Legal
Privacy
In effect from 2026-09-10
01The short version
This site collects a first name and, if you buy, whatever Stripe needs to take a payment. There is no analytics, no advertising pixel and no tracking cookie. Nothing is sold or shared with anyone beyond the two providers named below, and both are needed to make the product work at all.
02Who is responsible
The controller for the purposes of the General Data Protection Regulation is Julian Klubak, Lagerstraße 11, Haus B, 64807 Dieburg, Germany. Write to support@onoma.life with any question about your data and a person will answer.
03The name you enter
When you type a first name, it is sent to our server so the analysis can be written, and it appears in the address of the page you are shown. It is not stored in any database, because there is no database. If you never buy anything, the name exists only in that request and in your own browser history.
Legal basis: performing a contract or taking steps at your request before entering one, article 6(1)(b) GDPR.
04If you buy
Payment is handled by Stripe Payments Europe, Ltd., Dublin, Ireland. You enter your card details on Stripe's page, not ours. We never see or store them. Stripe tells us that a payment succeeded and gives us back the first name you entered, so the correct analysis can be shown.
Stripe keeps a record of the transaction under its own privacy policy, which you can read at stripe.com/privacy. We keep no copy of your payment details.
Legal basis: performing the contract, article 6(1)(b) GDPR, and our legal obligation to keep commercial records, article 6(1)(c) GDPR.
05The receipt email
If you give an email address at checkout, we send you the link to your analysis and the PDF. That email is sent through Resend (Plus Five Five, Inc., United States), acting as our processor under a data processing agreement, with transfers covered by the EU standard contractual clauses.
The email is transactional. It is sent once, it is about the thing you bought, and there is no mailing list. We do not send marketing email and there is nothing to unsubscribe from.
06Server logs
Our hosting provider records ordinary technical information for each request: the address requested, the time, the response code, the browser's user agent string and a shortened IP address. This is what any web server writes down in order to run and to stay secure. These logs are kept briefly and are not used to build a profile of anyone.
Legal basis: our legitimate interest in operating a secure service, article 6(1)(f) GDPR.
07Cookies
This site sets no cookies of its own and runs no analytics. There is nothing to consent to, which is why you are not being asked. Your browser stores one small note locally so that the analysis sequence does not replay if you revisit the same name in the same session. That note never leaves your device and is not readable by us.
Stripe sets its own cookies on its own checkout page, which is necessary for payment and fraud prevention. That happens on Stripe's domain, under Stripe's policy.
08How long anything is kept
The name you enter is not stored at all. Payment records are kept by Stripe, and we keep the commercial records that German tax law requires us to keep, which is ten years for invoices. Server logs are kept for a short period and then discarded.
09Your rights
Under the GDPR you may ask for access to your data, correction of it, deletion of it, restriction of its processing, and a copy of it in a portable form. You may object to processing based on legitimate interest. You may withdraw consent at any time without affecting what was lawful before.
Write to support@onoma.life. In practice, the only data we can hold about you is a Stripe transaction, so please include the email address you used at checkout so we can find it.
You also have the right to complain to a supervisory authority. In Germany that is the data protection authority of the state in which you live.
10Children
Onoma is sold to adults. We do not knowingly take payment from anyone under sixteen, and there is nothing on the free part of the site that collects data beyond a first name.