Privacy.
Listen, sinner. The short version: Sinderella doesn't sell your data because she doesn't have it. She doesn't keep your email. She doesn't track you across the internet. She lights candles and writes longhand. That's the whole operation.
The long version
What we collect
Almost nothing. The site is statically rendered — Sinderella writes the pages, Cloudflare serves them, you read them. There are no accounts, no logins, no comment sections, no profiles.
The only places anything is "stored":
- Your browser's localStorage remembers if you've already pulled today's card in the Reading Room. That's so the card doesn't reset on you when you reload. It's a single key (
sinderella:dailypull:<date>) that lives in your browser. It never leaves your device. We never see it. - Cloudflare server logs contain standard request data (IP, user-agent, URL, timestamp) that Cloudflare uses for DDoS protection and serving the site. We don't read them. They expire on Cloudflare's schedule.
What we don't collect
- Names, emails, addresses, phone numbers — we don't ask, we don't have a form for it.
- Birth dates, birth charts, or anything personal you might have typed into "Ask the Deck." That input is hashed in your browser to pick a card, and then it's gone. It never reaches a server.
- Cookies that track you across other sites. (No advertising cookies, no Facebook pixel, no retargeting.)
Analytics
We use Cloudflare Web Analytics, which is privacy-respecting — no cookies, no fingerprinting, no cross-site tracking. It tells us which pages people read. That's it. Cloudflare's privacy details are at cloudflare.com/privacypolicy.
Affiliate links
The Apothecary section contains Amazon affiliate links. When you click one, Amazon sets its own cookie to credit any purchase you make in the next 24 hours back to Sinderella. We don't see what you bought or who you are — we just see "someone clicked the Rider-Waite deck link and someone (maybe the same person, maybe not) bought something." See our affiliate disclosure.
If we ever start a newsletter
We don't have one yet. If we do, it'll be hosted by Beehiiv (or similar) and they'll have your email — not us. You'll be able to unsubscribe at the bottom of every issue, and your address won't be shared with anyone. We'll update this page when that happens.
Children
Sinderella's content has profanity in it (controlled — but real). It is intended for adults. If you're under 18, ask permission before signing up for anything we don't yet have.
Your rights
Since we don't have your data, there's nothing to delete, export, or correct. If that ever changes — if we add a newsletter, a comment system, anything — we'll add the relevant rights process to this page first.
Changes to this policy
We'll update this page when anything material changes. Last revised: April 27, 2026.
Contact
Sinderella does not take appointments. But if you have a privacy question that has to reach a human: open an issue at our GitHub repo or use the affiliate disclosure contact path.
— You're a beautiful disaster. I mean that as a kindness.