Privacy Policy

1. What we collect

Accounts: your email address, display name and a one-way hash of your password. We never see your password itself.

Consultation requests: your question, date and time of birth, birthplace, gender, calendar, and the contact method you choose (such as email, WhatsApp, Telegram, WeChat or LINE).

Artifacts orders: recipient name, address and phone number.

Technical data: for security and to prevent abuse, our servers record IP addresses, times and requests, which we use for measures such as limiting login attempts.

The BaZi chart is calculated in your browser; your birth details are not sent to our servers. If you use a share link, the birth details are included in the link, so take care whom you share it with.

2. How we use it

We use your information only to run your account and password recovery; pass on and handle your consultation requests; process orders; send you emails about the service (such as email verification, password resets and consultation updates); and keep the site secure.

We do not sell your personal information or use it for advertising.

3. Who we share it with

The expert handling your consultation: they see your contact details only after accepting your request; before that, they see only the question and birth details.

Service providers: Cloudflare hosts the site, delivers its content and stores its images; a cloud server provider hosts our database; an email provider sends our notification emails; and Umami measures site visits. They may process data only on our instructions.

Legal requirements: we may disclose information where the law requires it, or where it is needed to protect the safety of users or the public.

4. Cookies and local storage

We use only the cookies the site needs to work: a login session cookie and a security cookie that protects against cross-site request forgery (CSRF). A session lasts at most 30 days and ends after 7 days without use.

When you are not signed in, your browser also stores your shopping cart. It stays on your device.

We use no analytics or advertising cookies. Cloudflare may set security cookies needed to block malicious traffic.

We use Umami to measure visits to the site: the pages viewed, the referring site, browser and device type, and country or region. Umami uses no cookies, does not store your IP address and cannot identify you; we look only at aggregate figures, to improve the content.

5. How long we keep it

Account information is kept until you ask us to delete your account.

The question, birth details and contact details in a consultation request are deleted 180 days after it is completed or cancelled; only a record of how it was handled, with no personal information, is kept.

An order’s street address and phone number are deleted 60 days after the order is placed, or 30 days after an unpaid order expires.

Security logs are kept only as long as needed to investigate problems.

6. Your rights

You can view and update your details and change your password under “My account” at any time. You can also write to us to access, correct, export or delete your personal information, or to object to a particular use of it. We will respond once we have confirmed your identity, normally within 30 days.

If you believe we have not handled your information lawfully, you may complain to the data protection authority where you live.

7. Security

We send data over encrypted connections (HTTPS), store passwords only as one-way hashes, and limit who can access personal information. No transmission over the internet is completely secure, however.

8. Children

The site is not intended for children under 16. If you learn that a child has given us personal information without a parent’s or guardian’s consent, please contact us and we will delete it.

9. Changes to this policy

When we revise this policy we will update the “Last updated” date on this page; if a change affects your rights, we will tell you prominently on the site or by email.