifact": {
        "lane": "gpc_observation",
        "sha256": "5ded414056a7f5ac5d96499afd28cda0927262b746767cc35e0220eb7edb4c34",
        "sizeBytes": 487614,
        "uri": "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/gpc_observation/CanonicalEvidenceBundle.json"
      },
      "enabledProof": {
        "secGpcHeaderValue": "1",
        "requestsWithSecGpc": 77,
        "requestEventIds": [
          "net_101",
          "net_103",
          "net_105",
          "net_107",
          "net_109",
          "net_11",
          "net_111",
          "net_113",
          "net_115",
          "net_117",
          "net_119",
          "net_121",
          "net_123",
          "net_125",
          "net_127",
          "net_129",
          "net_13",
          "net_131",
          "net_133",
          "net_135",
          "net_137",
          "net_15",
          "net_17",
          "net_19",
          "net_2",
          "net_206",
          "net_208",
          "net_21",
          "net_210",
          "net_212",
          "net_218",
          "net_220",
          "net_223",
          "net_226",
          "net_228",
          "net_23",
          "net_25",
          "net_27",
          "net_29",
          "net_31",
          "net_33",
          "net_35",
          "net_37",
          "net_39",
          "net_41",
          "net_43",
          "net_45",
          "net_47",
          "net_49",
          "net_5",
          "net_51",
          "net_53",
          "net_55",
          "net_57",
          "net_59",
          "net_61",
          "net_63",
          "net_65",
          "net_67",
          "net_69",
          "net_7",
          "net_71",
          "net_73",
          "net_75",
          "net_77",
          "net_79",
          "net_81",
          "net_83",
          "net_85",
          "net_87",
          "net_89",
          "net_9",
          "net_91",
          "net_93",
          "net_95",
          "net_97",
          "net_99"
        ],
        "navigatorGlobalPrivacyControl": true
      },
      "delivery": {
        "status": "verified",
        "baseline": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": false,
          "documentUrlSha256": "e0f3271e88af35abe609ce96d7bb3eac310a3f1db4f1c4d9febfe756b3518d67",
          "contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
          "capturedAtMs": 4438,
          "documentStartedAtMs": 1500,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "e0f3271e88af35abe609ce96d7bb3eac310a3f1db4f1c4d9febfe756b3518d67",
              "mainFrame": true,
              "navigatorValue": false
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        },
        "gpc": {
          "contractVersion": "certscore.gpc-signal-observation.v1",
          "expectedEnabled": true,
          "documentUrlSha256": "e0f3271e88af35abe609ce96d7bb3eac310a3f1db4f1c4d9febfe756b3518d67",
          "contextConfigSha256": "2c01f9f29c0e012648bf492ecade8fa330858be6cd066f749be47e8cad0c572e",
          "prototypeCaptureBinding": {
            "captureId": "c83cace1-3f3c-4ef8-b1dc-becd9e747491",
            "documentIdentitySource": "cdp_loader_id",
            "documentToken": "B707AA8BE62B490F02F81145CB15F514"
          },
          "prototypeSessionSha256": "5753d2ffe10c55061ceae0f59ec698694a00d7b30f4d2d6f85dc225e75c7af28",
          "capturedAtMs": 4454,
          "documentStartedAtMs": 1497,
          "frameCount": 1,
          "frames": [
            {
              "documentUrlSha256": "e0f3271e88af35abe609ce96d7bb3eac310a3f1db4f1c4d9febfe756b3518d67",
              "mainFrame": true,
              "navigatorValue": true
            }
          ],
          "workerCount": 0,
          "limitationKeys": []
        }
      },
      "coverage": {
        "status": "complete",
        "comparedThroughMs": 2938
      },
      "responseBasis": "no_qualified_reduction",
      "deltas": {
