Privacy Policy

Who we are

Yinthread is a web service that reads Chinese BaZi (“eight characters”) compatibility from two people’s birth details. The service is operated by Tang Shao Ming, a sole trader, of 16 Raydon Street, London N19 5BU, United Kingdom. For any privacy request, contact [email protected].

What we collect

• Birth details — the date of birth, birth hour (if you provide one) and sex for each of the two people in a reading. These are the inputs the chart is built from. Under the GDPR a date of birth is personal data.
• An optional email address, only if you enter one at checkout for the paid report, so the payment processor can send your payment receipt.
• An anonymous browser identifier and first-touch attribution — such as a referral or campaign source. They are stored in first-party localStorage until you clear your browser data. We use them to measure the steps in our reading and purchase funnel. The event payloads do not contain birth details, names or email addresses, and these values are not used for advertising or cross-site tracking.

We do not run third-party analytics or advertising cookies, and we do not sell your data.

Why we use it, and the legal basis

• To calculate your free compatibility score and, if you buy one, your written report — this is performance of the service you asked for (GDPR Art. 6(1)(b)).
• To let the payment processor send a payment receipt to an email you optionally provide — the same basis, and only when you enter an email.

The AI provider, and transfer to the United States

The paid written report is generated by a third-party AI provider on an OpenAI-compatible service hosted in the United States. When you purchase a report, the two charts’ birth details (date, hour and sex) are sent to that provider so it can write the reading. Your name and email are never sent to the AI provider — only the birth data the chart needs. This transfer happens only at the moment of purchase, and only for the pair you are buying a report for. The free score is calculated on our own servers and is not sent to the AI provider.

Because this provider is in the United States, your birth data is transferred outside the UK/EEA for that step. That transfer is protected by the Standard Contractual Clauses (EU Controller-to-Processor, Module 2) and the UK International Data Transfer Addendum, which are incorporated into the AI provider’s data processing terms and apply to our use of its API.

Cookies

We set a first-party cookie for the headline experiment on our /t landing page. It keeps the same headline assignment for 180 days and is not used for advertising, profiling or cross-site tracking. We do not set any third-party, analytics or advertising cookies, and we do not load third-party trackers such as Google Analytics or advertising pixels.

Payments

Payments are handled by our third-party payment processor. Your card details go to the processor, not to us. If you enter an email at checkout it is passed to the processor to send your receipt.

How long we keep it

Free result and invite tokens store the canonical birth profiles on our servers. The links contain an unguessable token, not the birth profiles themselves. These records are kept for up to 90 days; after that they are expired when accessed and scheduled for automatic deletion.

A report you buy is stored so its link keeps working and so a report you already paid for is served again without regenerating it. We keep a paid report for 12 months from purchase, after which it is automatically deleted and its link stops working.

You do not have to wait for the 12 months to pass: to have a report and the data associated with it deleted sooner, email [email protected], which reaches a monitored inbox.

Your rights

Under the GDPR and UK GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct it if it is wrong;
• ask us to delete it (erasure);
• ask for a copy in a portable form;
• object to, or ask us to restrict, our use of it.

To exercise any of these, email [email protected]. You also have the right to complain to your data protection authority.

Changes to this policy

If we change how we handle your data, we will update this page and its “last updated” date.