Policy version mytongshu-privacy-v2-20260814
Public pages contain only general, deterministic reference facts. Birth details, personal context, forecast results and calendar tokens belong to the authenticated account boundary.
We collect the minimum account, order, consent, support and post-purchase profile data needed to authenticate you, take payment, generate the guide, deliver calendar files and protect the service. Birth and report data are encrypted, owner-scoped and excluded from public URLs and analytics.
Essential operation is always on. Optional analytics and marketing choices are separate, default off, and recorded only after an explicit choice under the versioned consent ledger. If you allow analytics, we record only coarse route, referrer, locale, device, region, CTA and bounded time-on-page signals for funnel improvement; no birth data, email, payment identifiers, token URLs, session replay or autocapture is stored.
Unsaved drafts, operational logs, analytics, private artefacts and financial records follow the documented retention schedule. Supabase, Google Cloud, Stripe, Resend and place-resolution services receive only the minimum data needed for their role.
Depending on your location, you may have rights to access, correct, delete, restrict, port or object to processing, withdraw optional consent, or complain to a supervisory authority. The service does not sell or share birth data, report data or account data for cross-context behavioural advertising.
Open account privacy controls Regional rights and tax disclosures
This plain-language notice supplements, and does not replace, the terms governing your use of the service. Mandatory local rights prevail.