        "cookies": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "webStorage": {
          "baselineCount": 1,
          "gpcCount": 0,
          "countDelta": -1,
          "baselineOnly": [
            "https://tarotai.chat|sessionStorage|tarotai.analytics.pending.v1"
          ],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 1,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "trackers": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMeasurementActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "advertisingOrMarketingActivity": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        },
        "consentOrCmpBehavior": {
          "baselineCount": 0,
          "gpcCount": 0,
          "countDelta": 0,
          "baselineOnly": [],
          "gpcOnly": [],
          "shared": [],
          "baselineOnlyCount": 0,
          "gpcOnlyCount": 0,
          "sharedCount": 0,
          "samplesTruncated": false
        }
      },
      "evidenceRefs": [
        "net_11",
        "net_13",
        "net_15",
        "net_17",
        "net_19",
        "net_2",
        "net_21",
        "net_23",
        "net_25",
        "net_27",
        "net_29",
        "net_31",
        "net_33",
        "net_35",
        "net_37",
        "net_39",
        "net_41",
        "net_43",
        "net_45",
        "net_47",
        "net_49",
        "net_5",
        "net_51",
        "net_53",
        "net_55",
        "net_57",
        "net_59",
        "net_61",
        "net_7",
        "net_9",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/gpc_observation/CanonicalEvidenceBundle.json",
        "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/runtime_evidence/CanonicalEvidenceBundle.json"
      ],
      "limitationKeys": []
    },
    "observation": {
      "contractVersion": "certscore.gpc-bounded-observation.v1",
      "scope": "main_document_and_retained_http_requests",
      "status": "complete",
      "sourceSha256": "5ded414056a7f5ac5d96499afd28cda0927262b746767cc35e0220eb7edb4c34",
      "sessionSha256": "5753d2ffe10c55061ceae0f59ec698694a00d7b30f4d2d6f85dc225e75c7af28",
      "documentUrlSha256": "e0f3271e88af35abe609ce96d7bb3eac310a3f1db4f1c4d9febfe756b3518d67",
      "delivery": {
        "httpHeaderRetained": true,
        "mainNavigatorReadbackRetained": true,
        "fullContextVerified": true
      },
      "semanticProbe": "unavailable",
      "registration": {
        "basis": "current_recorded_state",
        "sale": "unknown",
        "sharing": "unknown",
        "cmpGpcSignal": "unknown",
        "causedByGpc": "not_established"
      },
      "acknowledgment": {
        "observed": false,
        "captureComplete": true
      },
      "requests": {
        "count": 77,
        "blockedBeforeTransmissionCount": 0,
        "complete": true,
        "fromMs": 1423,
        "documentCommittedAtMs": 2324,
        "throughMs": 4497,
        "classifiedCount": 0,
        "collectionCount": 0,
        "evidenceIds": [],
        "samplesTruncated": false
      },
      "limitationKeys": [],
      "scoreEffect": "none",
      "legalInterpretation": "not_assessed"
    }
  },
  "californiaPolicy": {
    "deductionPoints": 0,
    "framework": "california"
  },
  "evidenceRefs": [
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/runtime_evidence/CanonicalEvidenceBundle.json",
    "s3://certscore-v2-dag-local-artifacts-eu-west-1-199536052647/v2-dag-lambda/local/90e76737-bc19-4523-871c-9dfe36217d71/lanes/gpc_observation/CanonicalEvidenceBundle.json",
    "net_11",
    "net_13",
    "net_15",
    "net_17",
    "net_19",
    "net_2",
    "net_21",
    "net_23",
    "net_25",
    "net_27",
    "net_29",
    "net_31",
    "net_33",
    "net_35",
    "net_37",
    "net_39",
    "net_41",
    "net_43",
    "net_45",
    "net_47",
    "net_49",
    "net_5",
    "net_51",
    "net_53",
    "net_55",
    "net_57",
    "net_59",
    "net_61",
    "net_7",
    "net_9"
  ]
}

