Website Privacy Policy

What we process and why

Account creation and the overseas transfer needed for it are separate required choices at signup. Email updates and creating a shareable friend map from a selected profile are optional. Anyone with its link can preview the chosen alias, Sun sign and lit-planet count before joining; each friend needs separate permission to use your birth details for a paid detailed compatibility reading. We use profile, reading, payment and support information when you ask for those services; statutory transaction records follow the applicable retention duty. GA4, Google Ads, X, Meta and TikTok automatically measure visits and qualifying actions, subject to browser privacy signals and saved provider refusals. The detailed items, periods and refusal routes appear below.

Account and profile — required signup choices

We use the sign-in identifier, supplied name or email, consent record and saved birth profile to open and maintain your account. Service records are held until withdrawal, then privately for 30 days before deletion.

Friend compatibility map — optional sharing

Creating a map stores a reusable invite code. Anyone with the link can preview the selected alias, calculated Sun sign and number of lit planets (up to ten); the friend list and birth details stay private. A connection is stored only after the recipient accepts with their own profile. Paid detailed compatibility requires separate permission for each friend, off by default. You can disable the link or remove a connection; details and refusal routes appear below.

Requested AI service

We use birth-profile inputs, calculated astrology details and words you type to generate a reading, daily fortune or chat reply. Finished readings and profile-bound fortunes remain with the account until its deletion; a temporary chat retry record expires after 24 hours.

Purchase and statutory duty

We use account, order reference, product, amount and payment status to deliver and refund what you bought. Service orders close with the account; the minimum contract and payment evidence required by Korean law is retained separately for five years.

Optional email choice

We keep the optional choice and its change time with your account; the sign-in email, if available, is the potential delivery address. No marketing email delivery is currently connected. You may withdraw the choice on My page.

Site and advertising measurement

Visit and selected service events are measured automatically, including before signup. Browser Do Not Track or Global Privacy Control signals and existing provider refusals stop the relevant measurement. Contact privacy@duckgustudio.com to request withdrawal or deletion.

Reading this site

Lodestar / Duckgu Studio publishes this website. Notes saved in earlier versions, saved birth profiles and unsent chat drafts may remain in browser storage. None are automatically attached to AI conversations. The site shows no ads. Analytics and ad measurement run automatically as described below, subject to browser privacy signals and saved provider refusals.

Browser storage remains until you clear it in Profile or through your browser settings. Clearing browser data, using private browsing, or changing browsers can remove it. It does not sync to the iOS app.

Hosting and technical information

The site is delivered through Google Firebase Hosting and Cloud Run. Serving and protecting pages can involve technical request information such as IP address, browser details, requested URLs, and server logs. Provider processing is described in the Google and Firebase privacy information linked below.

Google Privacy Policy ↗
Firebase Privacy and Security ↗

Site measurement and refusal

This site uses Google Analytics 4 and Google Ads tags to automatically measure visits, selected service actions and confirmed conversions, including visits before signup. When you arrive through an X, Meta or TikTok ad, this site stores the relevant ad click ID and can send a qualifying signup or confirmed purchase to that provider from our server. Those three do not load their pixels on this site. Browser privacy signals and saved provider refusals block the relevant measurement. The recipient, country, items, timing, purpose and retention are listed under Overseas transfers below. Refusing measurement does not restrict pages, accounts, payments or readings.

The GA4 property is linked to our Google Ads account, so Analytics data can also be available to that linked Ads account. The Google Ads browser conversion tag is controlled separately. Google consent signals for ad user data and ad personalization remain denied in the tag.

In a browser that supports it, enable Do Not Track or Global Privacy Control to stop new measurement. Existing provider refusals saved in this browser or on your signed-in account remain in effect. You can remove browser identifiers through the browser’s data settings; clearing stored data alone does not stop future measurement and may also remove a refusal saved only in that browser. For provider-specific withdrawal, deletion or questions about records held by us, contact privacy@duckgustudio.com. These steps cannot recall data already received by a provider. Dodo Payments may independently measure activity on its own checkout under its own privacy policy.

