MingLi · Chinese Oracle
Privacy Policy
This Privacy Policy explains how {siteName} ({siteUrl}) handles information when you use our website. We are committed to collecting only what is needed to deliver readings and process payments.
1. Information We Collect
Birth information you enter: year, month, day, hour (0–23), and gender — used solely to generate your BaZi chart and report.
Session data: an anonymous session identifier stored in a cookie (`bazi_session`) to link purchases and reports to your visit.
Technical data: IP address (stored with session records), browser type, and standard server logs for security and abuse prevention.
Payment metadata: transaction IDs, amount, currency, and payment status from our payment processor. We do not receive or store full credit card numbers.
2. How We Use Information
To calculate and deliver your BaZi reading, including optional AI-enhanced narrative polish when enabled.
To fulfill purchases, prevent fraud, and deliver reports.
To maintain report access via shareable links you choose to distribute.
To improve reliability, diagnose errors, and protect the service.
3. What We Do Not Do
We do not sell your birth information or personal data to third-party marketers.
We do not use your birth details to build advertising profiles.
We do not require account registration, email, or phone number to generate a reading.
4. Cookies & Local Storage
`bazi_session` — essential cookie linking your browser to purchases and reports (duration: up to 1 year).
`NEXT_LOCALE` — stores your language preference (English or Chinese).
You can clear cookies in your browser settings; doing so may reset your session and require a new purchase to generate reports.
5. Third-Party Processors
Creem (or Stripe if configured) — payment processing. See the processor's privacy policy for card data handling.
Supabase — database hosting for sessions, payments, and report metadata.
Vercel — website hosting and content delivery.
DeepSeek (optional) — when AI report enhancement is enabled, report text may be sent to the LLM API for polishing. Birth data sent to the model is limited to what is necessary for narrative generation.
6. Data Retention
Report content and chart data are retained to support link-based access and operational caching. Cached birth-chart calculations may be reused across users with identical birth inputs to improve performance.
Session and payment records are retained as long as needed for accounting, fraud prevention, and legal compliance, then deleted or anonymized where feasible.
7. Sharing Report Links
Reports are accessible to anyone with the report URL (unlisted link model). If you share a link publicly, others may view the full report including birth details embedded in the chart.
Please share responsibly and only with people you trust.
8. Security
We use HTTPS encryption, server-side access controls, and webhook signature verification for payments. No method of transmission over the Internet is 100% secure; we strive to protect data using industry-standard practices.
9. Your Rights
Depending on your jurisdiction, you may have rights to access, correct, delete, or restrict processing of personal data. Contact legal@lurkfeed.com with your request and session or payment reference if available.
We will respond within a reasonable timeframe as required by applicable law.
10. Children
The service is not directed at children under 13 (or the minimum age in your region). We do not knowingly collect data from children. If you believe a child has provided information, contact us for deletion.
11. International Users
Data may be processed in countries where our hosting and service providers operate. By using the site, you acknowledge such transfers may occur with appropriate safeguards.
12. Changes to This Policy
We may update this Privacy Policy periodically. The "Last updated" date indicates the latest version. Continued use after changes constitutes acceptance where permitted by law.