Privacy Policy

This policy explains what information I Ching Oracle collects, why we collect it, how long we keep it, who we share it with, and the rights you hold over it.

Effective

2 October 2026

Last updated

2 October 2026

Data controller

Haojie Wu, individual operator, Mainland China

Product

I Ching Oracle — a browser-based I Ching card deck and reading tool

Hosting

Cloudflare (Pages / Workers)

Payment processor

Waffo Pancake

The short version. You can use the whole deck without an account. Drawing a card happens entirely in your browser — nothing is sent anywhere. We only hold personal information when you choose to create an account, post in the forum, or buy something; and when you buy something, your card details go straight to our payment processor and never touch our servers.

1 · Who we are

I Ching Oracle (the “Site”) is operated by Haojie Wu, an individual operator established in Mainland China. For the purposes of the EU/UK General Data Protection Regulation and comparable laws, we are the data controller for the personal information described in this policy.

We are a small, single-operator service. There is no separate data protection officer; privacy enquiries go directly to the address in Section 15 and are answered by the operator.

2 · What we collect

We designed the Site so that the default experience collects nothing. The categories below apply only when you use the corresponding feature.

2.1 · Using the deck without an account

Nothing. Drawing a card, reading its interpretation, and exporting a card image all happen locally in your browser. No request containing your draw is sent to us.

2.2 · Creating an account (optional)

If you sign in with Google or register with an email address, we store:

your email address;
your display name (the username you choose, or the name Google returns);
if you register with a password, a one-way password hash (PBKDF2-SHA-256, 210,000 iterations). We never store your password itself and we cannot recover it;
if you sign in with Google, the Google account identifier Google issues for you. We do not receive your Google password;
the dates your account was created and last signed in.

A session cookie keeps you signed in (see Section 5).

2.3 · Posting in the community forum

If you post a message, we store the text of the message, the account it was posted from, and the time it was posted. Forum posts are public and are visible to anyone, including people who are not signed in. Do not post anything you would not want to be public and permanent.

2.4 · Buying an extra draw or another paid item

When you buy something, we create an order record containing:

our own order reference and the payment processor’s session and order identifiers;
the email address you give at checkout;
the product, amount, currency and payment status;
the timestamps of the order, payment and delivery of the item.

Your card details never reach us. Card payments on this Site are processed by Waffo Pancake, which acts as our payment processor and as merchant of record for the transaction. Your card number, expiry date and security code are entered on Waffo Pancake’s infrastructure and are never transmitted to or stored on our servers. We receive only the order confirmation described above. Waffo Pancake’s handling of your data is governed by its own privacy policy.

2.5 · Technical data recorded automatically

Our hosting provider records standard server logs for every request: IP address, user agent, requested URL and timestamp. These are used for security, abuse prevention and availability, not for profiling or advertising.

2.6 · What we do not collect

We do not collect your name, postal address or phone number, except where you voluntarily include them in a forum post or an email to us.
We do not collect precise location, contacts, photos, microphone or camera data.
We do not use your data for advertising, and we do not build advertising profiles of you.
We do not collect biometric data or any other special-category personal information.

3 · Why we use your information

To provide the service — signing you in, remembering your collection, letting you post, and delivering the item you bought.
To take payment — creating the order, confirming it with the processor, and issuing a receipt.
To keep the service working and safe — detecting abuse, preventing fraud, rate-limiting automated traffic, and diagnosing faults.
To meet our legal obligations — keeping accounting and tax records, and responding to lawful requests.
To answer you — replying to support, refund and privacy enquiries.

We do not sell, rent or trade your personal information. We do not use it to train machine-learning models.

4 · Legal basis for processing (GDPR)

Where the GDPR or UK GDPR applies, we rely on the following bases:

Performance of a contract (Art. 6(1)(b)) — creating and maintaining your account, delivering a purchase, and processing payment.
Legitimate interests (Art. 6(1)(f)) — securing the Site, preventing abuse and fraud, and keeping basic technical logs. We have balanced these interests against your rights and consider the impact minimal, because the data involved is limited and short-lived.
Legal obligation (Art. 6(1)(c)) — retaining transaction records where tax or accounting law requires it.
Consent (Art. 6(1)(a)) — where we ask for it explicitly, for example before sending you any marketing email. You may withdraw consent at any time.

5 · Cookies and local storage

5.1 · Cookies we set

Session cookie (strictly necessary) — an HttpOnly cookie that keeps you signed in. It contains a random session identifier and expires when you sign out or after a period of inactivity.
Security cookies (strictly necessary) — set by our hosting provider to distinguish human visitors from automated traffic.

We do not set advertising or cross-site tracking cookies.

5.2 · Browser local storage

Your card collection, draw history, language preference and any pending order references are kept in your browser’s localStorage on your own device. This data is never synchronised to our servers. Clearing your browser’s site data deletes it immediately and permanently.

5.3 · Third-party services

We keep third parties to the minimum the Site needs to function:

Cloudflare — hosting, content delivery, DNS and security. Privacy policy.
Waffo Pancake — payment processing and merchant of record. Card data is handled entirely on their infrastructure. Privacy policy.
Google Fonts — typeface delivery. Loading a font sends your IP address and user agent to Google. Privacy policy.
Google Sign-In — only if you choose to sign in with Google. Privacy policy.

