Privacy policy
Effective date: September 29, 2026
Oh My Luna (the “Service”) is a free web and app service that provides Moon phases and moonrise and moonset information. It has no membership, login, or payment features and does not collect account information that identifies users. This policy explains the scope of information processed while using the Service.
1. Information processed and purposes
We do not ask for personally identifying information such as a name, contact details, or date of birth while you use the Service. If you contact us first, we process information included in your message, as described in the fourth item below.
Location information Optional · only with consent
We may request location permission from your browser or app to calculate moonrise and moonset times and the Moon’s direction. Coordinates are used only while handling the request and are not stored in the Service’s database. If you deny permission, we calculate using a representative location inferred from the device’s time zone or Seoul.
Automatically generated information Required
Visited pages, access time, device and browser type, referrer, access IP, and the rough region inferred from it are processed for usage statistics and security.
Error diagnostic information Required
When an error occurs, its content and location, together with device and browser information, are recorded. Session replays that reproduce screen interactions may be recorded for about 10% of all visits and for 100% of visits where an error occurs. Replays are collected with screen text masked and images and video blocked; input values and the text shown on the screen are not stored as-is.
Information provided in an inquiry Optional · only when you send it
When you contact us by email, the address you send from and the content of your message are processed to reply and keep a record. For privacy-related requests, we may ask for information such as the access time or device used to verify your identity. Inquiry content is kept for three years after processing is complete and then destroyed.
Alert subscription information Optional · only when alerts are on
When you turn on full Moon, eclipse and meteor shower alerts, the push registration token issued by your browser, the language you chose, and a delivery region set from your device’s time zone (for example, East Asia) are used to send them. The token and subscription topic are kept only in your browser’s storage and in Google Firebase; the Service does not store them on its own servers. No name or contact details are asked for.
2. Processing of location information
The Service does not collect or store personal location data. Coordinates are used in memory only while an astronomical calculation request is being processed and disappear with the response.
When a weather forecast is requested to provide observing-condition guidance, the coordinates are rounded to a 0.1-degree grid before being sent to the forecast provider. Around Seoul, each cell is about 9 km wide and 11 km high. Users in the same grid share one forecast, so a person’s exact location is not sent externally. A forecast based on the rounded grid is held temporarily in server memory for up to 12 hours, without an identifier connecting the coordinates to a user.
Location permission can be withdrawn at any time in your browser or operating system settings.
3. Retention and deletion
The Service does not operate its own database for storing user information. Location coordinates disappear immediately after a request is processed, and rounded-grid forecasts disappear automatically after no more than 12 hours.
Records held by the service providers in Section 4 follow each provider’s retention policy. Unless configured otherwise, Google Analytics is set to a maximum of 14 months, Sentry error records to 90 days, and session replays to 30 days.
Alert subscription information is deleted as soon as you turn alerts off: the token is removed from its Firebase subscription topic, the token itself is revoked, and both are erased from your browser’s storage. Tokens that are no longer used, such as after you withdraw notification permission in the browser, are expired by Google.
4. Processing by service providers and overseas transfers
The Service does not sell personal information or provide it to third parties for advertising. The businesses below process information on the Service’s behalf as needed to operate it, and all are located overseas. The transfer takes place when the relevant feature is used, through transmission over the network while using the Service.
Google LLCGoogle Analytics 4 · United States
Transferred items: Cookie identifiers, visit history, device and browser information, and a rough region inferred from the IP address
Purpose: Usage statistics analysis
Google LLCFirebase Cloud Messaging · United States
Transferred items: Push registration token and alert subscription topic (language and delivery region)
Purpose: Sending full Moon, eclipse and meteor shower alerts (only when alerts are on)
Functional Software, Inc.Sentry · United States
Transferred items: Error content and stack traces, request URLs, device and browser information, and session replay records
Purpose: Error diagnosis and stability improvement
WeatherAPI.comWeather forecasts · United States
Transferred items: Coordinates rounded to a 0.1-degree grid
Purpose: Guidance on tonight’s observing conditions
Vercel Inc.Service hosting · United States
Transferred items: Server logs such as access IP, request URL, and access time
Purpose: Service provision and security
If you do not want an overseas transfer, you can use your browser’s cookie or script blocking features or the refusal method in Section 6. Some features may be limited.
5. User rights and how to exercise them
You may request access to, correction of, deletion of, or a halt to processing of your information. Because the Service has no account that identifies users, you must provide information that can identify the subject of the request, such as the access time, device used, or rough location, so that we can verify it.
Requests can be sent to ohmyluna.official@gmail.com and we will let you know the result within 10 days of receiving the request. A legal representative or an authorised delegate may also exercise these rights.
7. Children under 14
The Service is not intended for children under 14 and does not knowingly collect children’s personal information. If we learn that a child’s information has been collected, we destroy it without delay.
8. Safeguards
All communications are encrypted with HTTPS. Location coordinates are reduced to a grid before being sent externally, and credentials needed to operate the Service are kept in deployment environment variables rather than source code, with access kept to the minimum necessary.
9. Privacy officer
Questions about personal information processing, complaints, and remedies can be sent to the address below.
Privacy officer
10. Remedies for infringement of rights
If you are not satisfied with the Service’s response or need additional help, you can contact the institutions below.
- Personal Information Dispute Mediation Committee — 1833-6972 · kopico.go.kr
- Personal Information Infringement Report Center — 118 · privacy.kisa.or.kr
- Supreme Prosecutors’ Office Cyber Investigation Division — 1301 · spo.go.kr
- National Police Agency Cyber Investigation Bureau — 182 · ecrm.police.go.kr
11. Changes to this policy
This policy may be revised when laws or the Service change. Revisions are announced on this page at least seven days before their effective date, and changes that materially affect user rights are announced 30 days in advance.
Sources for external data and assets used by the Service are listed on the credits page; the conditions for using the Service are in the terms of service.