Privacy Policy

This policy explains what information we collect, why we use it, how we retain it, who receives it and how you can exercise your rights.

1. Overview

占卜迷指 (we) provides 占卜迷指 (the service). This policy explains the related processing of personal information and forms part of the Terms of Service. Read it in full before use.

2. Information collected

Information you provide includes account details (email, password and display name), questions, birth date, time and place needed for a chart, and divination actions and their timing. Obtain authorization before submitting someone else's details. Passwords are stored as hashes, not plain text.

The service creates conversations, charts, interpretations, points activity and membership usage records. Technical logs may include the connection IP, request time, browser and device details, and errors for troubleshooting and abuse prevention. Do not submit unrelated identity document numbers or biometric information.

Order records include the product, amount, currency, payment status, transaction identifiers, purchase language, content version and membership benefits. At checkout, the payment provider collects payment method, billing and tax information it needs. The site does not receive or store full card numbers or security codes.

Public pages use Google Analytics 4 for statistics such as page views, device information and referral sources. Processing depends on browser settings and provider rules; analytics data should not all be assumed to be incapable of identifying a person.

3. Birth information

Birth date, time and place are personal information and may be sensitive when combined with other data. Saved birth profiles and information cards use AES-256-GCM encryption. This does not mean that every conversation or interpretation field is encrypted. Details you enter and generated content may also appear in conversation and interpretation records.

You decide whether to provide birth information. Methods have different data requirements, so declining may limit available methods. Saved cards can be deleted in the cards view; conversations can be deleted or cleared in history. Deleting a card does not automatically remove details already referenced in other records.

4. Purposes of use

We process data to understand intent, recommend methods, calculate charts, interpret results and retain history, and for authentication, password recovery, security, order reconciliation, points and membership accounting, language preferences, usage statistics and legal obligations.

We do not sell personal information or use it to market to third parties, and do not train our own models on divination content. Third-party processing follows the actual provider terms; this does not imply that those providers do not retain data or use it for training.

5. Third parties and international transfers

For conversations and interpretations, model providers receive questions, necessary details, charts and relevant context. Calculation services process chart parameters. Email providers receive addresses and content for verification, password recovery and similar messages. Google Analytics 4 processes visit statistics.

When online purchases are enabled, Dodo Payments hosts checkout, processes payments and necessary billing information, and returns transaction data for order verification, refund status and benefit delivery. English checkout does not change these purposes.

Providers may process data outside your location, depending on actual configuration and processing locations. Their privacy policies and terms apply. This policy does not assert unverified certifications or contractual safeguards. We do not disclose personal information to third parties beyond what is needed for features, your authorization or legal requirements.

6. Cookies and language preferences

Sign-in cookies maintain your session; disabling them prevents normal sign-in. The browser may also retain interface state and a retry identifier for the same purchase to avoid duplicate orders.

A language preference cookie stores the language and selection source. Manual choices take priority over detection and can sync to your account when signed in. Restoring automatic selection clears the manual preference. Conversations and running generation tasks retain their own language snapshots; changing preferences does not rewrite history.

Automatic selection uses browser or HTTP language tags. If none match, a region hint from a trusted proxy may be used as a fallback. We do not infer language from questions, names or nationality, or retain raw IP addresses for language detection. Security logging is described separately. Public page language is determined by its URL.

Google Analytics 4 may use analytics cookies, which you can restrict through browser settings or the provider's opt-out tools. We do not use advertising tracking cookies or build cross-site advertising profiles.

7. Retention

Account details are generally retained until account closure or a valid deletion request. Conversations, cards and interpretations are retained until the relevant deletion action or request is completed. Deleting a conversation or card affects its own scope, without also deleting accounts, orders or other independent records.

Payment, points and membership records may be retained for reconciliation, disputes or legal obligations. Technical logs are managed for troubleshooting and security needs. There is no single automatic expiry period for all records. Information beyond what is necessary should be deleted or anonymized; contact us about specific requests.

8. Security

Passwords use salted scrypt hashes, sign-in tokens are stored in the database only as hashes, and saved birth details use field encryption. Encryption keys are managed by the deployment environment. We manage access according to necessity.

No technology guarantees absolute security. For personal information incidents, we will take remedial steps and fulfill notification and reporting duties under applicable law.

9. Your rights

You can view account details and history, export interpretations as Markdown or JSON, change your display name and password, and delete the relevant records in cards and history. Correct birth details by deleting and saving the card again. You can withdraw consent by stopping the relevant features and requesting action on the associated data.

Use the published contact details for account closure and other deletion, correction or copy requests; the account page does not currently provide all these options as self-service. We verify identity and act under applicable law. You may complain to us or a competent data protection authority.

10. Minors

The service is not intended for children under 14. If we find that a child's information was collected without guardian consent, we will promptly arrange deletion. Guardians should contact us about such cases.

11. Policy updates

Material changes to processing purposes, methods or information categories will be announced by notice or email, with a new version and effective date. Separate consent will be requested where law requires it. Earlier consent records retain their original version and time.

12. Contact

For questions, rights requests or complaints, email support@zhanbumizhi.top. We will verify your identity and the scope of your request, then handle it and respond under applicable law.