Website Privacy Policy

What we process and why

Account creation and the overseas transfer needed for it are separate required choices at signup. Email updates and sharing a selected profile with invited friends are optional. A separate choice is needed before a friend can use your birth details for a paid detailed compatibility reading. We use profile, reading, payment and support information when you ask for those services; statutory transaction records follow the applicable retention duty. GA4, Google Ads, X, Meta and TikTok automatically measure visits and qualifying actions, subject to browser privacy signals and saved provider refusals. The detailed items, periods and refusal routes appear below.

Account and profile — required signup choices

We use the sign-in identifier, supplied name or email, consent record and saved birth profile to open and maintain your account. Service records are held until withdrawal, then privately for 30 days before deletion.

Friend constellation — optional sharing

A reusable invite code and account connection are stored when you use this feature. After acceptance, connected friends see only the alias of your selected profile and its calculated Sun sign. Using its birth details for a paid detailed compatibility reading requires your separate permission. You can remove the connection; details and refusal routes appear below.

Requested AI service

We use birth-profile inputs, calculated astrology details and words you type to generate a reading, daily fortune or chat reply. Finished readings and profile-bound fortunes remain with the account until its deletion; a temporary chat retry record expires after 24 hours.

Purchase and statutory duty

We use account, order reference, product, amount and payment status to deliver and refund what you bought. Service orders close with the account; the minimum contract and payment evidence required by Korean law is retained separately for five years.

Optional email choice

We keep the optional choice and its change time with your account; the sign-in email, if available, is the potential delivery address. No marketing email delivery is currently connected. You may withdraw the choice on My page.

Site and advertising measurement

Visit and selected service events are measured automatically, including before signup. Browser Do Not Track or Global Privacy Control signals and existing provider refusals stop the relevant measurement. Contact privacy@duckgustudio.com to request withdrawal or deletion.

Reading this site

Lodestar / Duckgu Studio publishes this website. Notes saved in earlier versions, saved birth profiles and unsent chat drafts may remain in browser storage. None are automatically attached to AI conversations. The site shows no ads. Analytics and ad measurement run automatically as described below, subject to browser privacy signals and saved provider refusals.

Browser storage remains until you clear it in Profile or through your browser settings. Clearing browser data, using private browsing, or changing browsers can remove it. It does not sync to the iOS app.

Hosting and technical information

The site is delivered through Google Firebase Hosting and Cloud Run. Serving and protecting pages can involve technical request information such as IP address, browser details, requested URLs, and server logs. Provider processing is described in the Google and Firebase privacy information linked below.

Google Privacy Policy ↗
Firebase Privacy and Security ↗

Site measurement and refusal

This site uses Google Analytics 4 and Google Ads tags to automatically measure visits, selected service actions and confirmed conversions, including visits before signup. When you arrive through an X, Meta or TikTok ad, this site stores the relevant ad click ID and can send a qualifying signup or confirmed purchase to that provider from our server. Those three do not load their pixels on this site. Browser privacy signals and saved provider refusals block the relevant measurement. The recipient, country, items, timing, purpose and retention are listed under Overseas transfers below. Refusing measurement does not restrict pages, accounts, payments or readings.

The GA4 property is linked to our Google Ads account, so Analytics data can also be available to that linked Ads account. The Google Ads browser conversion tag is controlled separately. Google consent signals for ad user data and ad personalization remain denied in the tag.

In a browser that supports it, enable Do Not Track or Global Privacy Control to stop new measurement. Existing provider refusals saved in this browser or on your signed-in account remain in effect. You can remove browser identifiers through the browser’s data settings; clearing stored data alone does not stop future measurement and may also remove a refusal saved only in that browser. For provider-specific withdrawal, deletion or questions about records held by us, contact privacy@duckgustudio.com. These steps cannot recall data already received by a provider. Whop may independently measure activity in its own checkout under its policy.

