Data & security · Effective 31 October 2026
Birth details are encrypted before they are stored. Encryption keys are kept separate from application data and are never sent to your browser. Saved context and planning records are protected by access controls that limit them to the account owner. Personal setup asks you to review and explicitly save your verified profile before subscription checkout; an unsaved preview remains temporary.
Database row-level security rules and server-only functions keep each account's data separate from other accounts. Private pages require sign-in and are excluded from the sitemap and analytics.
Rate limits, duplicate-request protection, unchangeable container images, redacted logs (personal details and secret links removed), backup and restore tests, and incident alerts are checked before each release.
Offline place names and administrative regions are adapted from GeoNames under CC BY 4.0. MyTongShu filters this source to place name, ASCII name, administrative region, country and time zone; it omits coordinates and other fields. Source limits and exact file checksums are recorded in the project's catalog records.
Security controls reduce risk but cannot make any online service risk-free. Report a suspected issue through the support channel rather than sharing personal data in a public issue.
