Privacy Policy
Last updated: 2026-10-19
1. Information We Collect
Moonlit Oracle (https://moonlitoracle.com) may collect the following information:
- Automatically collected: Cookies, IP address, browser type, pages visited, access time
- User-provided: Name (optional), birth date and gender, email (for account login and to deliver paid reading results)
- Third-party details: Compatibility and reunion readings ask for the other person's birth date and gender. These are used only to calculate that reading.
- Palm photo: A photo uploaded for a palm reading is sent for analysis only and is not stored on our servers.
- Payment information: Payments are processed through Ko-fi, PayPal, or PortOne (KakaoPay), and in-app purchases through Google Play. We do not store credit card details directly. We keep purchase records (product, payment method, purchase token) to manage access to what you bought.
- Purchase statistics: when you buy a reunion reading we keep, with the purchase record, non-identifying grouped information to improve the service: your and the other person's age range (e.g. late 20s) and gender, the breakup situation and oracle you chose, and the first page you landed on and the kind of referral (search, social, etc.). Birth dates and names are not stored.
- Reading feedback: the reaction and optional one-line comment you leave at the end of a reading are used to improve readings. Comments are checked by an AI service (TypeSafe) for jokes, abuse and personal information; only comments you allow us to show may be published, anonymously, after we pick them. Please don't include names or contact details.
- App identifiers (mobile app): Advertising ID (Google AdMob), Firebase app instance ID (usage analytics), and a push notification token (Firebase Cloud Messaging registration token). The push token is stored on our server and, if you are signed in, linked to your account.
2. How We Use Information
- Provide AI-powered tarot readings, fortune telling, and related services
- Improve service quality and user experience
- Manage daily free usage limits (cookie-based)
- Display advertisements (web: Google AdSense, app: Google AdMob)
- Send push notifications (daily fortune, decade-cycle change alerts)
- Analyze app usage (Firebase Analytics)
3. Third-Party Services
- Google AdSense: Personalized advertising. Google's Privacy Policy applies.
- OpenRouter/AI Models: AI reading generation. The inputs a reading needs (birth date, gender, name if given, your question, and for palm readings the uploaded photo) are sent to AI models. Email and payment details are never sent. We also exclude AI providers that train on or retain prompts.
- Google AdMob (app): Banner, interstitial and rewarded ads in the app. Uses the advertising ID and may show personalized ads. Google's Privacy Policy applies.
- Firebase (Google): Analytics (app usage) and Cloud Messaging (push notifications). Uses the app instance ID and the push token.
- Google Sign-In: If you sign in with Google we receive your name, email and account ID to create and sign in to your account.
- Google Play: In-app purchases. Our server confirms the purchase token with Google Play before granting access to a reading.
- TypeSafe AI: quality checks on generated readings and screening of reading feedback. The generated reading text and your comment are sent; email, birth date and payment details are not.
- Ko-fi · PayPal · PortOne (KakaoPay): Payment processing. Each provider's privacy policy applies to payment data.
- Vercel: Hosting and analytics.
- PostHog: Website usage analytics, session replay and error tracking, used only to improve the service. Anything typed into form fields (birth date, name, email and so on) is masked before recording and never sent.
4. Cookies
We use cookies for daily free usage tracking and session management. Our advertising partners (Google) may use cookies for personalized ads. You can disable cookies in your browser settings.
5. Data Retention
- Without an account: reading content is not stored on our servers.
- With an account: readings are kept so you can revisit them, and are deleted without undue delay when you delete your account or ask us to erase them.
- Palm photos: not stored — discarded after analysis.
- Push notification tokens: once you turn notifications off or uninstall the app and the token stops being valid, we stop sending to it; we delete it on request.
- Payment and transaction records: kept to manage access to what you purchased. Where Korean e-commerce law applies, records of contracts and withdrawal of subscription, and of payment and supply of goods, are retained for 5 years; records of consumer complaints and dispute resolution for 3 years.
To request deletion of your account and data, email osu355@gmail.com from the address you signed up with. After we verify it is you, we delete your account, your saved readings and any push notification token linked to your account, except items we are legally required to retain.
6. AI-Generated Content Disclosure
All readings, fortunes, dream interpretations, birth chart analyses, compatibility readings, and chat responses are generated by artificial intelligence for entertainment purposes only. They do not constitute professional counseling, medical, legal, or financial advice.
7. Your Rights
- Request access to, correction, or deletion of your personal data
- Opt out of marketing communications
- Disable cookies via browser settings
- In the app: turn push notifications off in your device settings, and reset or delete your advertising ID or opt out of personalized ads
- For EU/EEA users: rights under GDPR including data portability
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children.
9. Contact
Privacy inquiries: osu355@gmail.com
10. Changes
We may update this policy as our service evolves. Changes will be posted on this page with an updated revision date.