Type of Fate Privacy Policy
Version: 1.0
Effective date: [Effective date]
Orrery LLC (the "Company") is a limited liability company formed under the laws of the State of Wyoming, United States, and operates the website "活字命書" (Type of Fate) (the "Website"). In accordance with the Personal Data Protection Act of the Republic of China (Taiwan), the Company has established this Privacy Policy (this "Policy") to explain the purposes, categories, period, regions, recipients and methods of its collection, processing and use of the personal data of persons who use the Website ("Users"), and the rights Users may exercise.
Article 1 (Operator and Contact Information)
1. Operator: Orrery LLC.
2. Contact point for requests to access, correct or otherwise handle personal data: Personal Data Contact.
3. Email: service@typeofate.com.
4. Postal address (the address of the Company's registered agent; requests concerning personal data may be made by email or sent by post to this address):
Orrery LLC
30 N Gould St Ste N
Sheridan, WY 82801
USA
Article 2 (Categories of Personal Data Collected and Purposes)
The categories of personal data collected by the Company and the purposes of collection are as follows:
1. Free chart data
(1) The date of birth, time of birth, calendar type, gender and place of birth that a User enters when using the free chart service are sent over an encrypted connection to the Company's servers to calculate the chart. Once the calculation is complete, the servers discard this data. It is not written to any database, is not kept in server logs, and is not used for any purpose other than the chart calculation.
(2) The data described in the preceding item and the resulting chart are stored only in the browser on the User's device and are automatically deleted after 30 days, so that the User does not need to enter the data again on a later visit. A User may at any time select "Clear this chart" on the chart page, or clear the site data through the browser settings. The Company's servers do not keep a copy.
(3) Providing the data described in the preceding two items is voluntary. A User who does not provide it cannot use the free chart service, but may still browse the other content of the Website.
2. Browsing and device data
(1) When a User browses the Website, the Company and the analytics and advertising services it uses record the following: pages viewed, actions taken on pages, the referring URL or advertisement (including click identifiers of advertising platforms), device and browser type, and an approximate region at the city or country level estimated from the network address. This data is used to analyze how the Website is used, to improve the Website, and to measure advertising effectiveness.
(2) Browsing events recorded by the Company itself do not include the User's IP address, birth data or chart contents. Events sent by the Company to analytics and advertising services likewise do not include birth data or chart contents.
3. Security and abuse prevention
(1) To keep the Website secure and to prevent programmatic high-volume use of the chart service, the Company records the time of each connection, the URL, the IP address and whether the connection was blocked by a protection mechanism. It does not record what the User entered. These security records are deleted after 30 days, and deletion is normally completed within 1 day after that. Service providers that host the Website and provide security protection for the Company also process IP addresses in order to deliver web pages and block attacks, and retain them according to their service settings.
(2) The Company combines the IP address with a key that changes daily to compute a counter value, which is used only to count how many times the same source uses the service within one day. The key and the counter values for a given day are deleted promptly after the day ends. Once the key is deleted, the original IP address cannot be derived from the counter value. The point-in-time backup of the storage service holding the counter values is retained for up to 30 days, and the cloud service provider's disaster recovery backups are retained according to its policies.
4. Customer service messages
Messages that a User sends to the customer service mailbox, including the email address, message content and attachments, are used by the Company only to respond to the User's inquiry and are retained for [Customer service message retention period]. Users should not include their date of birth, time of birth or similar data in such messages.
The Company does not require Users to provide their names, and does not create member accounts at the dictionary and free chart stage.
Article 3 (Cookies and Similar Technologies)
The Website uses cookies and browser storage for the following purposes:
1. Necessary for the operation of the Website: remembering whether the User selected Traditional or Simplified Chinese, the chart the User calculated on their device, and verification to prevent abuse.
2. Analytics and advertising: cookies of Google Analytics and [Advertising platforms actually loaded, for example Google Ads, Meta], and cookies in which the Company stores advertising click identifiers and source parameters, used to measure how the Website is used and the effectiveness of advertising.
The Website uses Google Analytics. For how Google uses data obtained from partner websites, please see Google's page "How Google uses information from sites or apps that use our services" (https://policies.google.com/technologies/partner-sites ). Users may refuse or delete cookies through their browser settings, and may install the Google Analytics opt-out browser add-on provided by Google. Refusing analytics and advertising cookies does not affect browsing the Website or using the free chart service.