Friend compatibility map and invitations

The friend map is optional. A signed-in member chooses one saved birth profile to create a map, then shares its reusable link. Anyone holding a valid link can preview that profile’s alias, calculated Sun sign and lit-planet count, even without signing in or accepting. The preview contains no friend list, account identifier, birth date, time or place, or detailed-reading permission. If the profile describes someone else, create and share the map only with that person’s authority to show those preview fields; detailed-reading use also requires their authority to use the birth details. The server stores the random code with the map owner’s account and sign-in identifiers, the selected profile identifier and referral attribution. A connection record is stored in both accounts only after a friend signs in, chooses their own profile and accepts. Opening the link alone does not connect accounts. Invitations and acceptance provide no stars, money or other reward.

Each accepted friend lights one of ten symbolic planet illustrations on the map. The link preview shows only how many are lit, capped at ten even if more friends connect; it does not identify them. Connected members see each other’s chosen profile alias (which may be blank) and the Sun sign calculated from its birth date for a simple sign-based compatibility view. We do not show birth date, time, place, email, account identifiers or optional identity details. Editing a map profile updates its displayed alias or sign; switching profiles follows the new selection. Editing or switching turns off that member’s detailed-reading permissions and erases earlier linked results and recovery inputs until the member opts in again. Deleting the selected profile stops its display and erases those records.

Detailed compatibility is a separate paid reading. Permission to use your selected profile’s birth details is set for each connected friend and is off for a new connection by default. Accepting a link does not give every friend this permission. At the paying member’s explicit request, our server checks that specific connection and permission, reads the other profile internally and uses both people’s birth details to make the reading. Raw birth date, time and place are not returned to the paying member as profile data. The completed result and the original input kept for recovery may be stored privately under the paying member’s account. Only that member can open the linked result; it cannot be published with the reading share-link feature. One paid reading uses one star under the purchase terms. The simple sign view does not itself send either profile to Vertex AI or spend a star.

You may decline an invitation, turn off your map link while keeping existing connections, edit or switch its profile, withdraw detailed-reading permission for one friend, or remove that connection without losing ordinary account access. A disabled link no longer allows a preview or new join. Editing, switching or deleting either map profile, removing a connection or withdrawing its detailed permission prevents new linked detailed readings using the old profile or permission and deletes the related result and recovery copy held in the other member’s account. An edit or switch also requires renewed permission for each affected friend before that profile can be used again. The purchaser can no longer open a deleted result; a star already spent is not automatically restored, without limiting applicable refund rights. Deleting either account immediately invalidates its map link and removes its connections from other accounts; the closed account’s remaining service records are purged after 30 days. You can also ask privacy@duckgustudio.com to inspect, correct or erase a referral or connection record.

Accounts, profiles and AI

When you sign in, Firebase Authentication and the selected provider process account identifiers and any name or email the provider supplies. A verified email address is recorded on your Firebase account so that it can be told apart from others. It is never used to find or link an account: that is always the account identifier the provider itself supplies. Instagram Login supports professional accounts. Sign-in state is retained in this browser. Birth profiles saved while signed in are kept on your web account, including the name, birth date, time and place you enter and any optional information about yourself. Profiles saved while signed out stay in this browser.

Kakao and Naver sign-in, offered to visitors connecting from Korea, are run by this server rather than by Firebase directly. From Kakao we request the profile nickname and the account email address. From Naver we receive the account identifier, the nickname and the email address, which are the items this application is registered to receive. The permanent identifier each provider gives is what names your account here — the email address a provider supplies is a secondary record, and is never used to identify, match or link an account. To sign in, this server exchanges a one-time code for an access token with Kakao or Naver. That token and the refresh token issued with it are kept on the server so the connection can be revoked, and the address the provider supplied is kept with them; none of them are sent to your browser. Deleting your website membership disconnects the app at the provider, and the stored tokens and address are deleted whether or not the provider confirms. You can also disconnect Lodestar yourself in your Kakao or Naver account settings.

A daily fortune is generated only when a signed-in member explicitly requests one for a selected profile and local date. The server uses that profile’s birth date to calculate a Sun sign, birth-year animal and Sun-sign segment. It sends those derived values, the local date, language and a writing variation to Google Vertex AI, without the structured birth date, profile label or account identifier. The generated text is saved under that profile in the member’s account so it can be read again. A journal view, when available, uses the same profile-bound result.

