Privacy

Effective date: 10 November 2026.

You do not sign up for the questions or your reading, and we never ask your name. When you finish the questions, your browser sends your answers to our server for your reading, and again as a record we keep, with the two lines you type and your result. After 365 days we delete your reading and what you typed, and keep the rest of the record to learn whether the questions and the readings work. An email you leave for news or a reminder is kept apart, for what you asked for. On a visit from one of our ads, Google's tag measures whether you press Start, and you can turn it off.

Who we are

Cayrne is run by Udefed, LLC, a limited liability company formed in Delaware, United States, Delaware file number 10762017, and run from Seoul, Korea. Our registered address is Udefed, LLC, c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, USA. For privacy questions, complaints and anything else on this page, write to Privacy, Udefed, LLC, at support@udefed.com.

What reaches us, and why

None of a run's answers is sent before you finish. When you finish, your browser sends your answers to work out your reading, a request we do not store, and separately as a record, which we keep. The record holds:

• Your answers, with the two answers not used in your reading;
• Whether you chose “Nothing right now”;
• The two lines you type, as you wrote them, for us to read;
• Answer times and first taps;
• Your result and the numbers behind it;
• A few numbers about how you tapped;
• Browser language, device type and screen-size group;
• A random run id, and a random reading id that opens your reading again from its address for whoever has it;
• The question version and the record layout version;
• The time the record arrived;
• Our server's check of whether the record is complete and looks genuine;
• Your score, the lines you tap and your comment, if you choose a score once your record has reached us, and whether you ticked “OK to answer this publicly (anonymously)” beside it.

A comment of 100 characters or more earns a code for a free first month of our subscription, as the terms of use describe. We keep the code and the day we made it apart from your record, with nothing linking the two, until 31 March 2027, so the code works when you use it.

If you tick “OK to answer this publicly (anonymously)” beside your comment, the person who built Cayrne may pick it as a question and publish it with an answer on our Q&A page at cayrne.com/qa. We publish your words exactly, whole or in part, with the month, and with no name and nothing else from your record beside them. A comment long enough to earn the feedback reward is marked as one there. Once published, the question is part of a public page: anyone, search engines and AI systems included, may read it, quote it and train AI models on it, as the terms of use say for every public page.

Four more things reach us or our services:

• Your network address: our server reads it as each request arrives and never writes it into a record; a scrambled form of it counts your requests, to cap how many each network address can make in an hour.
• What a page sends GoatCounter: to count how many people visit each page, where they came from, and how many start the questions and see a reading.
• What Google's tag sends Google, when it runs: to learn which of our ads bring people who press Start.
• An email you send us: to answer it.

We use all of this for nine purposes:

• 1. To give you your reading, and a way back to it, from your answers and the reading id.
• 2. To learn whether the reading lands and to improve the questions and the writing, from the record, the two lines, your score, the lines you tap and your comment. We publish statistics for groups, never anyone's own answers; purpose 9 says when we publish a comment.
• 3. To plan a possible paid version, from the same records, studied as group statistics.
• 4. To keep the records honest, with the run id, the answer times, the tap numbers and our server's check.
• 5. To keep the site up, and to count how many people visit and finish, with the request counts and GoatCounter.
• 6. To answer you, if you write to us.
• 7. To send you what you ticked, if you leave your email, with a record of what you agreed to and when.
• 8. To learn which of our ads bring people who press Start, from what Google's tag sends.
• 9. To answer questions in public, if you tick “OK to answer this publicly (anonymously)”: a question we pick goes on the Q&A page, as above.

Our legal grounds

Under European and UK law, purposes 1 to 6 rest on our legitimate interest in them, GDPR Article 6(1)(f), and you can object to them. Purpose 7 rests on the consent you give by ticking a box and pressing Get updates, GDPR Article 6(1)(a), which you can withdraw at any time by leaving the list. Purpose 8 rests on the consent you give by choosing Accept all, GDPR Article 6(1)(a), which you can withdraw at any time by choosing Essential only. Purpose 9 rests on the consent you give by ticking the box beside your comment, GDPR Article 6(1)(a), which you can withdraw at any time by asking us to take the question down.

Korea's Personal Information Protection Act lets us use all of this without your consent, apart from an email you leave for updates, what Google's tag sends and a comment you tick for the Q&A. We use your answers, whether you chose “Nothing right now”, the question version and an email you send us because your reading and our answer need them (Article 15(1)(4)), and the record, the two lines, a comment, your network address and what a page sends GoatCounter on our legitimate interest in purposes 2 to 5 (Article 15(1)(6)). We use an email you leave for updates with your consent, one box for each thing you want (Article 15(1)(1)). We publish a comment you tick for the Q&A with your consent (Article 15(1)(1)): the item is the comment itself, it stays on the page until you ask us to take it down, and leaving the box unticked changes nothing about your reading or the reward. Google's tag, for purpose 8, stays off for connections from Korea.