Friend constellation and referrals

The friend constellation is optional. A signed-in member may create a reusable random invitation code, choose one of their own saved profiles, and share the link. If the profile describes someone else, use it only with that person’s authority to share its alias and Sun sign; detailed-reading use needs their authority for the birth details too. The server stores the code with its owner’s account and sign-in identifiers, the selected profile identifier, referral attribution and a connection record in each linked account. A friend must sign in, accept the invitation and choose their own profile before the connection appears. Opening a link alone does not connect accounts. No stars, money or other reward is given for an invitation or acceptance.

Each connected member sees only the other person’s chosen profile alias (which may be blank) and the Sun sign calculated from that profile’s birth date. These are used to fill the constellation map and a simple sign-based compatibility view. We do not show the other member’s birth date, birth time, birth place, email, account identifiers or optional identity details. Editing the shared profile updates its displayed alias or sign; switching to another profile follows the new selection. Editing or switching turns detailed permission off and erases earlier linked results and recovery inputs until the member opts in again. Deleting the selected profile stops its display and also erases those records.

Detailed compatibility is a separate paid reading. A friend cannot use your selected profile’s birth details for it unless you separately turn on detailed-reading permission; that permission is off by default. At the paying member’s explicit request, our server checks the live connection and permission, reads the other profile internally and uses both people’s birth details to make the reading. Raw birth date, time and place are not returned to the paying member as profile data. The completed result and the original input kept for recovery may be stored privately under the paying member’s account. Only that member can open the linked result; it cannot be published with the reading share-link feature. One paid reading uses one star under the purchase terms. The simple sign view does not itself send either profile to Vertex AI or spend a star.

You may decline an invitation, turn off your invite code while keeping existing connections, edit or switch your selected profile, turn detailed-reading permission off separately, or remove a connection in the constellation screen without losing ordinary account access. Editing, switching or deleting either shared profile, removing the connection or turning detailed permission off prevents new linked detailed readings using the old profile or permission and deletes the linked detailed results and recovery copies held in the other member’s account. An edit or switch also requires that member to opt in again before their profile can be used for another detailed reading. The purchaser can no longer open a deleted result; a star already spent is not automatically restored, without limiting applicable refund rights. Deleting either account immediately invalidates its invitation code and removes the connection from the other account; the closed account’s remaining service records are purged after 30 days. You can also ask privacy@duckgustudio.com to inspect, correct or erase a referral or connection record.

Accounts, profiles and AI

When you sign in, Firebase Authentication and the selected provider process account identifiers and any name or email the provider supplies. A verified email address is recorded on your Firebase account so that it can be told apart from others. It is never used to find or link an account: that is always the account identifier the provider itself supplies. Instagram Login supports professional accounts. Sign-in state is retained in this browser. Birth profiles saved while signed in are kept on your web account, including the name, birth date, time and place you enter and any optional information about yourself. Profiles saved while signed out stay in this browser.

Kakao and Naver sign-in, offered to visitors connecting from Korea, are run by this server rather than by Firebase directly. From Kakao we request the profile nickname and the account email address. From Naver we receive the account identifier, the nickname and the email address, which are the items this application is registered to receive. The permanent identifier each provider gives is what names your account here — the email address a provider supplies is a secondary record, and is never used to identify, match or link an account. To sign in, this server exchanges a one-time code for an access token with Kakao or Naver. That token and the refresh token issued with it are kept on the server so the connection can be revoked, and the address the provider supplied is kept with them; none of them are sent to your browser. Deleting your website membership disconnects the app at the provider, and the stored tokens and address are deleted whether or not the provider confirms. You can also disconnect Lodestar yourself in your Kakao or Naver account settings.

A daily fortune is generated only when a signed-in member explicitly requests one for a selected profile and local date. The server uses that profile’s birth date to calculate a Sun sign, birth-year animal and Sun-sign segment. It sends those derived values, the local date, language and a writing variation to Google Vertex AI, without the structured birth date, profile label or account identifier. The generated text is saved under that profile in the member’s account so it can be read again. A journal view, when available, uses the same profile-bound result.