We share personal information only in these situations:

With our payment processor, Waffo Pancake, to process the transaction and issue your receipt. Waffo Pancake acts as merchant of record for purchases made on this Site.
With our hosting provider, Cloudflare, which processes requests on our behalf and keeps the technical logs described in Section 2.5.
With service providers who help us run the Site (for example email delivery), strictly to the extent needed and under obligations of confidentiality.
Where the law requires it — in response to a valid legal request, or where necessary to establish, exercise or defend legal claims.
In a business transfer — if the Site or its assets were transferred to another operator, your information would transfer with it. We would tell you before that happened.

We do not sell your personal information, and we do not share it with advertisers or data brokers.

7 · How we protect your information

All traffic to and from the Site is encrypted with TLS.
Passwords are stored only as salted PBKDF2-SHA-256 hashes with 210,000 iterations, never in a recoverable form.
Session cookies are HttpOnly, so client-side scripts cannot read them.
Payment card data never enters our systems — it goes directly to Waffo Pancake.
Access to production data is limited to the operator.

No online service can be guaranteed to be perfectly secure. If we become aware of a personal data breach that is likely to result in a risk to your rights, we will notify the relevant supervisory authority without undue delay and, where the law requires it, within 72 hours of becoming aware of it, and we will inform affected users promptly.

8 · How long we keep your information

Account

Until you delete your account. On deletion, account records are removed within 30 days, and copies in encrypted backups are purged within 90 days.

Forum posts

Until you or we delete them. Deleting your account also removes your posts.

Order & payment records

7 years from the transaction date, because tax and accounting rules require us to keep them. These records are kept even if you delete your account.

Support & privacy correspondence

3 years from the last message, so we can follow up on the same matter.

Server logs

30 days at our hosting provider, after which they are deleted automatically.

Browser local storage

On your device until you clear it. We hold no copy.

9 · Your rights

Depending on where you live, you may hold some or all of the following rights. To exercise any of them, email us at the address in Section 15. We answer privacy requests within 30 days, and we do not charge a fee for a reasonable request.

Access — a copy of the personal information we hold about you.
Rectification — correction of information that is inaccurate or incomplete.
Erasure — deletion of your information, subject to the retention obligations in Section 8.
Restriction — a limit on how we use your information while a dispute is resolved.
Portability — a machine-readable copy of the information you gave us, where processing is based on consent or contract.
Objection — the right to object to processing based on our legitimate interests.
Withdraw consent — at any time, where processing rests on consent, without affecting processing already carried out.
Complain — lodge a complaint with your local supervisory authority. If you are in the EEA or UK, you may complain to the authority in your country of residence.

Because the deck itself stores your collection only in your browser, clearing your browser’s site data completes deletion of that part of your data immediately.

10 · Marketing and opt-out

We do not send marketing email unless you explicitly ask to receive it. Every marketing message we send contains a one-click unsubscribe link, and unsubscribing takes effect immediately. Transactional messages — receipts, payment confirmations and replies to your own enquiries — are not marketing and are sent regardless, because they are part of the service you asked for.

11 · International data transfers

We are based in Mainland China, and our hosting and payment providers operate globally. Your information may therefore be processed in countries other than your own, including the United States, the European Union and Singapore.

Where personal data protected by the GDPR is transferred outside the EEA or UK, we rely on appropriate safeguards — in particular the European Commission’s Standard Contractual Clauses, or an adequacy decision covering the destination. You can ask us for more detail about the safeguards that apply to your information.

12 · Children’s privacy

The Site is not directed at children. We do not knowingly collect personal information from children under 13. If you are in the EEA or the UK, the minimum age for using the account, forum and purchase features is 16.

If you are a parent or guardian and believe a child has provided us with personal information, email us at the address in Section 15 and we will delete it promptly. If we learn that we have collected personal information from a child below the applicable age, we will delete it without undue delay.

13 · Third-party links

The Site may link to other websites that we do not operate. We are not responsible for their content or their privacy practices. When you follow such a link, the destination site’s own privacy policy applies, and we encourage you to read it.

14 · Changes to this policy

We may update this policy from time to time. When we do, we revise the “Last updated” date at the top of this page. For material changes — for example, a new category of information or a new purpose — we will give at least 15 days’ notice before the change takes effect, by posting a prominent notice on the Site and, where we hold an email address for you, by email.

Continuing to use the Site after a change takes effect means you accept the updated policy. If you do not accept it, you may stop using the Site and delete your account.

15 · Contact us

Privacy questions, data requests and complaints all go to the same place. Please write in English or Chinese — we reply in the language you use.

Privacy email[email protected]

Support email[email protected]

CompanyHaojie Wu — individual operator

LocationMainland China

Business hoursMonday–Friday, 09:00–18:00 (UTC+8). We aim to reply within 48 hours.

This policy is written to be read by people, not lawyers. It is not legal advice to anyone else, and it does not create rights beyond those the applicable law already gives you.