OMNIA · Privacy Policy · 隐私政策
1. Data Controller
Kailiang Zhang · privacy contact: support@everamulate.com · DPO: not applicable (small-scale operation).
2. The Short, Honest Version
- Birth data (date, time, place) is never stored on our servers. It is processed in memory to compute your chart and reading, then discarded. Your saved charts live only in your own browser (localStorage).
- About subscribers we store only account sign-in metadata: your email address, a random account identifier, the state of each subscription order (plan, status, period end, payment-event IDs), your sign-in sessions (a coarse device label such as “Chrome · Windows” and timestamps — no IP address, no raw browser string), and — only if you create them — hashed recovery codes.
- Payment card data is processed exclusively by our PCI-DSS certified payment processor, Waffo Pancake, and is not stored on our servers.
- We run no third-party analytics or marketing trackers and set no advertising cookies.
3. What We Collect & Why
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Subscription entitlement, sign-in codes, essential service notices | Contract performance |
| Random account identifier (also given to Waffo Pancake as the buyer identity at checkout, so your order binds to your verified email rather than to whatever is typed on the checkout form), plus the time the account was last used (to apply the retention rule below) | Linking payments to the right account | Contract performance |
| Subscription order state (from Waffo Pancake webhooks; one record per order) | Granting/withdrawing access | Contract performance |
| Sign-in sessions: coarse device label derived from your browser (e.g. “Safari · iOS”), created / last-used / signed-out timestamps | Letting you see and sign out your devices; limiting simultaneous devices per account (currently 2) | Contract performance |
| Recovery-code digests (SHA-256 only — never the codes themselves), with set identifier, whether the set is in force, and issue/expiry timestamps; only if you create them | Letting you sign in on a new device when email does not reach you | Contract performance |
| Birth data & question text (transient, in-memory) | Computing charts and generating the reading you requested | Contract performance |
| Approximate location from IP (city-level, via a local database; no third-party lookup) | Showing "here & now" sky context; optional | Legitimate interest |
| Server logs (IP, user agent; coordinates rounded to 0.1°, emails masked) | Security and abuse prevention | Legitimate interest |
For service-flow measurement, we keep only anonymous daily event counts (for example, the number of charts created that UTC day); they contain no personal data and are retained for 400 days.
4. Cookies & Local Storage
No advertising or analytics cookies. We use browser localStorage only, for: your language choice, your saved charts and form values, and your sign-in token. It stays on your device; clear it in your browser at any time.
5. Sharing
We do not sell your personal information. We share data only with processors needed to run the Service: Waffo Pancake (Merchant of Record: checkout, billing, invoices, refunds), Resend (delivery of sign-in code emails), our hosting provider (server in Frankfurt, EU), and large-language-model providers who receive only the numeric chart JSON and your optional question text — never your email, name or exact coordinates. Disclosure may also occur where legally required.
6. Security
TLS/HTTPS throughout; sign-in codes are stored hashed and expire in 10 minutes; sign-in sessions can be revoked at any time from your account panel (and are revoked automatically when the device limit is exceeded); recovery codes are stored only as SHA-256 digests and each works once; access to the subscription database is restricted; logs mask emails and blur coordinates. We keep only anonymous daily event counts (such as the number of charts created that UTC day), containing no personal data, for 400 days. If a breach affects you, we will notify you within 72 hours of confirmation.
7. Retention
| Data | Period | Then |
|---|---|---|
| Account (email, identifier) + subscription orders | While subscribed; deleted 90 days after the last subscription ends, provided the account has not been used (no sign-in session used) in those 90 days — an account still in use is kept until 90 days after its last use | Deleted |
| Payment-event IDs (webhook de-duplication) | 1 year | Deleted |
| Sign-in sessions | Until signed out or revoked (then 7 days), or 90 days after sign-in at most | Deleted |
| Sign-in codes | 10 minutes | Deleted |
| Recovery-code digests | Until used, replaced by a new set, or one year after issue — whichever comes first (unconfirmed candidate sets: 1 hour) | Deleted |
| Server logs | 30 days | Deleted |
| Birth data / questions / readings | Not stored server-side | — |
Anonymous daily event counts (such as the number of charts created that UTC day) contain no personal data and are deleted after 400 days.
8. Your Rights
Access, rectification, erasure, restriction, portability, objection, consent withdrawal — write to support@everamulate.com; we respond within 30 calendar days. You may also complain to your local data-protection authority.
9. International Transfers
Our server is in the EU (Frankfurt). Waffo Pancake and LLM providers may process data in other jurisdictions under their own safeguards (e.g. Standard Contractual Clauses).
10. Children
The Service is for adults 18+. We do not knowingly collect data from minors; if this occurs, contact us and we will delete it.
11. Changes
Updates are announced on this page at least 15 days before taking effect.