Users located in the European Union, the European Economic Area or the United Kingdom will see a consent window when visiting the Website. [How analytics and advertising tools operate before consent, to be set according to the consent mode adopted]. Users may change their choice at any time through "Cookie settings" in the footer.
Article 4 (Recipients of Personal Data)
The Company does not sell Users' personal data. The Company provides personal data only to the following parties that perform services for the Company, and only within the following scope:
1. Website hosting, content delivery and security service providers: running the Website and the chart service, blocking attacks and abuse, and forwarding messages sent to the customer service mailbox.
2. Email service providers: sending and receiving customer service messages.
3. Analytics and advertising services: Google (Google Analytics, Google Ads) and [Other advertising platforms actually loaded]. The data they obtain is the browsing and device data described in Article 2, Item 2.
4. Courts, prosecutors or competent authorities, when required by law.
The service providers described above process personal data in accordance with their terms of service and the Company's instructions.
Article 5 (Regions of Use and Retention Periods)
The Company uses cloud services operated by United States companies to process the Website's data. The physical location of the data depends on the service settings, and the storage region of the security records is [Storage region of security records]. The free chart calculation is performed in the data center nearest along the connection path. Users' personal data may be processed outside the region where they live. The retention periods for each category of data are as follows:
| Data | Retention period |
|---|---|
| Birth data entered for the free chart | Discarded by the server once the calculation is complete; not retained |
| Birth data entered by the User and the resulting chart | Stored only in the browser on the User's device; automatically deleted after 30 days; the User may clear it at any time |
| Browsing events recorded by the Company itself | [Retention period of first-party events] |
| Google Analytics user and event data | 14 months |
| Analytics data exported to the Company's data warehouse | [Retention period of analytics data warehouse] |
| Security records | 30 days; deletion is normally completed within 1 day after that |
| Counter values used to prevent abuse | Deleted promptly after the day ends; the point-in-time backup of the storage service is retained for up to 30 days, and the cloud service provider's disaster recovery backups are retained according to its policies |
| Connection and security event records of hosting and security service providers | According to the service provider's settings; security event records for 31 days |
| Customer service messages | [Customer service message retention period] |
Article 6 (Users' Rights)
In accordance with Article 3 of the Personal Data Protection Act, Users may exercise the following rights with respect to their personal data:
1. To inquire about or request to review the data.
2. To request a copy.
3. To request supplementation or correction.
4. To request that collection, processing or use be stopped.
5. To request deletion.
Users may exercise these rights through the email or postal address set out in Article 1, and the Company will act on the request after confirming the User's identity. In accordance with Article 13 of the Personal Data Protection Act, the Company will decide whether to grant a request to inquire, review or obtain a copy within 15 days; if necessary, this period may be extended by no more than 15 days, and the Company will give written notice of the reason for the extension. The Company will decide whether to grant a request for supplementation or correction, to stop collection, processing or use, or for deletion within 30 days; if necessary, this period may be extended by no more than 30 days, and the Company will give written notice of the reason for the extension. For Users in other regions, the Company will respond within the period required by the laws of their location.
Birth data entered by the User and the resulting chart are stored only in the browser on the User's device. The Company does not keep a copy, and Users may clear this data themselves on their device.
Article 7 (Users in the European Union, the European Economic Area and the United Kingdom)
For Users located in the European Union, the European Economic Area or the United Kingdom, the Company is the controller of their personal data, and the legal bases for processing are as follows:
1. Free chart service: necessary to provide the chart service requested by the User.
2. Analytics and advertising cookies: the User's consent. Users may withdraw consent at any time; withdrawal does not affect the lawfulness of processing before the withdrawal.
3. Security records and abuse prevention: the Company's legitimate interest in maintaining the security of the Website and its Users.
4. Responding to customer service messages: necessary to handle a request made by the User.
In addition to the rights set out in the preceding Article, these Users may request restriction of processing, object to processing, obtain a portable copy of their data, and lodge a complaint with the data protection authority of the place where they live or work.
Article 8 (Data Security)
The Company transmits data over encrypted connections, its servers do not retain birth data for the free chart service, and internal access is set according to the principle of least privilege with access records kept. If an incident occurs that may affect Users' personal data, the Company will notify Users and competent authorities as required by law.
Article 9 (Amendments to this Policy)
When the Company amends this Policy, it will publish the amended version and its effective date on this page. For a material change involving the purposes for which personal data is used, the Company will give advance notice in a prominent place on the Website.