When you send a message, the server receives that message, up to eight recent messages, the selected birth details or year-ahead reading context, language, and your own birth date for the age check. It recalculates the astrology context before sending the resulting placements and conversation to Google Vertex AI. Structured birth dates, place names, coordinates, profile names and account identifiers are not included in the model prompt. Personal information you type into a message is sent with that message.

The server keeps usage-limit records. To recover interrupted responses without generating twice, it stores the reply and a hashed request fingerprint in a temporary account-bound record that expires after 24 hours and is removed by database cleanup. Raw structured birth inputs and user messages are not saved in that record. Conversation history remains in this browser and is separated by signed-in account; it does not synchronize across devices. Processing may occur outside your country under Google Cloud terms.

We do not use your questions, messages or generated readings to train a model or instruct Google to do so. Google Cloud’s service terms prohibit training on customer data without the customer’s prior permission or instruction. Google may retain limited request information for service safety under its terms; our 24-hour chat retry period is not a promise about Google’s own retention. You can avoid a new AI transfer by not requesting a reading, daily fortune or chat response. Report an inappropriate result or request review at privacy@duckgustudio.com. Google Cloud data governance ↗

Optional email updates

At signup, you may separately choose email updates about new readings and offers. We keep that choice and the time it was last changed with your account; if an email address was supplied by your sign-in provider, it is the address available for those updates. No marketing-mail delivery is currently connected to this website. You can turn the choice off at any time on My page without losing your account, purchase or readings.

Purchases and payment

Buying opens Whop’s own checkout, where Whop collects your payment and billing details as merchant of record, issues the receipt and handles tax under its own privacy notice. This website does not receive or store card numbers, and Lodestar does not receive your card details from Whop.

Pressing buy writes an order here before you leave for the checkout: which reading, which account, and a random reference that identifies the order and nothing else. That reference — not your name and not your email address — is the only thing carried to Whop, and Whop returns it when it reports the completed payment, which is how the stars reach the right account even when you pay from a different address. Lodestar keeps the order: the reading it was opened from, the package, the reference, the transaction reference, the amount, the email address recorded with the sale, and the account it belongs to. When checkout follows an X, Meta or TikTok ad and measurement is permitted, private short-lived records under the order may also hold the click identifier and receipt time described above; the Meta and TikTok records also hold the checkout User-Agent. These values are not sent to Whop or returned in the operations console. The order holds no card details and no billing address. It is what makes a reading open for you, stop opening if the sale is refunded, and be repairable by hand if the report never arrives. Where a sale reaches us with no order, it waits under the email address it was paid with until an account with that verified address signs in. What Whop holds about your order is covered by its own privacy notice.

Opening a reading you bought sends the information on screen to this website’s server, which checks your purchase and calculates the chart. To write the AI-generated parts, the server sends Google Vertex AI the resulting placements, current date, calculated age where applicable, chosen language, and any question, relationship or work context, or optional identity wording you supplied. Structured birth dates, place names, coordinates, your own profile label and account identifiers are not included in that model prompt. The other person’s name shown for a compatibility reading, including a label from a saved profile, may be included. The finished reading is kept on your account so it opens again at no charge while access remains available; linked friend readings have the deletion conditions below. For recovery, the server also keeps a validated copy of the original inputs: the birth details used, optional identity information, relationship or work status, any question or context you entered, and the chosen language. A fingerprint identifies the request. Pending or failed generation attempts are also recorded with their inputs and status so a support request can be investigated and the original reading can be retried.

If you filled in the optional lines about yourself on a birth profile — your gender in your own words, how you are referred to, who you are drawn to — they travel with that request in the same way, so the reading can address you correctly instead of writing around it. They are never guessed at, never derived from a chart, and never used to decide what a reading says about you; leaving them blank simply leaves them out. They are stored with the profile you put them on: in this browser while you are signed out, and on your account once you sign in. You can change or delete that profile. For ordinary readings, changing or deleting that profile does not change an earlier result or remove its recovery input; you can request deletion through the contact below. For a detailed compatibility reading linked to a friend, editing, switching or deleting either shared profile erases the linked result and recovery input, and editing or switching turns detailed permission off until renewed consent.