12. Contact
一 · 数据控制者
Kailiang Zhang · 隐私联系：support@everamulate.com · 数据保护官：不适用（小规模运营）。
二 · 简明版（句句属实）
- 出生数据（日期、时间、地点）绝不存储于我方服务器——仅在内存中用于排盘与生成解读，用毕即弃。你的存盘只在你自己的浏览器（localStorage）里。
- 对订户我们只存账户认证元数据：邮箱、一个随机账户号、每张订阅订单的状态（档位、状态、当期截止、支付事件编号）、登录会话（粗略的器物标签如「Chrome · Windows」与时间戳——不存 IP、不存浏览器原始标识）、以及（仅当你生成时）恢复码的哈希。
- 支付卡数据全程由 PCI-DSS 认证的支付处理方 Waffo Pancake 处理，不经我方服务器存储。
- 不接入任何第三方统计/营销追踪器，不设广告 cookie。
三 · 收集内容与目的
| 数据 | 目的 | 法律基础 |
|---|---|---|
| 邮箱 | 订阅权益、受印码、必要服务通知 | 履行合同 |
| 随机账户号（立契时作为买家身份交给 Waffo Pancake，使订单绑定到你已验证的邮箱，而不是收银台上随手填的邮箱），以及账户末次使用时间（用于执行下文的保留期） | 把付款关联到正确的账户 | 履行合同 |
| 订阅订单状态（来自 Waffo Pancake webhook；一单一记录） | 授予/收回解读权限 | 履行合同 |
| 登录会话：由浏览器归纳的粗略器物标签（如「Safari · iOS」）、建立/最近使用/收印时间 | 让你查看并收印各器物；限制每账户同时在线器物数（现为 2） | 履行合同 |
| 恢复码摘要（仅 SHA-256，绝不存明文），含批次号、是否生效、签发/到期时间；仅当你生成时 | 邮件不达时仍能在新器物上受印 | 履行合同 |
| 出生数据与叩问文字（瞬态、仅内存） | 排盘与生成你请求的解读 | 履行合同 |
| IP 推定的城市级位置（本地库查询，不外呼第三方） | 呈现"此刻此地"天象；可手动改 | 正当利益 |
| 服务器日志（IP、UA；坐标模糊至 0.1°、邮箱掩码） | 安全与防滥用 | 正当利益 |
为了解服务流程是否顺畅，我们仅保存匿名的每日事件计数（如当日 UTC 起盘次数）；其中不含任何个人数据，保留 400 天。
四 · Cookie 与本地存储
无广告与统计 cookie。仅用浏览器 localStorage 存：语言偏好、你的存盘与表单值、受印令牌——都在你的设备上，可随时在浏览器中清除。
五 · 共享
我们不出售你的个人信息。仅与运行本服务所必需的处理方共享：Waffo Pancake（记录商户：收银、账单、发票、退款）、Resend（受印码邮件投递）、服务器托管商（欧盟法兰克福）、以及大语言模型服务方——后者只收到盘面数字 JSON 与你可选填写的叩问文字，绝不含你的邮箱、姓名或精确坐标。法律要求时依法披露。
六 · 安全
全程 TLS/HTTPS；受印码仅存哈希、10 分钟过期；登录会话可随时在账户面板收印（超出器物上限时自动收印最久未用的一台）；恢复码只存 SHA-256 摘要、每枚只能用一次；订阅库访问受限；日志邮箱掩码、坐标模糊。我们仅保存匿名的每日事件计数（如当日 UTC 起盘次数），不含任何个人数据，保留 400 天。若发生影响你的数据事件，确认后 72 小时内通知。
七 · 保留期限
| 数据 | 期限 | 期满 |
|---|---|---|
| 账户（邮箱、账户号）+ 订阅订单 | 订阅期内；末次订阅结束满 90 天且此 90 天内未再使用（无登录会话被使用）即删除——仍在使用的账户保留至末次使用后 90 天 | 删除 |
| 支付事件编号（webhook 去重） | 1 年 | 删除 |
| 登录会话 | 至收印或被踢除后 7 天；至多受印后 90 天 | 删除 |
| 受印码 | 10 分钟 | 删除 |
| 恢复码摘要 | 用掉、被新批取代、或签发满一年，孰先为准（未确认的候选批：1 小时） | 删除 |
| 服务器日志 | 30 天 | 删除 |
| 出生数据/叩问/解读 | 服务端不存储 | — |
匿名的每日事件计数（如当日 UTC 起盘次数）不含任何个人数据，满 400 天即删除。
八 · 你的权利
查阅、更正、删除、限制处理、可携、反对、撤回同意——致信 support@everamulate.com，30 个自然日内回复；亦可向你所在地数据保护机构投诉。
九 · 跨境传输
我方服务器位于欧盟（法兰克福）。Waffo Pancake 与模型服务方可能在其他法域处理数据，适用其各自的保障机制（如标准合同条款）。
十 · 未成年人
本服务面向 18 岁以上成年人。不明知收集未成年人数据；如有，请联系我们删除。
十一 · 政策变更
更新至少提前 15 天在本页公示。