Legal

Privacy Policy

Last updated: September 29, 2026

This policy explains what information Your Day, Decoded. (“we”, “us”) handles when you use https://saju.jc2studio.com (the “Service”), why, and the choices you have. The Service is operated by JC2 Studio. You can reach us at hello.sajulab@gmail.com.

In short: we never store your name or birth details on our servers. If you sign in, the only personal information we keep is your email address, encrypted. We keep a minimal payment record (IDs, status, amount, dates) for accounting, and purchases can be reopened for 90 days. We do not sell or share your personal information for advertising.

Information you provide

• Name or nickname you enter so we can address you in your reading.
• Birth details: birth date, birth time (optional), and the birthplace you select, which we convert to city, country, coordinates, and time zone.
• Sex recorded at birth: used only to set the direction of 10-year Luck Pillars in the Full Saju reading. It stays in your browser session and is sent with Full Saju requests. It is not stored in our purchase records.
• Email address, if you sign in to My readings. We use it only to send one-time sign-in codes and to find your purchases.
• Messages you send us by email.

Information from purchases

Payments are processed by PayPal. We never see or store your card or bank details. From PayPal we receive the order and transaction IDs, payment status, amount, and currency needed to confirm your purchase; we do not store your PayPal email. To connect a payment to the reading you bought, we attach a one-way cryptographic fingerprint (a SHA-256 hash) of your birth profile to the PayPal order; PayPal receives this fingerprint, not your birth details. PayPal’s own privacy statement applies to information you give PayPal directly.

When you search for your birthplace, the letters you type are sent to our server to find matching cities in a built-in list. Searches are not stored.

Technical information

Our hosting provider processes standard request data such as IP address, browser type, and timestamps to deliver the Service, keep it secure, and limit abusive traffic. We do not use advertising cookies or trackers.

We use Vercel Web Analytics to count page views. It sets no cookies, does not track you across other sites, and groups a visit only by a hash of the request that is discarded after 24 hours. We send only the page address without any query string, so order numbers and payment tokens are never included. Each page view also records the referring site, approximate location (country, region, city), browser, operating system, and device type, and is used only in aggregate.

How we use information

• To calculate your Saju chart, Daily Fortune, and Western Astrology notes.
• To verify your purchase, deliver your Full Saju reading, and let you reopen it during the restore period.
• To handle refunds, reversals, and disputes, which end access to the related reading.
• To send sign-in codes you request.
• To keep the Service secure and prevent misuse.
• To answer your questions and support requests.

Where the EU or UK GDPR applies, we rely on performance of a contract (providing the reading you request or buy, and restoring it), our legitimate interests (security and abuse prevention), and legal obligations (keeping transaction records).

Where your information is kept

• Your browser session. Your name, birth details, and sex recorded at birth are kept in your browser’s session storage so pages can share them. They are cleared when you close the tab.
• Cookies (on your device). We use only strictly necessary, encrypted, HttpOnly cookies: full_saju_access (up to five purchases made in this browser, including the birth details needed to reopen them, until the end of the restore period), ydd_checkout (orders started in this browser with their birth details, so a payment can finish if the page reloads; 24 hours), and ydd_session (your sign-in session; 30 days). They stay in your browser; delete them at any time in your browser settings.
• Payment records. For each purchase our database stores only the PayPal order and transaction IDs, status, amount, dates (including when the reading was first delivered), the account it belongs to, and a keyed fingerprint of the birth profile that cannot be turned back into birth details. No names, birth details, or PayPal emails are stored.
• Accounts. If you sign in, we store your email encrypted with AES-256-GCM plus a keyed hash used to look it up. Sign-in codes are stored only as keyed hashes and expire after 10 minutes. To reopen a reading on another device, you re-enter your birth details and we compare fingerprints.
• Readings are generated on request and are not saved.

Service providers and transfers

We use Vercel to host the Service and measure page views, Neon to host our database, Resend to send sign-in emails, and PayPal to process payments. These providers may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as standard contractual clauses offered by those providers.

Retention

• Session storage lasts until you close the tab.
• Purchases can be reopened for 90 days; after that the browser cookie expires.
• Payment records (IDs, status, amount, dates) are kept as required by tax and accounting law. They contain no names or birth details.
• Refund request descriptions are sent to our support inbox by email and are not stored in our database.
• Accounts remain until you delete them. Sessions expire after 30 days and sign-in codes after 10 minutes.
• Hosting logs are kept for the provider’s standard retention period. Emails you send us are kept only as long as needed to resolve your request.

Your rights

Depending on where you live, you may have the right to access, correct, delete, or object to the processing of your personal information, and to complain to your local data protection authority. You can delete your account (your email) yourself from My readings, and clear this site’s cookies in your browser. For any other request, email us and we will respond within the time required by law.

California residents: we do not sell or share personal information as those terms are defined under the CCPA/CPRA, and we do not use sensitive personal information to infer characteristics about you beyond providing the reading you request.

Children

The Service is not directed to children under 16, and we do not knowingly collect their personal information. If you believe a child has provided information to us, please contact us.

Changes

We may update this policy as the Service changes. We will revise the date above and, for significant changes, provide a notice on the Service.