Privacy Notice
Yoruna ("we") operates the Character Passport tool and the Yoruna accounts at yoruna.world. This notice explains what we process when you use the free tool without an account, and what changes when you sign in, store your characters or pay for a plan.
1. What we process
1.1 The free tool (no account)
| Data | When | Where it goes | Kept for |
|---|---|---|---|
| Images you drop into the tool | While the analysis request runs | Sent to our AI providers (see §3) for visual analysis and safety checks; held in server memory only | Discarded as soon as the request finishes. Without an account we do not store your images on our servers. |
| Analysis results, thumbnails and your draft passport | After analysis | Your browser's local storage (IndexedDB) | Until you press "Start over" or clear your browser data |
| Email address (optional) | Only if you choose "Bring this character home" | Our email provider (see §3) | Until you unsubscribe or ask us to delete it |
| Usage events (page viewed, analysis completed, export copied) | While you use the site | Our analytics provider, cookieless mode, no advertising identifiers | 12 months, aggregated |
| Technical logs (IP address, request time, error messages) | Every request | Our hosting provider | Up to 30 days |
1.2 Your account
| Data | When | Where it goes | Kept for |
|---|---|---|---|
| Email address, sign-in links, session cookie | When you create an account and sign in (email link or code, or Google or Discord sign-in; no password is stored) | Our authentication and database provider (see §3) | Until you delete your account |
| What Google or Discord sends us when you sign in with them: email address (and whether it is verified), display name, profile image URL, and your account ID at that service | Each time you choose "Continue with Google" or "Continue with Discord" | Stored by our authentication and database provider (see §3) | Until you delete your account |
| Profile: handle, language, plan, the time of your last visit | While you use your account | Our database provider | Until you delete your account |
| Character passports: every saved version, level, quests and stamps | Each time you save | Our database provider | Until you delete the character or your account |
| Setting Book inputs: your choices in the situation questions, one-line answers, what goes into the book (outfit, scenes, lines, name), persona card values | When you make a Setting Book | Database provider; sent to the AI provider (§3) for text generation | Until the character or account is deleted |
| Setting Book: generated images and text, the canonical face, and provenance for each image (generation prompt, model, cost) | When the book is made, an image is redrawn, or a visit reward is received | Private file storage and database provider | Until the character or account is deleted |
| Visit reward (pass) progress: season, filled slots, rewards received | When you visit the bookshelf and receive rewards | Database provider | Until the character or account is deleted |
| Export records: which target tool you compiled a passport for, and when | Each time you export from your account | Our database provider | Until you delete your account. We never see what you do inside third-party tools. |
| Usage counters: analyses per month, storage used | Each time you analyse or upload | Our database provider | Current and previous month; aggregated afterwards |
| Usage events tied to your account identifier (for example analysis completed, export saved) | While you are signed in | Our analytics provider (EU region); no name or email is sent, no behavioural profile is built | 12 months |
We use Google and Discord sign-in only to confirm who you are. We request only the basic sign-in scopes (Google: openid, email, profile; Discord: identify, email). We never post to those accounts or send messages from them, and we do not access your friends, servers, contacts or files. When the verified email address is the same, email, Google and Discord sign-in all open the same Yoruna account. Accounts without an email address, or with an unverified one, cannot sign in.
1.3 Images you choose to store
When you choose to store reference images in your account, we keep the original files, thumbnails, the linked character and provenance in private storage and the account database. Each upload is checked for safety before it is accepted; rejected originals are deleted immediately and only the decision is kept. Previously issued image links can remain valid for up to one hour, and copies cached by our content delivery network may persist briefly after that. Nothing you store is public unless a later feature lets you publish it and you choose to do so.
When you make a Setting Book, the stored reference images you select (up to 3) and the canonical face you confirmed are sent to the AI provider (§3) for image generation. For the free first face only one image you uploaded, or only your answers, is sent. Images sent are not used for model training under the provider's API terms.
1.4 Payments
Books, credit packs and paid plans are sold by our merchant of record, Polar (see §3). Polar collects your payment details and billing address and issues the invoice; we never receive your card number. We receive your customer identifier, email, plan, subscription status, order identifiers and the tax information Polar needs to share with us. Polar's own privacy policy applies to the checkout.
We also keep purchased credits, monthly grants, use, returns, expiry and vouchers in the account database to provide these services, until account deletion except for transaction records that must be retained by law. Checkout consent, its terms version and time are recorded with the book checkout to document the requested production.
1.5 Public pages (when you choose to publish)
A character is private unless you set it to unlisted or public. A published Room shows your handle, the character's name and only the sections you switched on, with images limited to those rated safe and marked for public display; prompts and model profiles stay private unless you switch them on. Public pages carry a server-side view count without storing visitor addresses, and machine-readable copies (JSON, link previews) contain the same public sections only. Public Rooms may be indexed by search engines unless you mark the character as fan work or unlisted; every public page asks AI crawlers not to use it for training. Visitors can report a page; a report stores the reason, the page and, if given, the reporter's email for up to 12 months so we can act on it and answer.
We do not sell personal data and we do not use your images, passports or drafts to train AI models.
