Privacy.
Listen, sinner. The short version: Sinderella doesn't sell your data because she doesn't have it. She doesn't keep your email. She doesn't track you across the internet. She lights candles and writes longhand. That's the whole operation.
The long version
What we collect
Almost nothing. The site is statically rendered — Sinderella writes the pages, Cloudflare serves them, you read them. There are no accounts, no logins, no comment sections, no profiles.
The only places anything is "stored":
- Your browser's localStorage remembers if you've already pulled today's card in
the Reading Room. That's so the card doesn't reset on you when you reload. It's a single key (
sinderella:dailypull:<date>) that lives in your browser. It never leaves your device. We never see it. - Cloudflare server logs contain standard request data (IP, user-agent, URL, timestamp) that Cloudflare uses for DDoS protection and serving the site. We don't read them. They expire on Cloudflare's schedule.
What we don't collect
- Names, emails, addresses, phone numbers — we don't ask, we don't have a form for it.
- Birth dates, birth charts, or anything personal you might have typed into "Ask the Deck." That input is hashed in your browser to pick a card, and then it's gone. It never reaches a server.
-
Advertising cookies, Facebook pixel, or retargeting cookies. If you accept analytics, Google
Analytics sets its own cookies (
_ga,_ga_*) — but only for measuring site visits, not for targeting ads.
Analytics
We use two analytics tools:
- Cloudflare Web Analytics — cookieless, no fingerprinting, no cross-site tracking. It counts page views. It runs on every visit regardless of your cookie preference. Cloudflare's privacy policy: cloudflare.com/privacypolicy.
- Google Analytics 4 (GA4) — only loads if you click "Accept" on the cookie banner.
If you accept, it sets two cookies in your browser:
_ga(expires in 2 years) and_ga_*(session, expires in 2 days). These let Google tell us how many people visit and which pages are popular. IP anonymization is enabled. If you decline — or never decide — GA4 never loads and no GA cookies are set. Google's privacy policy: policies.google.com/privacy.
You can change your cookie preference at any time via the "Cookie preferences" link in the site footer. Clicking it clears your stored choice and shows the banner again.
Affiliate links
The Shop section contains Amazon affiliate links. When you click one, Amazon sets its own cookie to credit any purchase you make in the next 24 hours back to Sinderella. We don't see what you bought or who you are — we just see "someone clicked the Rider-Waite deck link and someone (maybe the same person, maybe not) bought something." See our affiliate disclosure.
If we ever start a newsletter
We don't have one yet. If we do, it'll be hosted by Beehiiv (or similar) and they'll have your email — not us. You'll be able to unsubscribe at the bottom of every issue, and your address won't be shared with anyone. We'll update this page when that happens.
Children
Sinderella's content has profanity in it (controlled — but real). It is intended for adults. If you're under 18, ask permission before signing up for anything we don't yet have.
Your rights
Since we don't have your data, there's nothing to delete, export, or correct. If that ever changes — if we add a newsletter, a comment system, anything — we'll add the relevant rights process to this page first.
Changes to this policy
We'll update this page when anything material changes. Last revised: June 6, 2026.
Contact
Sinderella does not take appointments. But if you have a privacy question that has to reach a human: open an issue at our GitHub repo or use the affiliate disclosure contact path.
— You're a beautiful disaster. I mean that as a kindness.