Valid SSL/TLS certificateObserved in scan evidence; Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://tarotai.chat/ presented CN=tarotai.chat certificate valid Sep 9–Dec 8, 2026.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_tls_certificate",
  "coverageArea": "Valid SSL/TLS certificate",
  "evidenceState": "observed",
  "explanation": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "note": "Whether a strict TLS probe verified the HTTPS origin certificate separately from the normal scanner runtime.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_tls_certificate.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_tls_certificate"
  },
  "statusBasis": "Retained certificate validation verified the HTTPS origin certificate. Retained certificate evidence: https://tarotai.chat/ presented CN=tarotai.chat certificate valid Sep 9–Dec 8, 2026.",
  "retainedEvidence": {
    "finalUrl": "https://tarotai.chat/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://tarotai.chat/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://tarotai.chat/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://tarotai.chat/",
      "https://tarotai.chat/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=tarotai.chat",
        "validTo": "Dec  8 05:06:49 2026 GMT",
        "inputUrl": "https://tarotai.chat/",
        "validFrom": "Sep  9 04:06:52 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Valid SSL/TLS certificate is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

HTTP redirects to HTTPSObserved in scan evidence; The explicit HTTP-origin probe redirected to HTTPS.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_http_redirect",
  "coverageArea": "HTTP redirects to HTTPS",
  "evidenceState": "observed",
  "explanation": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "note": "Whether an explicit HTTP-origin probe redirected to HTTPS.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_http_redirect.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_http_redirect"
  },
  "statusBasis": "The explicit HTTP-origin probe redirected to HTTPS.",
  "retainedEvidence": {
    "finalUrl": "https://tarotai.chat/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://tarotai.chat/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://tarotai.chat/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://tarotai.chat/",
      "https://tarotai.chat/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=tarotai.chat",
        "validTo": "Dec  8 05:06:49 2026 GMT",
        "inputUrl": "https://tarotai.chat/",
        "validFrom": "Sep  9 04:06:52 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

HTTP redirects to HTTPS is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Mixed contentObserved in scan evidence; No mixed-content HTTP subresources were retained for the scanned HTTPS page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_mixed_content",
  "coverageArea": "Mixed content",
  "evidenceState": "observed",
  "explanation": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "note": "Whether HTTP subresources were observed or blocked on a retained HTTPS page.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_mixed_content.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_mixed_content"
  },
  "statusBasis": "No mixed-content HTTP subresources were retained for the scanned HTTPS page.",
  "retainedEvidence": {
    "finalUrl": "https://tarotai.chat/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://tarotai.chat/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://tarotai.chat/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://tarotai.chat/",
      "https://tarotai.chat/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=tarotai.chat",
        "validTo": "Dec  8 05:06:49 2026 GMT",
        "inputUrl": "https://tarotai.chat/",
        "validFrom": "Sep  9 04:06:52 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Mixed content is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Observed form transportObserved in scan evidence; No insecure observed form transport was retained for the scanned page.Observed

JSON evidence

ref_transport_security

Full evidence JSON

{
  "assessmentStatus": "checked",
  "checklistItemId": "transport_security_form_transport",
  "coverageArea": "Observed form transport",
  "evidenceState": "observed",
  "explanation": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "note": "Whether observed forms resolved to HTTPS transport without submitting form data.",
  "status": "Observed",
  "tone": "warning",
  "pipeline": {
    "projectionStage": "coverage_policy",
    "concernPolicyKey": "gdpr_eprivacy_coverage.transport_security_form_transport.observed",
    "ws01EvidenceRole": "observed runtime signal identification, evidence capture, and logging",
    "wc01NormalizedConcernKey": "gdpr_eprivacy.coverage.transport_security_form_transport"
  },
  "statusBasis": "No insecure observed form transport was retained for the scanned page.",
  "retainedEvidence": {
    "finalUrl": "https://tarotai.chat/",
    "finalScheme": "https",
    "evidenceRefs": [
      "ref_transport_security"
    ],
    "httpProbeStatus": 200,
    "sampledPageUrls": [
      "https://tarotai.chat/"
    ],
    "httpProbeOutcome": "redirected_to_https",
    "httpProbeFinalUrl": "https://tarotai.chat/",
    "pageHttpsObserved": true,
    "tlsProbeAttempted": true,
    "formTransportCount": 1,
    "httpProbeAttempted": true,
    "validTlsCertificate": true,
    "httpProbeFinalScheme": "https",
    "httpRedirectsToHttps": true,
    "mixedContentObserved": false,
    "missingEvidenceNeeded": [],
    "httpProbeRedirectChain": [
      "http://tarotai.chat/",
      "https://tarotai.chat/"
    ],
    "selectedEvidenceReason": "Selected the strongest retained canonical coverage evidence available for this row.",
    "weakerArtifactsIgnored": [],
    "selectedEvidenceStrength": "moderate",
    "mixedContentObservedCount": 0,
    "selectedEvidenceArtifactId": "coverage_policy",
    "tlsCertificateObservations": [
      {
        "issuer": "CN=WE1, O=Google Trust Services",
        "subject": "CN=tarotai.chat",
        "validTo": "Dec  8 05:06:49 2026 GMT",
        "inputUrl": "https://tarotai.chat/",
        "validFrom": "Sep  9 04:06:52 2026 GMT",
        "validCertificate": true,
        "chainCertificateCount": 3
      }
    ],
    "insecureFormTransportObserved": false
  },
  "projectedFindings": [],
  "missingOrIncompleteSourceSignals": []
}

Correction steps

Observed form transport is currently rated Observed. No site remediation is indicated from this row alone; rerun after material site, policy, or tag changes.

Loading report

Executive overview

Single page assessment

Top issues on this page

Page event timeline

Services & Resources

Type mix

Evidence mix

Purpose mix

Site relationship

Policy disclosure · Unknown

Forms & fields

generic form 1

Detailed evidence

Controls and CMP context

0 checks need review · 4 checks

8 observed · 11 checks

0 checks need review · 3 checks

Observation complete

5 positive · 5 checks