BaziSphere
Privacy Policy
This policy explains the information used by BaziSphere's chart calculator, account features, case library and optional AI interpretation services.
Birth inputs and account information
The calculator processes the birth date, time and sex you enter, together with the supplied time zone and any longitude adjustment. Saved records contain the calculation date and time, sex, creation time, request IP address and, when supplied, the original input description.
Account data includes a username, membership permissions and usage counters. Where Google sign-in is enabled, the account stores the verified email address, display name and Google account identifier returned during sign-in. Saved AI reports and fortune analyses may be associated with the chart record.
Temporary report links and public cases
A temporary report link contains a signed token with birth date, time, sex and, if supplied, the original input description. Signing prevents undetected changes; it does not encrypt these details. The link expires after approximately 24 hours. Anyone who has a working link may be able to view its report, so avoid sharing it unnecessarily.
Records marked as AI-analyzed can appear in the public case library. Public views can show chart details, sex, a birth time range and available analysis excerpts or fuller analyses depending on the visitor's access. A saved or AI-analyzed chart should not be assumed to remain private. Contact us with questions about a particular public record.
Why information is processed and external services
Information supports calendar calculations, saved charts, account access, quota checks and service troubleshooting. The service can process request information and record an IP address; errors may be logged for diagnosis.
When enabled, Google sign-in redirects you to Google and exchanges authentication information with Google's services. When you request an enabled AI feature, the chart context and prompt needed for that feature are sent to the configured model provider. AI follow-up questions are also sent for processing. The application supports a configured DeepSeek API service; availability depends on the operator's settings.
Cookies and browser storage
The access_token cookie maintains sign-in for up to seven days. Google sign-in uses google_oauth_state and google_oauth_return cookies for approximately ten minutes. Administrative access uses admin_token and admin_csrf_token for approximately eight hours on the administrative path. These cookies use HttpOnly and SameSite=Lax; Secure is controlled by deployment configuration.
Browser local storage remembers display preferences, including site_theme and site_lang. Clearing the sign-in cookie ends the browser session; clearing stored preferences resets them. The current site does not include Google Analytics or Microsoft Clarity scripts or advertising tracking cookies.
Record retention and requests
Under the current plan rules, free accounts retain up to three chart records; creating another distinct record removes older records beyond this limit. Monthly membership records older than 365 days are removed when the applicable account entitlement check runs. This is not a promise that deletion occurs at an exact time each day.
The annual plan has no fixed chart retention period in the current policy. Account information and other operational data do not have a single automatic deletion period defined here. To ask about correction or deletion of information, use the contact page. Requests need to be checked; there is currently no self-service account deletion function.
Removing cookies or browser storage does not delete records held by the server. We will update this page when features or data handling change.