Privacy

This site collects a first name and, if you buy, whatever Stripe needs to take a payment. There is no analytics product and no profile is built about you. Advertising measurement runs only where you have agreed to it, and you can switch it off further down this page. Nothing is sold, and nothing is shared with anyone beyond the providers named below.

The controller for the purposes of the General Data Protection Regulation is Julian Klubak, Lagerstraße 11, Haus B, 64807 Dieburg, Germany. Write to support@onoma.life with any question about your data and a person will answer.

When you type a first name, it is sent to our server so the analysis can be written, and it appears in the address of the page you are shown. It is not stored in any database, because there is no database. If you never buy anything, the name exists only in that request and in your own browser history.

Legal basis: performing a contract or taking steps at your request before entering one, article 6(1)(b) GDPR.

Payment is handled by Stripe Payments Europe, Ltd., Dublin, Ireland. You enter your card details on Stripe's page, not ours. We never see or store them. Stripe tells us that a payment succeeded and gives us back the first name you entered, so the correct analysis can be shown.

Stripe keeps a record of the transaction under its own privacy policy, which you can read at stripe.com/privacy. We keep no copy of your payment details.

Legal basis: performing the contract, article 6(1)(b) GDPR, and our legal obligation to keep commercial records, article 6(1)(c) GDPR.

If you give an email address at checkout, we send you the link to your analysis and the PDF. That email is sent through Resend (Plus Five Five, Inc., United States), acting as our processor under a data processing agreement, with transfers covered by the EU standard contractual clauses.

The email is transactional. It is sent once, it is about the thing you bought, and there is no mailing list. We do not send marketing email and there is nothing to unsubscribe from.

Our hosting provider records ordinary technical information for each request: the address requested, the time, the response code, the browser's user agent string and a shortened IP address. This is what any web server writes down in order to run and to stay secure. These logs are kept briefly and are not used to build a profile of anyone.

Legal basis: our legitimate interest in operating a secure service, article 6(1)(f) GDPR.

This site is advertised on Facebook and Instagram. To learn which advertisement led to a purchase, and only for that, we use the Meta pixel, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

It loads only after you have agreed to it. Where consent is required and you have not given it, the pixel is never loaded at all, so no cookie is set and there is nothing to undo. If you did agree, the pixel stores two cookies in your browser, records that a page was opened, that a checkout was started and that a purchase completed, together with the amount paid.

When a purchase completes, our server also reports that same purchase to Meta directly, because a browser-side report is often blocked. That report contains the amount, the two cookies named above and your email address in an irreversibly hashed form, so that Meta can match the sale to the advertisement without us handing over your address. It never contains the first name you looked up or anything from your analysis.

Meta Platforms Ireland and we are jointly responsible for the collection and transmission of this data; everything Meta does with it afterwards is Meta’s own responsibility, under its privacy policy. The data is transferred to Meta Platforms, Inc. in the United States on the basis of the EU standard contractual clauses and the EU–US Data Privacy Framework.

Legal basis: your consent, article 6(1)(a) GDPR and §25(1) TDDDG. You may withdraw it at any time with the button below, which also deletes the cookies. Withdrawal does not affect what happened before it.

This site sets no cookies of its own. Your browser stores a few small notes locally: one so the analysis sequence does not replay if you revisit the same name in the same session, one recording your answer to the consent question so you are not asked twice, and — where you allowed measurement — one holding the campaign tags from the link you arrived through, so a purchase can be matched to the advertisement that led to it. None of them leaves your device except the last, which is attached to your order. The only cookies are the advertising cookies described in section 07, which exist only if you allowed them.

Stripe sets its own cookies on its own checkout page, which is necessary for payment and fraud prevention. That happens on Stripe's domain, under Stripe's policy.

The name you enter is not stored at all. Payment records are kept by Stripe, and we keep the commercial records that German tax law requires us to keep, which is ten years for invoices. Server logs are kept for a short period and then discarded.

Under the GDPR you may ask for access to your data, correction of it, deletion of it, restriction of its processing, and a copy of it in a portable form. You may object to processing based on legitimate interest. You may withdraw consent at any time without affecting what was lawful before.

Write to support@onoma.life. In practice, the only data we can hold about you is a Stripe transaction, so please include the email address you used at checkout so we can find it.

You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of the state in which you live.

Onoma is sold to adults. We do not knowingly take payment from anyone under sixteen, and there is nothing on the free part of the site that collects data beyond a first name.