Privacy Policy
Effective 2026-09-22
Moonlight Fortune ("the company") handles personal data with care and complies with the Personal Information Protection Act of Korea and related laws. This policy states what is processed and for what purpose, how long it is kept, and what rights you may exercise. This English text is a translation for convenience; the Korean version governs.
1. What is collected
The following is collected in order to provide the service. A birth date and time entered on a free screen are used for the calculation only and are not stored on the server except in the cases below.
| When | What |
|---|---|
| Free chart, daily reading, lot, hexagram | Date of birth, time of birth (optional), solar or lunar calendar, gender, place of birth |
| Free consultation chat | The conversation, the birth details, the topic |
| Paid reports and orders | Name, email, phone, payer's name, birth date and time, gender, place of birth |
| Calligraphy orders | The above plus the recipient's name, phone and address |
| Counselor bookings | The above plus the preferred time and what you wish to ask |
| Phone consultations | The number to call, the start and end times, and the length of the call |
| Keeping luck | A visitor identifier (cookie), and an email address if you leave one |
| Newsletter consent | Email address, the time and IP of the consent, and the version of the text agreed to |
| Push notifications | The subscription the browser issues (endpoint and keys) |
| Collected automatically | Visitor and session identifiers (cookies), screens visited and time spent, IP address, browser and device information, and the path in (UTM tags, referrer) |
2. Why it is used
- Computing and interpreting charts, answering consultations, writing and delivering reports
- Taking orders, confirming payment, shipping, refunds and customer enquiries
- Brokering counselor bookings, connecting phone calls, and settlement
- Granting and spending luck, and restoring it on another device
- Sending news about the service, only where consent was given
- Analysing usage to improve the service and to prevent abuse
3. How long it is kept
Data is destroyed without delay once its purpose is met, except where the law requires it to be kept.
| What | How long | Basis |
|---|---|---|
| Consultation transcripts | 30 days | Company policy (afterwards only a summary with identifiers removed remains) |
| Records of contracts and withdrawals | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of payment and supply | 5 years | Act on Consumer Protection in Electronic Commerce |
| Records of complaints and disputes | 3 years | Act on Consumer Protection in Electronic Commerce |
| Records of display and advertising | 6 months | Act on Consumer Protection in Electronic Commerce |
| Access logs | 3 months | Protection of Communications Secrets Act |
| Marketing consent records | As long as needed as evidence after withdrawal | Network Act |
4. Sharing with third parties
Personal data is not shared with third parties, except in the following cases and only with your consent. Declining leaves the rest of the service available to you.
| Recipient | What | Purpose and period |
|---|---|---|
| The counselor you choose | Name, phone, email, birth date and time, preferred time, your question | To arrange and hold the consultation. Kept until the consultation ends; on request we ask for immediate deletion. |
| The call relay provider | The number to call | To connect the call. Retention follows the provider's own period. The counselor never sees the number. |
5. Processors and transfers abroad
Processing is entrusted to the companies below to the extent needed to run the service; their contracts forbid use for any other purpose. Their servers are outside Korea. Transfers occur over the network at the moment the service requires them, and the data is destroyed when the contract ends.
| Recipient | Country | Task | What is transferred |
|---|---|---|---|
| Anthropic PBC | United States | Generating interpretations and consultation answers | The computed chart and the question (names and contact details are not sent) |
| Resend, Inc. | United States | Sending notices and reports by email | Email address and the body of the mail |
| PayPal Holdings, Inc. | United States | Processing payments from abroad | What the payment requires (card details are never stored by the company) |
| Railway Corp. | United States | Running the servers and the database | What is stored in the course of using the service |
| Google LLC | United States | Serving advertising (only where ads are switched on) | Advertising identifiers such as cookies and device ids |
6. How data is destroyed
Data whose retention period has ended or whose purpose is met is destroyed without delay. Electronic files are deleted by a means that cannot be recovered, and any printed material is shredded or incinerated. Data kept under a legal requirement is stored apart from the rest.
7. Your rights and how to exercise them
You may at any time ask to see, correct, delete or stop the processing of your personal data. Contact the address below and it will be acted on without delay once your identity is confirmed. Personal data of children under 14 is not collected without the consent of a legal guardian.
- Order details: visible on the order lookup screen; on request they are deleted except for records the law requires us to keep.
- Consultation transcripts: deleted immediately on request.
- Newsletter: withdraw at any time through the unsubscribe link in the mail or through the contact address.
- Luck and visit records: clearing your browser's cookies severs the link with this device.
8. Cookies and automatic collection
Cookies are used to recognise a visitor and to carry the service across screens. The visitor identifier keeps your luck and prevents duplicate grants; the session identifier is used to analyse where visitors came from. Cookies can be refused in the browser, in which case keeping luck and some other functions will not work.
9. Security measures
- Administrator passwords are stored in a form that cannot be reversed.
- Screens holding personal data open only after administrator authentication.
- Consultation transcripts are masked for phone numbers and email addresses before storage.
- A phone consultation's number is kept in the call record in masked form only.
- Only the minimum needed is collected, and it is deleted once its purpose is met.
10. Data protection officer
Questions, complaints and remedies concerning personal data are answered without delay at the contact below.
- Data protection officer: not entered
- Contact: not entered
- Company: not entered · Representative: not entered
- Address: not entered
11. Where to seek redress
If you need help with a privacy matter, the following bodies can be contacted in Korea.
- Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr)
- Privacy Infringement Report Centre (118, privacy.kisa.or.kr)
- Supreme Prosecutors' Office, Cybercrime Division (1301, www.spo.go.kr)
- National Police Agency, Cyber Bureau (182, ecrm.police.go.kr)
12. Changes to this policy
Any change is announced on this screen with its effective date, at least seven days beforehand, and at least thirty days beforehand where the change is to your disadvantage.