No law or contract requires you to answer; without answers there is no reading. Your reading comes from your answers by a fixed formula, and nothing is decided about you with it.

How long we keep it

• Your record and your reading: 365 days from the time the record arrived. Then we delete your reading and remove both ids, the two lines and your comment; the rest of the record, your score and tapped lines included, stays with no end date, its arrival time cut to the day, for purposes 2 and 3.
• The run id of a record you asked us to delete: kept alone, with no end date, so that a copy still waiting in a browser is not stored again.
• A question we pick for the Q&A page: on our own computer while we answer it, and once published, on the page until you ask us to take it down. The comment in your record keeps its own 365 days.
• Request counts and similar short notes, kept under scrambled forms: normally deleted within a few hours.
• Copies: our database host can restore a deleted or changed record, or an address taken off the email list, for up to 30 days, and a working copy on our own computer is deleted when its work is done, within 30 days. Earlier versions of our site, which our host keeps at addresses search engines are asked to leave out of their results, hold a question taken down from the Q&A page until we delete them, within 30 days.
• What GoatCounter keeps: each page view is added to hourly and daily counts of which page was seen, the page you came from or the campaign named in the link you followed, your browser and system, your screen size and your rough location. Presses of Start and readings that appear are counted the same way. GoatCounter stores no network address. To tell a first visit from a return, it holds your network address and browser details in memory, for up to 8 hours, linked to a random id, and never writes them to its database. The counts stay in our GoatCounter account for as long as we run the site.
• An email you send us: until its matter is closed. We then delete it with our reply, and our mail account can restore it for up to 25 days after it leaves the bin.
• An email you leave for updates: until you leave or ask us to delete it, or until your reminder is sent if you asked for nothing else (see “Your email, if you leave it”).

Deleting a record means removing its rows from the database. Apart from the copies named above, we keep no other copy of a record.

Your email, if you leave it

If you give us your email, we keep it to send what you ticked: news and updates, a reminder in a month, or both, with the emails about them below. It is stored apart from your answers and is not linked to your reading. Nothing is kept unless you tick a box and press Get updates, and each box you tick is your consent to what it names. When we accept your request, the page shows your receipt: Udefed, LLC, the choices you sent and the day we recorded them. With your address we keep the boxes you ticked and, for each, the version of the words you agreed to, a few dates kept as days, never times, a random key for the leave link, and a note while an email to you is on its way or if mail systems refuse your address. If you asked for news before its box named it advertising, ticking that box under its new words records those words and that day in place of the old ones. Ticking news again under the same version of the words keeps the day you first agreed, and ticking the reminder alone leaves your news choice as it was.

• The confirmation. When you tick a box and press Get updates, we send you one email confirming what you asked for, when your choice is new, at most once a day and within our daily limit.
• The reminder. It is one email, sent once a month has passed since you last ticked it, linking to our front page and carrying nothing from your reading. If the reminder was all you ticked, we then delete your address.
• News emails. You can ask for news from us, and we keep your choice; we send no news yet.

Each of these emails has a link to leave, and the button on the page it opens deletes your address at once. Your mail app's unsubscribe button works too: we delete your address at once, or, if you had asked for news, after one plain email confirming that you left, within 13 days, unless you tick a box again.

Who receives it, and where it goes

These services handle what you send. Cloudflare, Resend and, for our mailbox, Google do so on our behalf, each for the work named with it. GoatCounter, and Anthropic when we use Claude, act under their own terms and privacy policies, with no other agreement with us. For our ads, Google acts as a controller in its own right, under the Google Ads Controller-Controller Data Protection Terms.

• Cloudflare, Inc. (United States; 101 Townsend St, San Francisco, CA 94107, USA) hosts the site and runs our programs, so every request passes through it with your network address. Under its data processing addendum it keeps the records, the readings and the email list in three databases we asked it to keep in western Europe, for as long as we keep them; the request counts and the reward codes sit wherever its network places them, and its own records of requests follow its privacy policy.
• Google LLC (United States, and other countries where it keeps mail; 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) runs our mailbox at support@udefed.com and holds an email you send us for as long as we keep it. Its tag also measures our ads (see “Google's tag and your choice”): it gets the addresses of our pages without anything after a ? or a #, the id of the ad click, Google's own cookie id and, at Start, that you pressed it, with your network address and browser details, and never your answers, what you type or your reading. Google keeps this as its privacy policy says.
• Plus Five Five, Inc., which runs Resend (United States; 2261 Market Street #5039, San Francisco, CA 94114, USA), sends our emails from Japan (Tokyo) under its data processing addendum. It receives your address and each email's words, nothing from your reading, keeps each email for up to 30 days, and keeps an address that bounces for good or is reported as spam on its list of addresses to skip.
• GoatCounter (run by Martin Tournoij in Ireland, with its data kept by Hetzner Online GmbH in Finland and Germany; contact details at goatcounter.com) counts visits: each page sends it the page's address and title, the page you came from, your screen size and whether your browser looks automated, with your network address and browser details, and the page with the questions also tells it when you press Start and when your reading appears. It receives none of your answers and nothing you type.
• Anthropic, PBC (United States; 548 Market St, PMB 90375, San Francisco, CA 94104, USA) makes Claude, an AI tool. We read comments ourselves, and when Claude helps, Anthropic receives the text of each comment and nothing else; it keeps the text while the chat stays in our account, then as its privacy policy says.