When you contact support from a signed-in account, authorised support staff can review the account details, saved birth profiles, purchase and entitlement status, generation attempts and finished readings linked to that inquiry. An administrator can regenerate an eligible reading from its original saved inputs to resolve a delivery or generation problem. Recovery actions record the operator, reason and outcome. Raw prompts and birth details are not written to application logs.

Whop Privacy Policy ↗

How long information is kept

Kakao and Naver connection tokens are replaced at each sign-in and deleted when the app is disconnected or the membership is purged. The temporary AI chat retry record expires after 24 hours. Saved web profiles, profile-bound daily fortunes, finished readings, their original inputs, generation attempts, support recovery records and entitlements are separate server records; the chat retry period does not apply to them. Clearing browser data or deleting a sign-in identity does not itself erase these records. Delete your website membership from My page → Delete account. Access and shared links end immediately, and the saved website information cannot be restored. Service information is held privately for 30 days, then automatically purged, except for the separate statutory records described below. Signing in again creates a new website membership without the deleted information or purchases. This does not delete a separate Lodestar iOS membership. Operational and security logs with no account link are normally kept for 90 days. Google Analytics event data is kept for no longer than 14 months. X, Meta and TikTok ad click identifiers are usable for no more than 30 days in the browser and in their private order records; the Meta and TikTok order records’ checkout User-Agent follows the same period. Each order copy is then automatically eligible for database deletion and is deleted earlier after successful reporting. Notes saved in earlier versions, unsent chat drafts and conversation history stay in your browser until you clear them.

Friend invitation codes, selected-profile and permission settings, referral attribution and connection records are service information. A member can edit or switch the shared profile, remove a connection or withdraw detailed-reading permission; deleting the selected profile also stops sharing it. These actions erase linked detailed results and recovery inputs from the other account. Editing or switching the shared profile turns detailed permission off until renewed consent. Linked detailed results cannot be published with the reading share-link feature. Account deletion immediately disables its invitation code and removes its connections from other accounts. Remaining account-bound settings and records are privately held for 30 days and then purged with that account. No referral reward or payment ledger is created.

General support tickets, including those from visitors without accounts, are deleted no later than three years after their last activity. Account-linked tickets are deleted with service data after withdrawal unless statutory retention applies. For completed sales, we separate the minimum contract, withdrawal, payment and supply evidence from service data for five years. If an account has a completed or refunded purchase, its inquiries are also separately retained for up to three years from the last handling, regardless of the inquiry category, so a payment complaint is not lost under another category. Other account inquiries are not included in that archive. These copies hold order, payment or inquiry evidence rather than separate profile or reading records; an inquiry may contain information you chose to write in it. They are deleted when the periods end.

Transfers of personal data abroad

These transfers occur over the network when the relevant feature is used; page delivery can occur before signup. There is no separate bulk or physical transfer. We request separate agreement at signup for the Google Cloud transfer needed to create an account. The measurement services below automatically receive the described events during visits and qualifying actions, unless browser privacy signals or a saved provider refusal block them. Measurement can begin before signup.

The Google Ads billing agreement for our South Korean account names Google Korea LLC; the Google Ads row above identifies the overseas Google measurement service reached by the tag, not our billing counterparty. Recipient information: Google Analytics · Google Ads · X · Meta · TikTok

What Whop collects in its own checkout — your payment and billing details — it collects from you directly rather than receiving it from this site, and its own privacy policy governs what it does with it.

