Privacy Policy
Last updated 2026-11-01
Crossfate receives only the information it needs to calculate your reading. This page describes how we handle that information.
1. Personal information we process
Required: date of birth (including whether it is solar or lunar and whether it is a leap month), and place of birth (country and city). For the place of birth you can keep the city that is selected by default.
Optional: time of birth, gender, nickname.
Information the service creates: the random ID used in the result address, the time the result was created, and the link between the two results of a compatibility result.
If you use work group compatibility: the group ID, the time the group was created, the ID of the result that created the group, and for each member the result ID, the order of joining and the time of joining. If a member who bought the group details leaves the group, or the group is deleted, we also keep the scores, interpretation text and working tips for the colleagues who were in the group at that time.
A person who joins through a work group invite link enters only a date of birth. We do not collect place of birth, time of birth, gender or nickname. We make one result from the date of birth entered and keep it like any other result.
If you pay for a report: the product, the amount, the time of payment, the payment ID and the transaction number from PortOne and KG Inicis.
Information you enter in the payment window: payer name (a nickname is fine), phone number and email address. We do not store it on our servers. It is passed only to PortOne and KG Inicis.
If you contact us: the email address you want the reply sent to, and what you wrote.
When you connect to the service, our hosting company may keep records such as your IP address and the time of access.
We do not collect your street address or any national identification number. We also do not collect your name or contact details other than what you enter in the payment window.
2. Why we process it and on what basis
We use it to calculate and show the reading you asked for and to let you open it again. We also use it for payment and refunds for paid reports, for answering your questions, and for service security and preventing misuse.
If you use work group compatibility, we also use it to calculate compatibility between members of the same group and show it to each of them.
The payer name, phone number and email address you enter in the payment window are used only to open the payment window and process the payment.
We process the information above without separate consent because it is needed to provide the reading you asked for. We keep purchase records because the law requires us to.
We do not use it to send advertising or to promote sales.
3. Children under 14
We do not create or store a result from the date of birth of anyone under 14.
4. Result addresses and who can see what
A result address does not contain a date of birth. The result page does show the year and weekday you were born and the age range you are in now. Anyone who receives the link can see this.
If you receive a compatibility invitation and enter a date of birth, the person who invited you also sees the compatibility result for the two of you.
When you join a work group, other members of the same group see a name given by joining order, such as Colleague 1, together with their overall score with you and a one-line reading of this year's compatibility. A member who bought the group details also sees the scores for each axis with you, the interpretation for each axis and working tips. Your nickname and date of birth are not shown to other members.
Someone who has a group address or an invite link but is not a member sees, in their browser, only that the group exists and the join screen. A member can also see the group only in the browser where their own result is stored. Group pages are blocked from search engines.
Personal result pages are blocked from search engines.
5. Result reaction records
What we collect: result ID, reaction item key, your answer (That's me or Not me), and the time it was saved
Why we use it: to check whether result sentences fit our users and to improve how results are calculated and written.
How long we keep it: when you delete a result, we delete its reaction records too. If you tap your answer again to remove it, we delete that record right away.
6. How long we keep it and how we delete it
We keep result information for 3 years from the day it was created and then delete it. Once a day, we look for results past that period and delete them.
The member records of a work group and any remaining group details are deleted when the result they belong to is deleted.
We keep purchase records for 5 years. We keep them separately from result information, and they do not contain a date of birth.
We do not store the payer name, phone number and email address you enter in the payment window, so there is nothing to keep.
We keep contact emails for 1 year from the day we finish answering, and then delete them from the mailbox.
When the retention period ends or we receive a deletion request, we delete the data from the database. Because of the database provider's recovery feature, it can remain in recovery records for up to 30 days after deletion before it disappears.
When you delete a result, the compatibility results made from it, its member places in groups and the remaining group details that contain it are deleted too.
When you leave a group, you are removed from the member list, and your compatibility with the others disappears from their screens and from the group details they bought. Your own result is not deleted when you leave. To delete the result too, use "Delete this result" on the result page.
If the person who created a group deletes it, or the last member leaves, or the group has no members because results were deleted, we delete the group and its member list.
If a member who bought the group details leaves or the group is deleted, the group details with the colleagues of that time remain on that member's result page. They contain only calculated scores and sentences, not your colleagues' dates of birth. If that colleague deletes their result or leaves a group that still exists, we delete the compatibility with that colleague from the remaining details too.
7. Provision to third parties
We do not pass the information we receive to anyone else, except where the law requires us to.
The work we hand to others to run the service and the information moved abroad are described separately in the next two sections.
8. Processors
We have Cloudflare, Inc. provide the servers and database that run the service, and count site visits. We also have it forward contact emails to the operator's mailbox. Cloudflare only forwards the mail and does not store it.
We have Google LLC receive and store contact emails (Gmail).