Cloudflare and Google list the companies that do parts of this work for them at cloudflare.com/gdpr/subprocessors and workspace.google.com/terms/subprocessors.html. Apart from GoatCounter's script, and Google's tag when it runs (see “Google's tag and your choice”), our pages load everything from cayrne.com.

Moving data out of Korea. We run Cayrne from Korea, and every service above is outside it. Google's tag stays off for connections from Korea, so it is not part of this. Korean law allows the move to Cloudflare, Google, Resend and Anthropic because the service in the terms of use, which you accept by pressing Start, the email list you join and our answers to you need their work, and these details are published here (Article 28-8(1)(3)). It allows the move to GoatCounter because it keeps its data in the European Union, which Korea's Personal Information Protection Commission recognises as protecting personal data at substantially the same level as Korean law (Article 28-8(1)(5)). Data moves over an encrypted connection as each request leaves your browser or as we read comments, and by email when an email passes between you and us.

To refuse. Do not press Start, or close the page before the last question: none of this run's answers is sent and there is no reading, though your visit still passes through Cloudflare. Not writing a comment keeps it from Anthropic and us, leaving the box beside your comment unticked keeps your comment off the Q&A page, and not leaving your email keeps it from Cloudflare, Resend and us. GoatCounter's switch keeps your visits out of GoatCounter's counts, and a content blocker keeps them from GoatCounter (see “What you can ask of us”). The questions work the same without those.

For readers in the EU and the UK. Cloudflare is certified under the EU-U.S. Data Privacy Framework and its UK Extension, and Resend says it complies with that Framework. Both of their addendums carry the EU standard contractual clauses, with the UK's for UK data, and Google's terms, at cloud.google.com/terms/data-processing-addendum, carry the EU clauses too. When we use Claude, Anthropic acts under its consumer terms alone. If you choose Accept all, Google's tag sends to Google LLC, which is certified under the EU-U.S. Data Privacy Framework, its UK Extension and the Swiss-U.S. Data Privacy Framework. GoatCounter keeps its data in the EU. We will send you a copy of any of these terms if you ask.

What you can ask of us

To delete your record. Write to support@udefed.com with your reading's address, the link ending in # and 32 letters and digits that this browser's list of readings opens, or, for a reading you opened at pathofliving.com, that the list at pathofliving.com/app/earlier opens in the same browser. We delete the record, its comment and the reading by hand, within 10 days of your email, and tell you when it is done; if we published your comment on the Q&A page, we take it down too. This works until the record's 365 days are up. Cayrne is for people 16 and older, so anyone who believes a record came from someone under 16 can ask us to delete it the same way. Because we cannot confirm who sent a record, we delete records on request but do not send copies or change them.

To take a question down from the Q&A page. Write to support@udefed.com with its number or its words, and we take it down, or keep it off the page if it is not up yet, within 10 days. We do this for whoever asks, because we cannot tell who wrote a question.

To object. You can object at any time to our keeping your answers, for any or all of the purposes above. Write with your reading's address. We do not weigh your objection against our reasons: we delete the record as above. To keep your visits out of GoatCounter's counts, open the method page this way once, and again to undo it, or block its script; the questions work the same without it.

To take your email off the list. Use the leave link in the confirmation, a reminder or a news email: pressing the button on the page it opens deletes your address from our list at once. Or write to support@udefed.com from that address; we delete it, and what goes with it, within 10 days of your email, and tell you when it is done.

About an email you send us. You can ask us to send you a copy of it, correct it, stop using it or delete it before its matter is closed. Someone you authorise in writing, or your legal guardian, can make any request on this page for you.

To complain. You can complain to us first, at the same address, or to your data protection authority: in the EU, the one in your country; in the UK, the Information Commissioner's Office; in Korea, the Personal Information Protection Commission, at privacy.kisa.or.kr or on 118.

