Last updated: 30 October 2026
This notice is for residents of California and the other US states with consumer privacy laws (including Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah and Virginia). It adds to our Privacy Policy and also serves as our CalOPPA notice.
Your privacy choices
Global Privacy Control: no signal detected from this browser.
You can also opt out by emailing bo@botarot.com with the subject “Do Not Sell or Share”.
What we collect and why
| Category | Examples | Purpose | Disclosed to |
|---|---|---|---|
| Identifiers | Name, email address, IP address, online identifiers | Providing readings, orders and services, communication, security, analytics, advertising | Service providers; Google (advertising) |
| Customer records | Billing and delivery address, phone number | Orders and delivery | Payment processors, Printful, couriers |
| Commercial information | Readings, products and wallet top-ups bought | Orders, accounting | Payment processors, accountant |
| Sensitive personal information | Anything sensitive you choose to share in a reading question (for example health or relationships) | Only to provide your reading | Not sold or shared; never used to infer characteristics |
| Internet activity | Pages viewed, links clicked, device and browser data | Analytics, security, advertising | |
| Approximate geolocation | Location derived from IP address | Analytics, advertising, tax | |
| Inferences | Ad interests inferred by Google | Personalised advertising (if not opted out) |
Sources: you, your device and browser, and our service providers. Retention periods are listed in our Privacy Policy.
“Selling”, “sharing” and targeted advertising
We do not sell personal data for money. In the last 12 months we have allowed Google advertising cookies to collect identifiers, internet activity and approximate location in order to show personalised ads. Some state laws call this “selling”, “sharing” for cross-context behavioural advertising, or “targeted advertising”. You can opt out with the button above, through our cookie settings, or with Global Privacy Control. We do not knowingly sell or share the data of anyone under 16, and we never sell, share or use reading questions or other sensitive personal information to infer characteristics about you.
Your rights
- Know and access the personal data we hold, and get a portable copy
- Correct inaccurate data
- Delete your data
- Opt out of sale, sharing, targeted advertising and profiling
- Limit the use of sensitive personal information
- Not be discriminated against for using your rights
- Appeal our decision on your request (reply to our answer with “Appeal” in the subject; if we still refuse, you can contact your state Attorney General)
To make a request, email bo@botarot.com. We will confirm receipt within 10 business days and reply within 45 days (extendable once by 45 days if we tell you). We verify requests by matching the email address we hold. You can use an authorised agent, who must provide your signed permission. Financial incentives: any welcome or bonus wallet credit is not tied to your personal data, so we offer no financial incentive for data. Shine the Light (California Civil Code §1798.83): we do not share personal data with third parties for their own direct marketing.
CalOPPA
You can visit botarot.com anonymously. Our Privacy Policy is linked from every page. We honour Global Privacy Control; we do not respond to the older “Do Not Track” signal because it has no common standard. Third parties such as Google may collect information about your online activity over time and across sites when you visit us. We will post any changes to our privacy practices on this page and the Privacy Policy, with an updated date.
Email bo@botarot.com — Bo replies personally.