Privacy Policy
Last updated: 2026-09-25
1. Information We Collect
Moonlit Oracle (https://moonlitoracle.com) may collect the following information:
- Automatically collected: Cookies, IP address, browser type, pages visited, access time
- User-provided: Name (optional), birth date and gender, email (for account login and to deliver paid reading results)
- Third-party details: Compatibility and reunion readings ask for the other person's birth date and gender. These are used only to calculate that reading.
- Palm photo: A photo uploaded for a palm reading is sent for analysis only and is not stored on our servers.
- Payment information: Payments are processed through Ko-fi, PayPal, or PortOne (KakaoPay), and in-app purchases through Google Play. We do not store credit card details directly. We keep purchase records (product, payment method, purchase token) to manage access to what you bought.
- App identifiers (mobile app): Advertising ID (Google AdMob), Firebase app instance ID (usage analytics), and a push notification token (Firebase Cloud Messaging registration token). The push token is stored on our server and, if you are signed in, linked to your account.
2. How We Use Information
- Provide AI-powered tarot readings, fortune telling, and related services
- Improve service quality and user experience
- Manage daily free usage limits (cookie-based)
- Display advertisements (web: Google AdSense, app: Google AdMob)
- Send push notifications (daily fortune, decade-cycle change alerts)
- Analyze app usage (Firebase Analytics)
3. Third-Party Services
- Google AdSense: Personalized advertising. Google's Privacy Policy applies.
- OpenRouter/AI Models: AI reading generation. The inputs a reading needs (birth date, gender, name if given, your question, and for palm readings the uploaded photo) are sent to AI models. Email and payment details are never sent. We also exclude AI providers that train on or retain prompts.
- Google AdMob (app): Banner, interstitial and rewarded ads in the app. Uses the advertising ID and may show personalized ads. Google's Privacy Policy applies.
- Firebase (Google): Analytics (app usage) and Cloud Messaging (push notifications). Uses the app instance ID and the push token.
- Google Sign-In: If you sign in with Google we receive your name, email and account ID to create and sign in to your account.
- Google Play: In-app purchases. Our server confirms the purchase token with Google Play before granting access to a reading.
- Ko-fi · PayPal · PortOne (KakaoPay): Payment processing. Each provider's privacy policy applies to payment data.
- Vercel: Hosting and analytics.
4. Cookies
We use cookies for daily free usage tracking and session management. Our advertising partners (Google) may use cookies for personalized ads. You can disable cookies in your browser settings.
5. Data Retention
- Without an account: reading content is not stored on our servers.
- With an account: readings are kept so you can revisit them, and are deleted without undue delay when you delete your account or ask us to erase them.
- Palm photos: not stored — discarded after analysis.
- Push notification tokens: once you turn notifications off or uninstall the app and the token stops being valid, we stop sending to it; we delete it on request.
- Payment and transaction records: kept to manage access to what you purchased. Where Korean e-commerce law applies, records of contracts and withdrawal of subscription, and of payment and supply of goods, are retained for 5 years; records of consumer complaints and dispute resolution for 3 years.
To request deletion of your account and data, email osu355@gmail.com from the address you signed up with. After we verify it is you, we delete your account, your saved readings and any push notification token linked to your account, except items we are legally required to retain.
6. AI-Generated Content Disclosure
All readings, fortunes, dream interpretations, birth chart analyses, compatibility readings, and chat responses are generated by artificial intelligence for entertainment purposes only. They do not constitute professional counseling, medical, legal, or financial advice.
7. Your Rights
- Request access to, correction, or deletion of your personal data
- Opt out of marketing communications
- Disable cookies via browser settings
- In the app: turn push notifications off in your device settings, and reset or delete your advertising ID or opt out of personalized ads
- For EU/EEA users: rights under GDPR including data portability
8. Children's Privacy
Our service is not directed to children under 13. We do not knowingly collect personal information from children.
9. Contact
Privacy inquiries: osu355@gmail.com
10. Changes
We may update this policy as our service evolves. Changes will be posted on this page with an updated revision date.