In your browser

Our own code sets no cookies, and GoatCounter counts our visits without them. When it runs, Google's tag sets Google's cookies on this site, with names that begin with _gcl_, for up to 90 days after it last runs. It may also keep the same ids in this site's storage. If your browser sends Global Privacy Control, Google's tag stays off. Our own code does not read Do Not Track. Your browser keeps these for this site, on your device:

• the run you are part way through or have finished, the two lines you type included: until you close the tab or press Start over;
• a record that could not be sent, the two lines you typed included: five at most, until it is sent or you clear this site's data;
• the list of readings this browser has opened, with a feedback reward code beside the reading that earned it: sixty at most, until you clear this site's data;
• whether you paused the motion: until you press play again or clear this site's data;
• the theme you picked for the pages of the sixteen types, Auto, Light, Dark or Color: until you pick another or clear this site's data;
• your choice about Google's tag, Accept all or Essential only, with the day you made it: until you change it or clear this site's data.

If you use GoatCounter's switch, its script keeps a setting that tells it not to count your browser, until you use the switch again or clear this site's data. Blocking this site's data leaves the questions working, but a reload loses your progress, an unsent record is lost, the list of readings stays empty, and a choice about Google's tag lasts while its page is open.

What stays at pathofliving.com. Until 10 November 2026 this site was at pathofliving.com, and what your browser kept for it there stays under that address: the list of readings with any reward code beside them, a record it could not send, whether you paused the motion, the theme you picked for the pages of the sixteen types, your choice about Google's tag and any cookies Google's tag set there, and GoatCounter's setting not to count you, if you set it. Pages here cannot read any of it, and nothing moves it here. In the same browser, pathofliving.com/app/earlier lists the readings from that list, each with its type and date and any reward code beside it, and opens each one here; that page reads the list on your device and nothing else, writes nothing and sends nothing. A record your browser could not send from there is not sent from here. If you had switched off GoatCounter's counting there, it counts your visits here until you switch it off here too. A choice you made there about Google's tag is not known here: make it again in “Google's tag and your choice”. A run you were part way through at the move starts over if you reload the page. To remove what stays at pathofliving.com, clear the data your browser keeps for that site in its settings.

Google's tag and your choice

We run ads on Google, and Google's tag measures which of them bring people who press Start. Google's tag runs on a visit from one of our ads: on the front page, and when you press Start on that visit or while Google's cookie from such a visit is on this browser. It always runs in an empty page of its own inside ours. It stays off for connections from Korea, and in the EEA, the UK and Switzerland it waits until you choose Accept all, on the bar at the foot of the front page or here. Choosing Essential only here keeps it off this browser and deletes the _gcl_ cookies it set on this site; you can also block it with a content blocker.

The share button

The share button uses your device's own share sheet, or copies to your clipboard, the line that names your result and a link to this site, never your reading's address. Where it goes is your choice, and nothing about it, including whether you shared at all, is sent to us.

How it is protected

• Our pages, and everything they send, travel over an encrypted connection.
• Your record and your reading sit in two separate databases, and the record's database belongs to a separate program with no public address that never hands answers back to the site.
• The record has no field for a name, an email or a network address, and the email list sits in a third database with nothing from a reading.

If anything we hold is ever exposed, we would post a dated notice on our status page (cayrne.com/status) and the front page, saying what happened and what it touched, report it to the authorities the law names, and write to you directly if you wrote to us or left your email.

Changes to this page

If this page changes, the effective date at the top changes with it, and a short note here says what changed. If what we collect ever changes, we will say so here before it changes, not after.

29 October 2026. Saving is switched on. Your answers, the two lines you type and a comment, if you write one, are now kept, as this page describes. Before this date nothing you answered was kept.

30 October 2026. A line you tap while you read now marks one that feels off or unnatural to you.

31 October 2026. Your browser now remembers the theme you pick for the pages of the sixteen types.

6 November 2026. You can now leave your email for news and updates, a reminder in a month, or both.

7 November 2026. Resend now sends our emails, and with your address we now also keep a key for the leave link, a few dates and a note while an email to you is on its way. The news box now asks for your consent to advertising emails, and the page shows a receipt of your choices and the day. Google's tag now measures visits from our ads, and this page is shorter.

8 November 2026. A comment of 100 characters or more now earns a code for a free first month of our subscription. We keep the code apart from your record, and your browser keeps it beside your reading.

9 November 2026. You can now tick “OK to answer this publicly (anonymously)” beside your comment. A question we pick goes on our new Q&A page with an answer, without your name, until you ask us to take it down. The email form now lists the reminder first, under a new version of its words.

10 November 2026. Path of Living is now Cayrne, at cayrne.com, and this page uses the new name. The old address forwards here, except for one page, pathofliving.com/app/earlier, which lists the readings your browser kept there. A new paragraph in “In your browser”, “What stays at pathofliving.com”, says what else your browser kept at the old address and that it stays there. “To delete your record” now points to that page for a reading you opened at the old address. The Google paragraph now says its tag also runs on the front page on a visit from one of our ads, the Cloudflare paragraph now names the reward codes beside the request counts, and the page at the old address shows any reward code beside its reading.