Privacy Policy

Scope

This Privacy Policy explains how EightFates handles information when you visit the website, create an account, join early access, or use the BaZi calculator when it is available. EightFates is a cultural and entertainment service. It does not provide medical, legal, financial, psychological, or relationship-safety advice.

Information you provide

Account information. If you register with email, we process your name, email address, password credential, verification state, and account identifiers. Passwords are handled through our authentication system and stored only as one-way password hashes; we do not store a readable password. If you use Google sign-in, we receive the basic account information that Google shares after you authorize the sign-in, such as your name, email address, profile image, and provider account identifier.

Birth details for chart calculation. The calculator may process a birth date, birth time or an “unknown time” choice, birth city, IANA time zone, longitude, gender used by the traditional luck-pillar rule, and a time-accuracy choice. These details are sent to the EightFates chart service only to calculate the response. The calculator does not intentionally save the request or chart in the application database, browser storage, or analytics. A chart key returned by the engine is not sent to analytics or another third party and is not retained beyond the current page session.

Messages. If you contact us, we process the information you include so we can respond and keep an appropriate support record.

Information collected automatically

Our hosting, security, and authentication providers may process basic request metadata such as IP address, date and time, requested path, response status, browser or device information, and security signals. The chart proxy uses an IP-derived in-memory counter to enforce a limit of 20 requests per minute. That counter expires with the short rate-limit window and is not used as a profile.

We use Vercel Analytics for privacy-limited product events. The application is restricted to these event names and properties:

• calculator_view: source page only.
• chart_submitted: result status, whether the time was known, and whether true solar time was enabled.
• chart_result_view: result status only.
• email_signup: source module only.
• zodiac_page_view: animal and page type only.
• hook_click: animal only.

We do not include birth date, birth time, city, time zone, longitude, gender, chart content, chart key, or any derivative of those values in analytics events. Vercel may process anonymous or pseudonymous technical information under its own service terms.

Cookies and local preferences

Necessary cookies are used for authentication and security. The website may also store a theme or locale preference on your device. OAuth providers may set their own cookies when you choose their sign-in flow. We do not use chart inputs for advertising profiles.

Why we process information

We use information to provide authentication and chart calculations you request, secure and rate-limit the service, remember interface preferences, understand aggregate feature use, respond to support and deletion requests, comply with applicable law, and investigate abuse. We do not sell personal information.

Service providers and disclosure

We use infrastructure providers for hosting, database, authentication-related operations, email delivery when configured, and aggregate analytics. They process information only as needed to provide those services under their own contractual and security terms. Information may also be disclosed when required by law, to respond to a valid legal process, or to protect users and the service from fraud, abuse, or security threats.

The public city search uses a browser-local derivative of GeoNames cities15000. It includes city name, country code, longitude, IANA time zone, and population ranking data. The index is served as a static file, so your search text is filtered in your browser rather than sent to a city-search API. GeoNames data is licensed under CC BY 4.0 and attributed to GeoNames.

Retention

Chart inputs and results are not intentionally persisted by the EightFates application in this release. They remain in page memory only for the current interaction. Hosting and security systems may retain limited request metadata according to their configured operational periods; application code is designed not to log the chart request body.

Account and authentication data is kept while the account remains active and for a limited period when needed for security, legal, or dispute purposes. Support messages are retained only as long as reasonably necessary to answer the request and maintain an appropriate record.

Security

We use transport encryption, access controls, server-side secret handling, request validation, and rate limiting. The browser never receives the private chart-engine API key. No internet service can promise absolute security, so please avoid entering information you do not want processed for the stated purpose.

Your choices and deletion

You may update available account details through account settings. To request access, correction, deletion, or another privacy action, email privacy@eightfates.com from the address associated with the account. We may need to verify the request before acting. We will respond according to applicable law and may retain limited records where a legal or security obligation requires it.

You can avoid chart processing by not submitting the calculator. You can change browser cookie and storage settings, although blocking necessary authentication cookies may prevent sign-in.

Children

EightFates is not directed to children under 13, and we do not knowingly collect personal information from a child under 13. If you believe a child has provided information, contact privacy@eightfates.com so we can investigate and delete it where appropriate. Users who are minors in their jurisdiction should use the service only with the involvement of a parent or legal guardian.

International processing

Our providers may process information in countries other than the one where you live. Where applicable, we rely on provider safeguards and other lawful transfer mechanisms. Local privacy rights differ by jurisdiction.

Changes and contact

We may update this policy when the product, providers, or legal requirements change. The updated date above identifies the current version. Material changes will be communicated through the service where appropriate.

Questions and privacy requests: privacy@eightfates.com.