1. What we collect
- Sign-up: email address, nickname and password. The password is stored only as an irreversible hash, never in plain text.
- Community: the text of your posts and comments, with the times they were written and edited.
- Readings: birth date, birth time and gender. These are used to calculate the chart and are not stored in the server database. Charts you keep in your Saju box stay in your own browser (local storage).
- Cross-device restore: your Saju box encrypted in your browser with a recovery code you create. The server never sees that code and cannot decrypt the data on its own.
- Notifications: the push subscription endpoint issued by your browser, plus your language. No birth data or name is stored with it.
- Collected automatically: access logs, browser and device information, and cookies.
2. Why we use it
- Identifying members and keeping you signed in
- Showing community posts and confirming who wrote them
- Calculating charts, delivering readings and sending notifications
- Blocking spam and abuse and handling reports
- Improving the service from aggregate usage statistics
3. How long we keep it
- Account data: deleted immediately when you close your account, along with the posts and comments written from it.
- Sessions: deleted when they expire or when you sign out.
- Password reset links: unusable after 30 minutes or after a single use.
- Encrypted backups: destroyed when you delete them, or one year after they were last used.
4. Cookies
The Service uses cookies for the purposes below. You can block cookies in your browser, but signing in will not work correctly if you do.
- Remembering your language choice (NEXT_LOCALE)
- Keeping you signed in — the cookie holds a random token and the server stores only its hash.
- Advertising cookies — see section 5.
5. Advertising and third-party cookies
This site shows advertising through Google AdSense.
Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
You may opt out of personalised advertising by visiting Google Ads Settings (https://www.google.com/settings/ads). You can opt out of personalised advertising cookies from other participating vendors at https://www.aboutads.info/choices.
Visitors from the European Economic Area, the United Kingdom and Switzerland are asked for consent to advertising cookies through a consent management tool, and can change that choice at any time.
6. Processors and third-party services
The Service relies on the following providers.
- Vercel — hosting and access logs
- Neon — database for accounts and posts
- Google AdSense — advertising
- Google Fonts — web fonts
- Resend — password reset email delivery
- Kakao — KakaoTalk sharing (loaded only when you press the share button)
7. Your rights
You may access, correct or delete your personal data, or ask us to stop processing it, at any time. Nickname changes and account deletion are available directly on the My account page; send any other request to the contact address below and it will be handled without delay.
You can edit or delete your own community posts yourself.
8. Children
The Service does not accept sign-ups from children under 14. If we learn that data from a child under 14 has been collected, we delete it immediately.
9. Security measures
- Passwords are stored only as hashes, each with its own salt; the plain text is kept nowhere.
- Sessions are stored on the server as a hash of the cookie token, never the token itself.
- Repeated failed sign-ins lock the account for a period of time.
- All traffic is encrypted with HTTPS.
10. Changes to this policy
Any change is announced on this page before it takes effect, and the last-updated date above is revised.
11. Contact
Privacy questions and requests go to Contact address coming soon.