Privacy Policy

Who we are

Yinthread is a web service that reads Chinese BaZi (“eight characters”) compatibility from two people’s birth details. The service is operated by Tang Shao Ming, a sole trader, of 16 Raydon Street, London N19 5BU, United Kingdom. For any privacy request, contact [email protected].

What we collect

• Birth details — the date of birth, birth hour (if you provide one) and sex for each of the two people in a reading. These are the inputs the chart is built from. Under the GDPR a date of birth is personal data.
• An optional name or nickname for each person, used only to label the reading on screen. You can leave it blank.
• An optional email address, only if you enter one at checkout for the paid report, so the payment processor can send your receipt and report link.
• A first-party session identifier to keep your reading working as you move between pages. It is not used for advertising or cross-site tracking.

We do not run third-party analytics or advertising cookies, and we do not sell your data.

Why we use it, and the legal basis

• To calculate your free compatibility score and, if you buy one, your written report — this is performance of the service you asked for (GDPR Art. 6(1)(b)).
• To send a receipt and report link to an email you optionally provide — the same basis, and only when you enter an email.

The AI provider, and transfer to the United States

The paid written report is generated by a third-party AI provider on an OpenAI-compatible service hosted in the United States. When you purchase a report, the two charts’ birth details (date, hour and sex) are sent to that provider so it can write the reading. Your name and email are never sent to the AI provider — only the birth data the chart needs. This transfer happens only at the moment of purchase, and only for the pair you are buying a report for. The free score is calculated on our own servers and is not sent to the AI provider.

Because this provider is in the United States, your birth data is transferred outside the UK/EEA for that step. That transfer is protected by the Standard Contractual Clauses (EU Controller-to-Processor, Module 2) and the UK International Data Transfer Addendum, which are incorporated into the AI provider’s data processing terms and apply to our use of its API.

Cookies

We set a single first-party cookie: an anonymous session identifier that keeps your reading working as you move between pages. It is strictly necessary for the service to function and is not used for advertising, profiling or cross-site tracking. We do not set any third-party, analytics or advertising cookies, and we do not load third-party trackers such as Google Analytics or advertising pixels.

Payments

Payments are handled by our third-party payment processor. Your card details go to the processor, not to us. If you enter an email at checkout it is passed to the processor to send your receipt.

How long we keep it

A report you buy is stored so its link keeps working and so a report you already paid for is served again without regenerating it. We keep a paid report for 12 months from purchase, after which it is automatically deleted and its link stops working. A free score is not stored on our servers at all — it is carried in the link you are viewing, so there is nothing on our side to keep or purge for an unpurchased reading.

You do not have to wait for the 12 months to pass: to have a report and the data associated with it deleted sooner, email [email protected], which reaches a monitored inbox.

Your rights

Under the GDPR and UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct it if it is wrong;
• ask us to delete it (erasure);
• ask for a copy in a portable form;
• object to, or ask us to restrict, our use of it.

To exercise any of these, email [email protected]. You also have the right to complain to your data protection authority.

Changes to this policy

If we change how we handle your data, we will update this page and its “last updated” date.