1.6 Inquiries and reports
| Data | When and purpose | Where it goes | Kept for |
|---|---|---|---|
| Inquiry text, category, report reason and Yoruna page path; account identifier or guest email; selected book and character identifiers; inquiry, reply and status-change history | When you submit or reply; handling the inquiry and keeping its history | Database provider; email provider for acknowledgements and reply notifications | Payment/refund inquiries: 3 years after closure; other inquiries: 12 months after closure |
| IP hash with a daily changing salt, duplicate-prevention hash, SHA-256 hash of the guest inquiry link | Preventing abuse and duplicate requests; verifying access to an inquiry | Database provider | Within the inquiry retention period; guest links expire 30 days after submission. Raw IP addresses and raw links are not stored in the inquiry database. |
Signed-in users' email addresses are read from their account when sending mail, not copied into the inquiry table. On account deletion, payment/refund inquiries are retained for the period above with account, book and character links removed; other inquiries are deleted with the account. Personal information you type remains part of the message: do not include sensitive information or payment-card numbers. The legal provision and scope supporting 3 years of retention after closure are unverified; this is our adopted retention policy, not a claim of a verified statutory duty.
Resend sends acknowledgements, reply notifications and operator alerts; Cloudflare Turnstile helps prevent automated submissions. Operator alerts contain only the inquiry number, category, internal handling target and admin link, not the inquiry text or email. Email replies forwarded to support are added to the inquiry by an operator; inbound replies are not imported automatically. We do not promise a response time.
2. Why we process it
- Making, keeping and exporting Setting Books: generating images and text from your images and answers, keeping them on your bookshelf and letting you download them as files (providing the service you requested).
- To receive, answer and document inquiries and reports, and prevent duplicate or abusive requests (providing support and protecting the service). Retention is described in §1.6.
- To sign you in and confirm you own the account: email link or code, or Google or Discord sign-in (contract).
- To analyse your images, build and store your passports, and compile them for other tools (performance of the service you request).
- To run your account, quotas and subscription, and to keep the records that tax and commerce law require (contract and legal obligation).
- To prevent abuse, keep the service safe and control costs (safety checks, rate limits, daily budget, bot protection) — legitimate interest.
- To send you service messages: sign-in links, export links, deletion confirmations, renewal notices before an annual payment (contract).
- To contact you about launches and news only if you opted in — consent, withdrawable at any time.
- To understand whether the product works (aggregated, cookieless analytics) — legitimate interest. When you are signed in, server-side events carry your internal account identifier so we can count usage per account and enforce plan limits.
3. Processors and international transfers
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Accounts, database, private file storage | Data stored in Seoul, Republic of Korea; provider based in the United States |
| Google (sign-in) | Sign-in with your Google account, if you choose it (provides identity data) | United States |
| Discord (sign-in) | Sign-in with your Discord account, if you choose it (provides identity data) | United States |
| Polar | Merchant of record: checkout, invoices, subscriptions, tax | United States |
| Vercel | Hosting, request logs | United States and global edge |
| OpenAI | Image analysis and safety classification; image and text generation for Setting Books and the free first face (API, not used for training) | United States |
| Google (Gemini) | Alternative image analysis, only when enabled | United States |
| Cloudflare Turnstile | Bot protection | Global |
| PostHog | Product analytics (EU region, cookieless) | European Union |
| Resend | Service emails and the optional email list | United States |
Transfers outside your country rely on the providers' standard contractual safeguards. For Korean users this constitutes 개인정보 국외 이전 under the Personal Information Protection Act; the recipients, purposes and retention are listed above.
4. Cookies
We use strictly necessary cookies only: the sign-in session cookies set by our authentication provider (names beginning with sb-, including a short-lived sign-in verifier), a cookie that returns you to the page you came from after sign-in (yoruna_auth_continuation; it holds only the language, the return page and the sign-in method, and is deleted after 15 minutes or as soon as sign-in finishes), and a language preference cookie (NEXT_LOCALE). We do not use advertising cookies, and analytics runs without cookies. Our bot-protection provider may set a short-lived cookie of its own while it checks a request.
5. Your choices and rights
- You can use the free tool without an account or email.
- "Start over" deletes the local draft, thumbnails and originals from your browser.
- Export: from your account you can download everything (all passports, every version, stored originals and provenance) on any plan, at any time. Downgrading or cancelling never deletes your data.
- Deletion: you can request account deletion from your account page. Your data is hidden and sign-in is blocked immediately; you can cancel within 14 days using the link we email you; after that period the account data and stored media are permanently deleted. Previously issued image links can remain valid for up to one hour, and copies cached by our content delivery network may persist briefly after that. Payment/refund inquiry records are an exception as described in §1.6.
- Sign-in connections: you can remove Yoruna's access at any time in your Google or Discord account settings. Your Yoruna account and data stay, and you can keep signing in with email. Deleting your Yoruna account also deletes the connected sign-in data.
- Email: every marketing message includes an unsubscribe link. Service messages about your account continue while the account exists.
- You can write to support@yoruna.world to access, correct or delete your data.
- Depending on where you live you may have rights of access, rectification, erasure, restriction, portability and objection, and the right to lodge a complaint with a supervisory authority (for Korea: 개인정보분쟁조정위원회 / 개인정보침해신고센터).
6. Age
The service is not intended for children under 14 (Korea) or under the age of digital consent in your country. Do not upload images if you are under 16 without a guardian's permission. Paid plans require a guardian's consent for minors.
7. Security
Traffic is encrypted with TLS. Images analysed without an account are processed in memory and never written to disk. Stored images live in private buckets that only your signed-in session can read through short-lived links, and the storage provider encrypts them at rest. Database access is restricted per account.
8. Contact and changes
Controller: Yoruna, Arche (아르케) · Park Inho (박인호) · 515-1801, 46 Geumgok-ro, Gwonseon-gu, Suwon-si, Gyeonggi-do, Republic of Korea · +82-10-7116-1404 · support@yoruna.world · 535-01-03816 · 2026-수원권선-1110 · Vercel Inc.. Contact: support@yoruna.world. We will announce material changes on this page and, if you have an account or gave us an email, by email at least 30 days before they take effect.