Privacy Policy

Birth information and in-browser processing

Stella uses the birth date, time, and place you enter to calculate your astrological chart. The calculation runs in your browser. Stella does not directly submit the birth details from the form to its server or save them to an account.

If you select “Save details in this browser,” your birth details are kept in the browser’s local storage. Otherwise, they are held temporarily in session storage so you can continue viewing your result in the current tab.

For guardian-card selection, the browser sends only an already-derived Sun sign or the day’s Moon sign, personalization basis, local date and time zone — not the original birth details.

Information processed for guardian cards and the pass

A free-card request uses the local date, time zone, Sun or Moon sign, personalization basis, selected tone, and a random browser identifier. The identifier is hashed to keep the card stable for the day.

A pass purchase stores the recovery email, payment identifier and result, entitlement start, expiry and first-use times, the random identifier hash, and the theme, artwork variation and selected tone of cards archived while the pass is active.

The purchase ledger also records the versions of the Terms, Privacy Policy, and Withdrawal and Refund Policy shown before checkout, together with the consent time.

Birth date, birth time, birthplace and detailed chart values such as planetary longitude and houses are not sent or stored for guardian-card selection or payment.

The purchase email is used only for receipts and archive recovery, not marketing.

Checkout and reopen requests also use a one-way hash of your connecting IP address to prevent flooding and abuse. The raw IP address is not stored.

Retention of purchase data

A guest archive and email recovery are retained for one year after payment. Cards claimed into a Sobok account remain until you request deletion or delete the account.

A reopen link is usable once within 15 minutes of being sent, and is void once used or expired.

Under Korean e-commerce law we retain records of contracts and withdrawals for 5 years, records of payment and supply for 5 years, and records of consumer complaints or disputes for 3 years.

Raw IP addresses are not stored for checkout or recovery; a one-way hash is used only for short-term rate limiting.

Processing entrusted to others

Stella entrusts processing to the following, only as far as running the service requires: PortOne and its payment processor for payment integration and approval, Supabase for the database, Cloudflare for server and edge infrastructure, and Resend for reopen notification email.

Each processes data only within the scope entrusted to it, and we announce any change to these arrangements in this policy.

Some of these operate servers outside Korea: Cloudflare and Resend in the United States, while the Supabase database is in the Korea (Seoul) region. The categories and purposes transferred are those described above, retained for as long as the service is provided.

Cookies and advertising

Stella shows ads through Google AdSense on free screens. No ads are shown on pass checkout or recovery screens.

Third-party vendors, including Google, may use cookies to serve interest-based ads based on your prior visits to this and other sites.

You can opt out of personalized advertising at https://adssettings.google.com, and manage third-party advertising cookies at https://www.aboutads.info. Learn more about how Google uses advertising data at https://policies.google.com/technologies/ads.

Usage analytics

Stella may use Google Tag Manager and analytics tools to improve the service. Pages viewed, device and browser information, interactions within the service, cookies, or online identifiers may be processed under each provider’s policy.

The custom analytics events configured by Stella do not add your birth date, birth time, or birthplace as separate event fields, and purchase events do not carry the purchase email. A shared-result URL does contain birth details and may be processed as described under “Sharing results” below.

Sharing results

When you choose link sharing, the birth date, birth time or unknown-time status, and birthplace identifier needed to reproduce the result are encoded in the URL fragment after “#”. Encoding is not encryption.

Under the URI standard, a fragment is not sent to the web server in a normal page request. The complete link is still delivered to the share target you choose and to anyone who receives it, and scripts running on the shared-result page can access it. Share targets and analytics or advertising tools may process the URL under their own policies.

Shared links do not expire and cannot be revoked. Share only with people or services you trust. If you choose image sharing, the generated result image and accompanying share text are delivered to the target you select.

Deleting data held in your browser

Birth details saved in the browser are removed when you use “Delete saved” in the service or clear the site’s stored data. Temporary session-storage details are removed when the current tab session ends.

Recent guardian cards and guest-pass connection details may be kept in local storage in the same browser and are removed when you clear this site’s stored data. The purchase email is not saved in browser local storage.

Deleting details from your device does not invalidate links you already shared, and Stella cannot delete copies retained by a share target or recipient.

Anonymous comment board

Stella’s per-placement comment boards can be used without an account. When you post, the nickname you choose (optional) and the comment text are stored on Stella’s server, together with a one-way hash of your connecting IP address used only to prevent spam and abuse. The raw IP address is not stored, and birth details (date, time, place) are never stored with a comment.

This data is collected to run the board and to prevent flooding, spam, and abuse. The IP hash is deleted 90 days after your last activity, and comments you delete — or that are hidden after reports — are permanently removed 30 days later.

You can edit or delete your own comments with a delete key kept in your browser. If you lose it, contact us and an operator can remove the comment for you.

Your rights and how to exercise them

You may request access to, correction of, deletion of, or suspension of processing of your personal data. For a pass or card archive, write to sobok2026@gmail.com quoting the purchase email.

Deleting an archive also ends email recovery. Payment records required by law remain for the applicable period.

Privacy officer

Privacy officer: 곽태욱 · sobok2026@gmail.com · 010-9203-2837

For advice on a privacy complaint you may also contact the Korea Internet & Security Agency’s privacy centre (privacy.kisa.or.kr, 118) or the Personal Information Dispute Mediation Committee (kopico.go.kr, 1833-6972).

Children's privacy

Stella is not directed at collecting personal information from any specific age group. Where guardian consent is required, we follow applicable law.

The paid early-access pass may be purchased only by people aged 14 or over. If we learn of a purchase by someone under 14, we cancel the payment and delete the associated data.

Changes to this policy

We may update this policy to reflect changes in law or the service, and will post any changes on this page.