PRIVACY POLICY

MingCharts

Last Updated: 2026-10-09

Jin Chen (金晨), an individual (natural person) operating under the laws of the People's Republic of China ("we", "us", or "our"), operates MingCharts and is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use MingCharts (the "Service"), and the rights available to you.

Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy periodically and will notify you of material changes by email or in-product notice.

1. Data Controller

The data controller for this Service is:

  • Name: Jin Chen (金晨), individual (natural person)
  • Country: People's Republic of China
  • Privacy Email: hello@mingcharts.com
  • Data Protection Officer (DPO): Not applicable
  • Mailing Address: Not applicable — the operator is a natural person and no business address applies

2. Personal Information We Collect

2.1 Information You Provide Directly

  • Account Information: email address, password (stored hashed), display name (optional).
  • ★ Birth Information: birth date, birth time, birth place (city and, optionally, longitude/time zone), and gender. We need this information to calculate your chart — the Service cannot function without it.
  • Chart & Reading Data: your calculated charts, generated reports, and daily readings. Reports and readings may include fortune-tier tendency labels (seven tiers, rendered in Chinese as 大吉 through 大凶); these are tendency descriptions derived from your chart data, not action recommendations, and they do not predict specific events.
  • Communications: emails, support requests, and feedback you send us.
  • Payment Information: transaction amount, order number, and payment status. Full card numbers are not stored by us — card data is processed by our Merchant of Record (see Section 5).

2.2 Information We Collect Automatically

  • Device & Network: IP address, device model, operating system, browser type, time zone, language.
  • Usage Data: pages visited, features used, activity logs, session duration.
  • Log Data: request timestamps, error logs, performance metrics.

2.3 What We Do NOT Collect

  • We do not collect precise geolocation from your device.
  • We do not collect special-category data (such as health, biometric, political, or religious data) as defined under GDPR Article 9.
  • We do not use advertising identifiers, advertising pixels, or cross-site tracking.
  • ★ We do not run any third-party analytics or tracking tools (see Section 4).

3. How We Use Your Information

PurposeLegal Basis
Chart calculation and report generationContract performance
Subscription delivery (daily readings, monthly updates)Contract performance
Billing and payment processingContract performance
Customer supportContract performance / Legitimate interests
Service notifications (billing, security, policy changes)Legitimate interests
Security and fraud preventionLegitimate interests
Product improvement (using aggregate, non-identifying figures only)Legitimate interests
Legal and tax complianceLegal obligation
Marketing emails (currently none — see Section 9)Your consent

We may aggregate or anonymize data for statistical purposes. Such data cannot be linked to any individual.

4. Cookies, Local Storage & Tracking Technologies

4.1 What We Actually Use

★ We use no analytics, advertising, or cross-site tracking tools. The only client-side storage we use is the following:

TypeWhat it isPurposeDisableable
Strictly necessary (cookie)Authentication session cookie set by our authentication provider (@supabase/ssr)Keeps you logged in; secures your sessionNo — the Service cannot work without it
Functional (local storage)localStorage['currentChart']Remembers the chart you last viewed, so you can return to itYes — clearing your browser storage removes it; the Service still works

There is no "Analytics" or "Marketing" row, because we do not use any such tools. If we ever add one, this table and Section 10 will be updated and you will be notified as described in Section 13.

4.2 Managing Storage

You can clear cookies and local storage at any time through your browser settings. Doing so will log you out and remove the remembered chart; nothing else is affected.

5. Sharing & Disclosure

We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:

  • Merchant of Record / Payment Processing: Payment card data is processed exclusively by our PCI-DSS certified payment processor, Waffo Pancake, acting as Merchant of Record. Waffo Pancake is the seller of record for your purchase and handles payment processing and applicable tax collection on the transaction. Card data is never stored on our servers.
  • AI Model Provider: To generate interpretive content, your input — which may include your birth information, your chart data, and any question you type — is transmitted to DeepSeek (model deepseek-chat) for processing. We do not transmit your name, email address, account password, or payment information to AI providers.
  • Infrastructure Providers: cloud hosting and database services — Supabase (database and authentication) and Vercel (website hosting) — bound by confidentiality obligations.
  • Legal Requirements: where required by law, court order, or a lawful regulatory request.
  • Business Transactions: in a merger, acquisition, or similar event, with advance notice and continued protections.
  • With Your Consent: for any other purpose, with your explicit prior consent.