When you send a message, the server receives that message, up to eight recent messages, the selected birth details or year-ahead reading context, language, and your own birth date for the age check. It recalculates the astrology context before sending the resulting placements and conversation to Google Vertex AI. Structured birth dates, place names, coordinates, profile names and account identifiers are not included in the model prompt. Personal information you type into a message is sent with that message.

The server keeps usage-limit records. To recover interrupted responses without generating twice, it stores the reply and a hashed request fingerprint in a temporary account-bound record that expires after 24 hours and is removed by database cleanup. Raw structured birth inputs and user messages are not saved in that record. Conversation history remains in this browser and is separated by signed-in account; it does not synchronize across devices. Processing may occur outside your country under Google Cloud terms.

We do not use your questions, messages or generated readings to train a model or instruct Google to do so. Google Cloud’s service terms prohibit training on customer data without the customer’s prior permission or instruction. Google may retain limited request information for service safety under its terms; our 24-hour chat retry period is not a promise about Google’s own retention. You can avoid a new AI transfer by not requesting a reading, daily fortune or chat response. Report an inappropriate result or request review at privacy@duckgustudio.com. Google Cloud data governance ↗

Optional email updates

At signup, you may separately choose email updates about new readings and offers. We keep that choice and the time it was last changed with your account; if an email address was supplied by your sign-in provider, it is the address available for those updates. No marketing-mail delivery is currently connected to this website. You can turn the choice off at any time on My page without losing your account, purchase or readings.

Purchases and payment

Buying opens Dodo Payments’ own checkout, where Dodo Payments, as merchant of record and under its own privacy policy, collects your name, email address, billing address and card details, sends the receipt to the email address you enter there and handles tax. This website does not receive or store card numbers, and Lodestar does not receive your card details from Dodo Payments.

Pressing buy writes an order here before you leave for the checkout: which reading, which account, and a random reference that identifies the order and nothing else. What goes to Dodo Payments is that reference and the package’s product identifier — not your name and not your email address — plus, if you have paid through Dodo Payments before, the customer identifier it issued at that earlier purchase, so that it keeps one customer record for you. Dodo Payments returns the reference when it reports the completed payment, which is how the stars reach the right account even when you pay with a different email address. Lodestar keeps the order: the reading it was opened from, the package, the reference, the email address from your sign-in if there is one, Dodo Payments’ checkout, payment and customer identifiers, the amount and currency, the payment method type, the decline code if a payment is declined, and the account it belongs to. When checkout follows an X, Meta or TikTok ad and measurement is permitted, private short-lived records under the order may also hold the click identifier and receipt time described above; the Meta and TikTok records also hold the checkout User-Agent. These values are not sent to Dodo Payments or returned in the operations console. Nothing you enter on Dodo Payments’ checkout — your name, email address, billing address or card details — is copied into the order. It is what makes a reading open for you, stop opening if the sale is refunded, and be repairable by hand if the report never arrives. An order paid through Whop before the switch to Dodo Payments also holds the transaction reference and the email address recorded with that sale, and a Whop sale that reached us with no order waits under the email address it was paid with until an account with that verified address signs in. What Dodo Payments holds about your order is covered by its own privacy policy, and what Whop holds about an earlier order by Whop’s.

Opening a reading you bought sends the information on screen to this website’s server, which checks your purchase and calculates the chart. To write the AI-generated parts, the server sends Google Vertex AI the resulting placements, current date, calculated age where applicable, chosen language, and any question, relationship or work context, or optional identity wording you supplied. Structured birth dates, place names, coordinates, your own profile label and account identifiers are not included in that model prompt. The other person’s name shown for a compatibility reading, including a label from a saved profile, may be included. The finished reading is kept on your account so it opens again at no charge while access remains available; linked friend readings have the deletion conditions below. For recovery, the server also keeps a validated copy of the original inputs: the birth details used, optional identity information, relationship or work status, any question or context you entered, and the chosen language. A fingerprint identifies the request. Pending or failed generation attempts are also recorded with their inputs and status so a support request can be investigated and the original reading can be retried.