Refusing, and what it costs

You may refuse. Refusing the hosting transfer means an account cannot be opened, because the service itself runs on Google Cloud in the United States; declining at signup removes the account that signing in created, and an existing member stops account transfers by deleting their membership. Vertex AI receives no new request unless you ask for an AI-written reading, daily fortune or chat reply, so ordinary public pages remain available. Refusing measurement does not restrict pages, accounts, purchases or readings. Enable Do Not Track or Global Privacy Control in a supported browser to stop new measurement; saved provider refusals remain in effect. To request withdrawal for a provider or ask for deletion of records we hold, contact privacy@duckgustudio.com. This cannot recall data already sent.

Your choices and rights

Profile lets you clear what this browser has stored. To avoid future Vertex AI processing, do not request a new AI-written reading, daily fortune or chat reply; this does not recall information already sent. Where applicable law gives you them, you may request access, correction, deletion, restriction, portability, or withdrawal of consent by writing to privacy@duckgustudio.com. We may need to verify your identity before acting, and we will explain any refusal and the route to appeal it.

The friend constellation has separate controls: decline an invitation, disable the invite code without removing existing connections, remove a connection, edit or switch the shared profile, and turn detailed-reading permission off without removing the sign-level connection. Editing or switching a shared profile clears detailed permission until you opt in again. These choices do not affect ordinary account use. To request a copy, correction or deletion of a referral or connection record, use those controls where available or email privacy@duckgustudio.com. A connected friend cannot obtain your raw birth date, time, place or account identifiers through the map.

You can edit or delete a saved profile, withdraw the optional email choice, and request website account deletion from My page. For access, correction, deletion or restriction of another record, email privacy@duckgustudio.com with the right you want to exercise and the account or record concerned. We will verify the requester or their representative before disclosing or changing private information, then reply through the contact channel you provide. If we cannot comply, we will explain the reason and how to challenge the decision. You can use the same address to ask about legally retained transaction records after account deletion.

United States state privacy notice

For United States residents, the categories processed by this website are identifiers, account information, purchase records, Internet or device activity, content you write, and the inferences described above. Sources are you, your device, the sign-in provider you choose, and the providers listed in this policy. This website has not sold personal information during the preceding 12 months and does not show ads. Limited visit and conversion data is shared automatically with the measurement providers described above, subject to browser privacy signals and saved provider refusals. Submit a withdrawal request or an appeal to privacy@duckgustudio.com.

Age, security, and changes

The minimum age is 14. If you have not reached the age of majority where you live, you may use Lodestar only with permission from a parent or legal guardian. Users under 14 may not create an account, because no child-account or verified parental-consent programme is offered. Sign-in and account checks restrict access to saved records; support recovery is limited to authorised staff and records the action taken. Material changes are announced on this website before they take effect.

Links, support, and the app

Source links and app-policy links take you to other websites. If you contact support by email, your email address and message are sent to the support service. Avoid sending sensitive personal information. The iOS app has its own data flows and privacy policy.

Read the app privacy policy ↗

Contact and remedies

Personal information protection officer: Lee JungAe, representative of Duckgu Studio. For privacy requests and complaints, email privacy@duckgustudio.com. We handle requests in the language of this policy where possible.

For independent advice or remedies in Korea, contact the Personal Information Infringement Report Center (118) or the Personal Information Dispute Mediation Committee (1833-6972). Report Center ↗ · Dispute Mediation Committee ↗

Operator

Lee JungAe, sole proprietor trading as 덕구스튜디오 (Duckgu Studio), Republic of Korea

Representative

Lee JungAe

Business registration

756-51-01119

Mail-order sales registration

2026-부산남구-0569

Business address

Apt. 1502, Building 104, Gyeongdong Apartments, 202 Dongmyeong-ro, Nam-gu, Busan, Republic of Korea

Telephone

+82-10-5594-0555

Support

support@duckgustudio.com

Privacy

privacy@duckgustudio.com

Previous policy and changes

From 2026-09-24, this policy explains friend invitations, the Sun sign shared after acceptance, separate permission for detailed compatibility, and what happens to linked results when permission or a connection is removed.

Read the complete previous policy (effective 2026-09-23)