Privacy

We currently do not use advertising, Cloudflare Web Analytics or any third-party analytics tool. We do use our own script to check that the site is working. It sends to our own collection path (oaran.com/api/telemetry/…); the recipient is oaran, not a third-party advertising or analytics company.

When the collection server classifies a request’s country as being in the European Economic Area (EEA), or cannot determine its country, we collect our own usage analytics and error reports for that request only if you allow performance cookies in the cookie settings banner; before you choose, or if you reject them, we do not collect them, and new collection of feedback remains blocked. You can change this choice at any time via “Cookie settings” at the bottom of the page. If you visit from the United Kingdom, you can turn off usage analytics and error reports via “Turn off statistics” at the bottom of the page.

To understand and improve features and language versions, we record page arrivals, interaction starts, ways of obtaining results, voluntary answers about result use, and departure times for sessions already started. Records also contain times, page, feature and build identifiers, temporary session and operation numbers, estimated country and state or province, referral sources, one browser display-language setting, and device type (phone, tablet or PC) and screen-size band.

We record the referring site's hostname and the page path supplied for external referrals, excluding query strings and fragments. To improve the service and produce usage statistics, we store what you enter into our tools and the results they produce. Before storage, your browser removes parts of personal details, such as the part of an email address before the @, phone digits after the area code, names and street addresses, and secret values in links; passwords and authentication secrets are not stored.

To investigate and fix technical faults, we record error type, code and time, page and build identifiers and a temporary session number.

Usage records include the full IP address.

We keep raw IP addresses unchanged for as long as we operate the service, for security and abuse prevention (looking up and comparing the same IP in the administration view); for statistics we also record, alongside them, the IP address minus its last part and a pseudonymous value made with a secret key (which links visits from the same address). We keep referring page paths as they are; only secret values in a path, such as passwords, Wi-Fi passwords, two-factor authentication secrets and login tokens, are removed the next day. We keep feedback as written, including email addresses and phone numbers, to reply and to follow up on the same enquiry; only numbers in the form of a Korean resident registration number are removed the day after we finish handling it. Visits by bots and automation tools are also recorded, marked separately from human visits.

Together with the IP and referral page path kept as described above, records include fields such as event and page identifiers, session numbers, times, country, region, referring hostname and display language. We continue to treat these as personal data. We use aggregate results for statistics and keep individual records without an end date (for as long as we operate the service) to recalculate statistics and improve the service, viewing them through an access-restricted administration interface. Error, feedback and automated-request records are also kept without an end date (for as long as we operate the service).

To understand AI-agent access, we separately record the user-agent string, service category, path without query parameters, time, and available network and verification information only for requests matching a defined automated-service list and a document-path condition, without storing raw IP addresses, cookies or request bodies.

Our hosting provider Cloudflare, Inc. (USA) instructs your browser through a response header to report network errors (NEL), and supporting browsers keep that instruction for seven days. If a connection to this site fails, the browser sends the failed page address, the previous page address (referrer), the error type, the response status code, the server IP address, the protocol, the elapsed time and the browser information (user agent) to Cloudflare's reporting endpoint (a.nel.cloudflare.com), and your IP address reaches Cloudflare with the report. Cloudflare uses these reports to find and fix network connection problems; successful connections are not reported, and the reports are separate from our own usage statistics.

Cloudflare, Inc. (USA) is our processor for hosting, transmission, temporary storage in our own collection path and administration access. It processes connection information such as IP addresses, access times and user agents to serve the site. If you email us, Google processes the correspondence and sender address as our email service provider. GitHub retains backup copies of some usage, error and feedback data from 11–16 September 2026; those copies contain no IP addresses.

Collected records are also processed on the operator's computer in Korea, and backup copies are kept on that computer and its backup device. Cloudflare processes requests across its global infrastructure, and our collection buffer is configured in Asia-Pacific, so processing is not limited to the EEA.

Where GDPR applies, the basis for usage statistics, excluding operator visits, fixing errors, responding to general feedback and email, hosting, request limits, automated-request analysis and investigating technical problems is our legitimate interest in each stated purpose (Article 6(1)(f)). Processing necessary to handle data protection rights requests is based on compliance with legal obligations (Article 6(1)(c)).

To keep personal data secure, only the operator views individual records, in an admin screen that requires operator authentication and on the operator's computer; raw IP addresses and backup copies are likewise kept where only the operator can access them.

Tool records

We store what you enter into our tools and the results they produce only on the four tools below, and only the items listed here for each. When a result appears on the Free astrology chart (/free-astrology-chart/en) or the Rising sign calculator (/rising-sign-calculator/en), we store the birth date, the birth time (or that it was not known), the birth city as its GeoNames place number, the time zone and UTC offset used, the house system and the calculated signs and degrees. The city’s coordinates, names, IP addresses and session numbers are not part of this record, and nothing is sent when the birth date gives an age under 13. On the Calculadora del amor (/calculadora-del-amor/es) and the Korean name-compatibility page (/gunghap/ko) we store only how many letters each name has and the game number — never the names. Each record also carries the estimated country and the device type (mobile or desktop) and follows the retention criteria above. On every other tool, no input and no result text appears in these reports. Copied text, the full URL and search terms are not included.