If you filled in the optional lines about yourself on a birth profile — your gender in your own words, how you are referred to, who you are drawn to — they travel with that request in the same way, so the reading can address you correctly instead of writing around it. They are never guessed at, never derived from a chart, and never used to decide what a reading says about you; leaving them blank simply leaves them out. They are stored with the profile you put them on: in this browser while you are signed out, and on your account once you sign in. You can change or delete that profile. For ordinary readings, changing or deleting that profile does not change an earlier result or remove its recovery input; you can request deletion through the contact below. For a detailed compatibility reading linked to a friend, editing, switching or deleting either shared profile erases the linked result and recovery input, and editing or switching turns detailed permission off until renewed consent.

When you contact support from a signed-in account, authorised support staff can review the account details, saved birth profiles, purchase and entitlement status, generation attempts and finished readings linked to that inquiry. An administrator can regenerate an eligible reading from its original saved inputs to resolve a delivery or generation problem. Recovery actions record the operator, reason and outcome. Raw prompts and birth details are not written to application logs.

Dodo Payments Privacy Policy ↗
Whop Privacy Policy (purchases before the switch) ↗

How long information is kept

Kakao and Naver connection tokens are replaced at each sign-in and deleted when the app is disconnected or the membership is purged. The temporary AI chat retry record expires after 24 hours. Saved web profiles, profile-bound daily fortunes, finished readings, their original inputs, generation attempts, support recovery records and entitlements are separate server records; the chat retry period does not apply to them. Clearing browser data or deleting a sign-in identity does not itself erase these records. Delete your website membership from My page → Delete account. Access and shared links end immediately, and the saved website information cannot be restored. Service information is held privately for 30 days, then automatically purged, except for the separate statutory records described below. Signing in again creates a new website membership without the deleted information or purchases. This does not delete a separate Lodestar iOS membership. Operational and security logs with no account link are normally kept for 90 days. Google Analytics event data is kept for no longer than 14 months. X, Meta and TikTok ad click identifiers are usable for no more than 30 days in the browser and in their private order records; the Meta and TikTok order records’ checkout User-Agent follows the same period. Each order copy is then automatically eligible for database deletion and is deleted earlier after successful reporting. Notes saved in earlier versions, unsent chat drafts and conversation history stay in your browser until you clear them.

Map invitation codes, selected-profile and friend-specific permission settings, referral attribution and connection records are service information. A member can edit or switch the map profile, remove one connection or withdraw detailed-reading permission for that friend; deleting the selected profile also stops its link preview. These actions erase the affected linked detailed results and recovery inputs from the other account. Editing or switching the map profile turns off detailed permission across that member’s connections until separately renewed. Linked detailed results cannot be published with the reading share-link feature. Account deletion immediately disables its map link and removes its connections from other accounts. Remaining account-bound settings and records are privately held for 30 days and then purged with that account. No referral reward or payment ledger is created.

General support tickets, including those from visitors without accounts, are deleted no later than three years after their last activity. Account-linked tickets are deleted with service data after withdrawal unless statutory retention applies. For completed sales, we separate the minimum contract, withdrawal, payment and supply evidence from service data for five years. If an account has a completed or refunded purchase, its inquiries are also separately retained for up to three years from the last handling, regardless of the inquiry category, so a payment complaint is not lost under another category. Other account inquiries are not included in that archive. These copies hold order, payment or inquiry evidence rather than separate profile or reading records; an inquiry may contain information you chose to write in it. They are deleted when the periods end.

Transfers of personal data abroad

These transfers occur over the network when the relevant feature is used; page delivery can occur before signup. There is no separate bulk or physical transfer. We request separate agreement at signup for the Google Cloud transfer needed to create an account. The measurement services below automatically receive the described events during visits and qualifying actions, unless browser privacy signals or a saved provider refusal block them. Measurement can begin before signup.

The Google Ads billing agreement for our South Korean account names Google Korea LLC; the Google Ads row above identifies the overseas Google measurement service reached by the tag, not our billing counterparty. Recipient information: Google Analytics · Google Ads · X · Meta · TikTok

What Dodo Payments collects on its own checkout — your name, email address, billing address and card details — it collects from you directly rather than receiving it from this site, and its own privacy policy governs what it does with it. The same was true of Whop for purchases made before the switch.

