Privacy
Your birth data makes your reading. Nothing else is done with it.
The whole policy fits on one page because the data practice is small: we collect what a reading needs, we use it to make the reading, and you can delete it yourself.
Last updated 3 September 2026
What we collect
Your birth details — date, time (if you know it), place, and the name you want the reading addressed to. This is the input the charts are computed from; without it there is nothing to read.
An email address, only if you give one. It has exactly one job: linking readings you made before signing in to your account when you sign in with the same address.
If you sign in, your account comes from Google OAuth — we receive your email address and account identifier. We never see your password; there is no password.
Questions you ask in chat, for the duration of the conversation. Chat runs on the reading you are looking at; we do not build a profile from your questions.
What it is used for
Computing your charts (BaZi, Zi Wei Dou Shu, Western positions) and writing the reading. That is the product, and that is the whole list.
Telling you your reading is finished — one email, to the address you gave, about the reading you just made.
If you ticked the box for occasional sky updates, we keep that answer and the date you gave it. We have not sent any such email yet. Leave the box alone and the only email you get from us is the one saying your reading is done.
Counting visits. We measure how many people reach each step, never who — the analytics sets no cookies and stores nothing in your browser, so there is no visitor to follow. That is also why this site has no cookie banner: there is nothing to consent to.
No advertising, no selling or sharing of personal data, no profiling beyond the reading you asked for.
Who processes it
Anthropic (Claude) generates the written chapters and chat answers from your computed chart. Supabase stores readings and handles sign-in. Vercel serves the site. Nominatim (OpenStreetMap) resolves the place name you type into coordinates — it receives the place text, not your name or birth date. GitHub holds the weekly database backup described below, encrypted.
PostHog counts how people move through the site — landing, wizard, reading, the paid chapters. It runs in cookieless mode, which is the mode where it stores nothing in your browser at all: no cookie, no local storage, no identifier that follows you between visits. It never receives your birth details, your name, or your email.
Resend sends the one email that says your reading is finished. It receives your address and the text of that email, and nothing else.
Each of these processes data to run this service, not for their own purposes.
How long we keep it, and how to delete it
A saved reading stays until you delete it. Signed in, every reading you own is listed under My readings, each with a delete that removes it and its chapters immediately and permanently.
Deleting your account (from My readings → delete account) removes your readings and the account itself in one step. Nothing in the app keeps a soft-delete copy; the only copy that can outlive a delete is the backup below.
The database is backed up once a week. Those backups are encrypted and deleted after 90 days. Something you delete leaves the live database at once, but a copy of it can sit in a backup until that backup expires. We open a backup only to recover from a failure — never to bring back something you deleted.
A reading made without signing in has no delete of its own — holding the link is not proof it is yours, so we do not let the link delete anything. Sign in with the email it was made with and it moves to My readings, where the delete works. If it was made without an email, write to the address below and we will delete it by hand.
Your rights
Everything we hold under your account is on one page — your readings list — and you can delete any of it, or all of it, yourself, without asking us. A reading you made without signing in is not on that page until you sign in with the email it was made with; until then, ask us and we will find it and delete it.
Anyone can type an address when they make a reading — we do not verify it. So a reading you did not make can attach to your account when you sign in with that address. Your readings page says how many attached just now, and each one has a Not mine that removes it from your list and unlinks it from your address.
If you are in the EU/UK, the GDPR rights to access, rectification, erasure, and portability apply. For anything the buttons do not cover, email us and we will do it by hand.
Contact: zpzlzmz@gmail.com