The purpose is to see which pages are actually used, whether people reach a result, and where things break, so we can fix them. It is not used for ad targeting, profiling, sale or sharing with others.

On the Korean MBTI page, type codes may appear in the shared URL, for example ?a=INTP&b=ENTJ. This information may also appear in access logs.

Only two things are kept in your browser. The first is session storage (sessionStorage): so that your result is still there when you reload the page or step away for a moment, the result and the inputs that produced it are held briefly in your browser’s session storage. That value lives only in that tab and disappears when you close it. It does not carry over to other tabs, other windows or your next visit, and this stored copy is never sent to a server (the tool record above is a separate, one-time send). Your inputs, choices and results are not written to local storage (localStorage). The second is an invite number: if — and only if — you create a “try it together” invite link on the Korean name-compatibility page (/gunghap/ko), that browser’s local storage keeps a random invite number and the time you made it, and nothing else (up to 20 of them, for 30 days). No name, answer or result is stored, and this value is never sent. The invite link itself carries nothing but that random number. Clearing the site’s data in your browser removes whatever is left.

You can send feedback from inside the site with the “Send feedback” button at the bottom right. That box takes no reply address, so we cannot write back. Do not include passwords or authentication information.

The controller for the personal data processing described in this notice on oaran is Dan Kim, the individual operator (“the operator” in this notice). You can send privacy enquiries and rights requests through the site's feedback button or email the operator's shared contact address, agt.tije@gmail.com; use email if you need a reply.

When you submit feedback, we receive your text, chosen rating and the relevant page identifier. The form has no reply-address field and cannot provide individual replies, so send rights requests needing a reply to the email above.

For transfers outside the EEA, transfers to the United States through Cloudflare, GitHub (backup copies from 11–16 September 2026) and Google (email received) rely on the EU–US Data Privacy Framework (DPF) adequacy decision (EU) 2023/1795 (with Cloudflare's restricted transfers not covered by the DPF using the Standard Contractual Clauses (SCCs, Decision (EU) 2021/914, Module 2) under its Data Processing Addendum (DPA)), and transfers to the operator's computer in South Korea rely on the EU adequacy decision for the Republic of Korea (EU) 2022/254; copies of the relevant documents are available at https://www.dataprivacyframework.gov/list or by request to the email above.

Transfers abroad: to perform our agreement with you to provide the free tools, we entrust processing and storage abroad (Personal Information Protection Act of Korea, Article 28-8(1)(3)), transferring access IP, access time, user agent and requested URL, usage, error, feedback and automated-request records and network error reports over the network to Cloudflare, Inc. (a US company, privacyquestions@cloudflare.com) each time you access the site or a record or report is sent; processing takes place in Cloudflare's data centres worldwide, nearest to where you connect, and our record buffer is configured in Asia-Pacific. Cloudflare uses them for hosting, delivery, temporary storage of records and identifying connection problems, deletes its copy of received usage, error and feedback records once they are moved to our operational store, keeps automated-request records in its storage without a set period, and keeps connection information and network error reports for the period set in Cloudflare's privacy policy (https://www.cloudflare.com/privacypolicy/). If you email us, the message and sender address are transferred over the network at that time to Google LLC (a US company, https://support.google.com/policies?p=privpol_privts), to which we entrust email processing, used in Google's data centres worldwide to provide the email service and kept until the operator deletes them. Blocking the measurement script stops the transfer of usage and error records (the tools still work), browsers that do not support network error reporting send no such reports, not emailing avoids the transfer to Google, and refusing Cloudflare's processing needed to reach the site means the site cannot be used.

Transfer of GitHub backup copies abroad: some usage records (event type, properties, time, page identifier and session number), error records (error type, code, location, response status, time, page identifier and session number) and feedback (type, text, reply email address if given and page identifier) received on 11–16 September 2026 were transferred over the network to GitHub, Inc. (USA, privacy@github.com) when they were backed up during that period; these copies contain no IP addresses. GitHub uses them to store the backup, and the copies are kept until the operator deletes them. You can ask us at the contact above to refuse this transfer or have the copies deleted, and refusing does not affect your use of the site.

Subject to legal conditions, you can request access, rectification, erasure and restriction of processing.

Right to object

You may object at any time, on grounds relating to your particular situation, to processing of your personal data under Article 6(1)(f) GDPR. We will stop that processing unless we demonstrate compelling legitimate grounds overriding your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

You may lodge a complaint with a supervisory authority, particularly in the Member State of your habitual residence, workplace or the alleged infringement (Article 77 GDPR).

You have no statutory or contractual obligation to submit feedback or enable transmission of usage data; the tools work without feedback and with the measurement script blocked. We make no solely automated decisions producing legal or similarly significant effects on you, and possible-bot labels in administration are for internal analysis and do not trigger action against users.

Who runs this site — oaran is run by Dan Kim as an individual. It is not a company, and responsibility for the content of this site and for how it handles data rests with him personally.

Effective date: 2026-11-03