We have PortOne and KG Inicis provide the payment window and process payments. The payer name, phone number and email address you enter in the payment window go to PortOne and KG Inicis and are not stored on our servers.
9. Transfer abroad
Recipients: Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Privacy contact: privacyquestions@cloudflare.com. Contact emails are also received by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). Privacy contact: googlekrsupport@google.com.
Countries: the database is stored in Cloudflare data centers in the Asia-Pacific region. Requests are handled in a Cloudflare data center in a country near you. Contact emails are stored in the countries where Google has data centers, including the United States.
Items: date of birth, place of birth, time of birth, gender, nickname, result ID, purchase records and access records. If you contact us by email, your email address and what you wrote are also transferred. If you use a work group, the group member records and any remaining group details are transferred too.
When and how: the information is sent over an encrypted connection (HTTPS) as soon as you enter it. A contact email is moved to the operator's Gmail mailbox through Cloudflare mail forwarding as soon as it is sent.
Purpose and retention: we store and process the information to provide the service. We keep contact emails to answer them. We keep everything for the retention periods described above.
Basis: the processing and storage are needed to perform our contract with you, and this policy discloses them.
How to refuse and what follows: if you do not enter information, nothing is transferred. In that case you cannot receive a reading. If you do not contact us by email, your email address and message are not transferred.
10. Cookies and visit statistics
We place one cookie in the browser that created a result, which lets you delete that result. It holds only a signature of the result ID and no date of birth. It stays for 3 years, the same as the result retention period.
To count visits we use Cloudflare Web Analytics. When a page opens, your browser sends Cloudflare the address of that page, the address of the page you were on before, the browser and device type, and how long the page took to load. It does not send the date of birth you entered.
This tool does not use cookies or browser storage. Cloudflare does not store IP addresses and does not tell visitors apart one by one. We do not use advertising cookies or ad tracking tools.
You can block this transmission with your browser's tracking protection or an ad-blocking extension. Blocking it makes no difference to how you use the service.
You can delete or block cookies in your browser settings. If you do, the delete button no longer shows in that browser. In that case, please ask us by email to delete the result.
Work groups also use this cookie to check whether you are a member. In a browser where the cookie was cleared, you cannot see the group, leave it or delete the result. In that case, please ask us by email.
11. Your rights and how to use them
You can ask to see, correct, delete or stop the processing of your information. Please email us at contact@crossfate.app with your result address. We act within 10 days of receiving the request and tell you the outcome.
In the browser that created the result, you can delete it right away with "Delete this result" on the result page. If you ask by email, please include the date of birth you entered for that result. We act after we confirm it matches.
The legal guardian of a child under 14 can use the same rights.
12. Security measures
Only the operator can reach the operating accounts.
All transmission uses an encrypted connection (HTTPS) only.
Browsers do not connect to the database directly. The server does all reading and writing.
Result addresses are made from random values that are hard to guess.
13. Privacy officer
Crossfate privacy contact, contact@crossfate.app.
14. Remedies for infringement
You can report a privacy infringement or ask for advice at the bodies below.
Personal Information Dispute Mediation Committee (1833-6972, www.kopico.go.kr), Personal Information Infringement Report Center (dial 118 without an area code, privacy.kisa.or.kr), Supreme Prosecutors' Office (dial 1301 without an area code, www.spo.go.kr), National Police Agency (dial 182 without an area code, ecrm.police.go.kr).
15. Changes to this policy
When we change this policy, we post it on this page starting 7 days before the date it applies.
This policy applies from November 1, 2026.
16. Google Analytics (analytics cookies)
Effective date of this revision: November 6, 2026
What we process
If you allow analytics cookies, we process a cookie ID (_ga), the page address, records of viewing the home page, tapping a feature card, viewing the checkout page and tapping the pay button with their values (layout, card, product), browser and device type, and approximate location at country and city level. We do not send your birth date, birth time, birthplace, name, contact details or result ID.
Why
To count how much each feature is used and how many checkout views reach the pay button, so we can improve these pages.
How long we keep it
Google Analytics deletes the records 14 months after collection. The _ga cookie in your browser expires 2 years after your last visit, and we delete it as soon as you withdraw consent.
Transfer abroad
- Recipient
- Google LLC
- Country
- United States
- What is transferred
- The same items listed above.
- When and how
- Sent over the internet each time you view a page or tap a button after allowing.
How to refuse or withdraw
You can use every feature the same way without allowing analytics cookies. After allowing, choose “Don't allow” in cookie settings to stop collection and delete this site's _ga cookie.
Business information
- Company name
- J-Combinator
- Representative
- Sungil Jung
- Address
- 302, 41-3, Gyeomjae-ro 15-gil, Jungnang-gu, Seoul, Republic of Korea
- Phone
- 0502-1922-5940
- Business registration number
- 815-35-01854
- Mail-order business report number
- No. 2026-Seoul Jungnang-1270
- Hosting provider
- Cloudflare, Inc.
Contact contact@crossfate.app