Refusing, and what it costs

You may refuse. Refusing the hosting transfer means an account cannot be opened, because the service itself runs on Google Cloud in the United States; declining at signup removes the account that signing in created, and an existing member stops account transfers by deleting their membership. Vertex AI receives no new request unless you ask for an AI-written reading, daily fortune or chat reply, so ordinary public pages remain available. Refusing measurement does not restrict pages, accounts, purchases or readings. Enable Do Not Track or Global Privacy Control in a supported browser to stop new measurement; saved provider refusals remain in effect. To request withdrawal for a provider or ask for deletion of records we hold, contact privacy@duckgustudio.com. This cannot recall data already sent.

Your choices and rights

Profile lets you clear what this browser has stored. To avoid future Vertex AI processing, do not request a new AI-written reading, daily fortune or chat reply; this does not recall information already sent. Where applicable law gives you them, you may request access, correction, deletion, restriction, portability, or withdrawal of consent by writing to privacy@duckgustudio.com. We may need to verify your identity before acting, and we will explain any refusal and the route to appeal it.

The friend map has separate controls: decline an invitation, disable the link and its preview without removing existing connections, remove one connection, edit or switch the map profile, and withdraw detailed-reading permission for a specific friend while keeping the sign-level connection. Editing or switching that profile clears permission across its connections until separately renewed. These choices do not affect ordinary account use. To request a copy, correction or deletion of a referral or connection record, use those controls where available or email privacy@duckgustudio.com. Neither a link holder nor a connected friend can obtain your raw birth date, time, place or account identifiers through the map.

You can edit or delete a saved profile, withdraw the optional email choice, and request website account deletion from My page. For access, correction, deletion or restriction of another record, email privacy@duckgustudio.com with the right you want to exercise and the account or record concerned. We will verify the requester or their representative before disclosing or changing private information, then reply through the contact channel you provide. If we cannot comply, we will explain the reason and how to challenge the decision. You can use the same address to ask about legally retained transaction records after account deletion.

United States state privacy notice

For United States residents, the categories processed by this website are identifiers, account information, purchase records, Internet or device activity, content you write, and the inferences described above. Sources are you, your device, the sign-in provider you choose, and the providers listed in this policy. This website has not sold personal information during the preceding 12 months and does not show ads. Limited visit and conversion data is shared automatically with the measurement providers described above, subject to browser privacy signals and saved provider refusals. Submit a withdrawal request or an appeal to privacy@duckgustudio.com.

Age, security, and changes

The minimum age is 14. If you have not reached the age of majority where you live, you may use Lodestar only with permission from a parent or legal guardian. Users under 14 may not create an account, because no child-account or verified parental-consent programme is offered. Sign-in and account checks restrict access to saved records; support recovery is limited to authorised staff and records the action taken. Material changes are announced on this website before they take effect.

Links, support, and the app

Source links and app-policy links take you to other websites. If you contact support by email, your email address and message are sent to the support service. Avoid sending sensitive personal information. The iOS app has its own data flows and privacy policy.

Read the app privacy policy ↗

Contact and remedies

Personal information protection officer: Lee JungAe, representative of Duckgu Studio. For privacy requests and complaints, email privacy@duckgustudio.com. We handle requests in the language of this policy where possible.

For independent advice or remedies in Korea, contact the Personal Information Infringement Report Center (118) or the Personal Information Dispute Mediation Committee (1833-6972). Report Center ↗ · Dispute Mediation Committee ↗

Operator

Lee JungAe, sole proprietor trading as 덕구스튜디오 (Duckgu Studio), Republic of Korea

Representative

Lee JungAe

Business registration

756-51-01119

Mail-order sales registration

2026-부산남구-0569

Business address

Apt. 1502, Building 104, Gyeongdong Apartments, 202 Dongmyeong-ro, Nam-gu, Busan, Republic of Korea

Telephone

+82-10-5594-0555

Support

support@duckgustudio.com

Privacy

privacy@duckgustudio.com

Previous policy and changes

From 2026-09-26, English and Japanese purchases are charged by Dodo Payments Inc. (United States) as merchant of record instead of Whop. This policy lists what this site sends Dodo Payments, what it keeps from the payment, and Dodo Payments’ privacy contact. Whop remains listed for the refunds and records of purchases made before the switch. Korean checkout is unchanged.

Read the complete previous policy (effective 2026-09-25)

Read the older policy (effective 2026-09-24)

Read the older policy (effective 2026-09-23)