Privacy policy

1. Data we do not store on our server

The following stays only in your browser (local storage) and is never transmitted to our server. We can neither see nor recover it.

• Test answers, scores and report contents
• Check-ins (life ladder, closeness, mood, WHO-5, PHQ-4) and painting responses
• Birth date and time entered for fortune readings (if you choose to remember them)
• Report display settings such as nickname and age range

2. Anonymous statistics collected automatically

To improve the Service, each page view records the path, display language, referring domain, device type (mobile, desktop, etc.) and time. We also count actions such as starting or finishing a test, saving a PDF or drawing tarot cards, without sending any answers or results.

To count a visitor once per day, we combine your IP address and browser information with a random value that changes daily and store only the resulting irreversible hash. The raw IP address is not stored, and the daily value is deleted after two days, so past records cannot be linked back to anyone. These statistics are kept for two years.

3. Data processed for security

When someone tries to log in to the admin area, we record the IP address, the username entered, the time and the result to prevent unauthorized access. An IP address that fails five times within an hour is added to a block list and can no longer access the Service. Login records are kept for one year; block-list entries are kept until removed. If you were blocked by mistake, please contact us from another network.

4. Contact messages

Messages sent through the contact page, and an optional email address for replies, are used only to respond to you and are deleted after one year.

5. Advertising and cookies

The Service may show Google AdSense ads. Third-party vendors, including Google, use cookies to serve ads based on your visits to this and other websites. See how Google uses advertising cookies at policies.google.com/technologies/ads.

You can turn off personalized ads in Google Ad Settings (adssettings.google.com) and opt out of other vendors at www.aboutads.info. You can also block or delete cookies in your browser.

Apart from the admin login cookie, the Service itself sets no cookies. Fonts load from the jsDelivr CDN, which may receive connection information in the process.

6. Sharing and processors

We do not sell or share personal data with third parties. The Service runs on a server we manage, and we do not outsource personal data processing, except where disclosure is legally required through due process.

7. Your rights and deleting records

You can delete on-device records at any time with "Delete all records on this device" in your report or by clearing site data in your browser. To access, correct or delete a contact message, please use the contact page. We do not knowingly collect personal data from children under 14.

8. Security measures

All traffic is encrypted with HTTPS, the admin password is stored only as an irreversible scrypt hash, and the admin area is protected by login and IP blocking.

9. Contact and changes

The person responsible for privacy is the operator (koreadev), reachable via the contact page. In Korea you may also contact the Personal Information Infringement Report Center (118, privacy.kisa.or.kr). Changes will be posted on this page with their effective date. Effective date: October 6, 2026.