6. Data Security

  • Encryption in transit: TLS / HTTPS.
  • Secure storage: passwords are hashed; database access is restricted.
  • Access controls: least-privilege principle; row-level security (RLS) is enabled on user data in our database.
  • No card data: payment card data never reaches our servers.

In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery, as required by applicable law. Please keep your credentials secure and do not share them.

7. Data Retention

Data TypeRetention PeriodUpon Expiry
Account informationWhile your account is active; 90 days after deletionDelete or anonymize
Birth information and chart dataWhile your account is active; 90 days after deletionDelete or anonymize
Transaction records10 years (Chinese accounting and tax requirements)Archive, then delete
Support records2 yearsSecure deletion
Security and access logs6 monthsSecure deletion

★ Why 10 years for transactions: Chinese accounting and tax rules require business records to be retained for this period. Because the operator is a natural person subject to those rules, we keep transaction records for that term and no longer.

8. Your Data Rights

To exercise any right below, contact us at hello@mingcharts.com. We respond within 30 calendar days.

RightDescription
Right to be informedKnow what data we collect and how we use it
Right of accessObtain a copy of your personal information
Right to rectificationCorrect inaccurate or incomplete data
Right to erasureRequest deletion under certain conditions
Right to restrict processingTemporarily suspend processing in certain cases
Right to data portabilityReceive your data in a machine-readable format
Right to objectObject to processing based on legitimate interests or marketing
Right to withdraw consentWithdraw consent for consent-based processing

You may also lodge a complaint with your local data protection authority.

Account deletion: you can delete your account directly via your account settings, or by contacting hello@mingcharts.com.

9. Marketing & Opt-Out

★ We currently do not send marketing or promotional emails at all. The emails we send are limited to essential service messages: account verification, receipts and billing notices, security alerts, and notices about changes to our terms or this Policy.

If we introduce marketing communications in the future, we will do so only with your consent, and you will be able to opt out at any time — by clicking "Unsubscribe" in any such email, or by disabling marketing in your account settings, or by contacting us. Opting out will never affect essential service notifications.

10. International Data Transfers

★ Where your data is stored and processed:

ProviderRoleLocation
SupabaseDatabase and authenticationUnited States (AWS us-east-1)
VercelWebsite hosting and server functionsUnited States (iad1)
DeepSeekAI text generationChina
Waffo PancakePayment processing / Merchant of Recordas required to process payments

Our service providers may be located outside your country of residence, so your personal data may be transferred internationally. Where personal data is transferred internationally, we safeguard it through:

  • Data processing agreements incorporating EU Standard Contractual Clauses (SCCs) where applicable;
  • Transfers only to recipients providing an equivalent level of protection.

If you are located in the EEA or the UK, your data may be transferred to a third country that has not been deemed by the European Commission to provide an adequate level of data protection. We rely on the safeguards described above.

★ If we change where data is stored, this section is updated and you are notified as described in Section 13.

11. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from anyone under 18. If you believe a minor has provided information to us, contact us immediately and we will promptly delete it.

12. Third-Party Links & Services

The Service may include links to third-party services (for example, our payment processor's customer portal). This Policy applies only to data we directly collect. We are not responsible for third-party privacy practices and encourage you to review their policies before use.

13. Policy Changes

For material changes, we will provide at least 30 days' advance notice via in-product notice or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

(30 days matches the notice period in our Terms of Service, so the two documents stay consistent.)

14. Contact Us

All privacy, support, and billing enquiries go to one monitored address:

  • Privacy & Support Email: hello@mingcharts.com
  • Operator: Jin Chen (金晨), individual (natural person), People's Republic of China
  • Mailing Address: Not applicable (the operator is a natural person)
  • Website: https://mingcharts.com
  • Response time: within 30 calendar days for privacy requests

(We deliberately list one real, monitored channel rather than several unmonitored ones.)

MingCharts · https://mingcharts.com


15. ★ Version Record

We keep a version log so that it is possible to establish which version of this Policy was in effect at any past point in time.

VersionEffective dateSummary of changes
v0.22026-10-09First published version. Aligned to Waffo Pancake merchant requirements: named the Merchant of Record; specific AI model disclosure (deepseek-chat); storage locations stated (US us-east-1 / US iad1 / China); client-side storage documented accurately including localStorage; explicit statement that no analytics or advertising trackers are used; retention periods set to real terms; single monitored contact address.
v0.1— (unpublished draft)Initial draft based on the Waffo Pancake privacy policy template.

Terms of Service·Privacy Policy·hello@mingcharts.com·城市数据 © GeoNames (CC BY 4.0)