Last updated: 2026-10-02
Life is operated by zhenhe AI LLC, a United States company. This policy explains what data the Life website collects, why we use it, which services process it, and how you can manage it. For privacy questions, email [email protected].
Data flow summary
| Service | Data received | Purpose | Location |
|---|---|---|---|
| Life website (WordPress / WooCommerce) | Account, billing details, orders, people’s birth data (stored encrypted), questions and reports, credit history, newsletter subscription | Accounts, purchases, reports and questions | Germany (Hetzner data center, Nuremberg) |
| Life chart engine | Birth date, birth time, gender, birthplace coordinates, timezone (no names) | Calculate charts | Operated by us, reached over the Cloudflare network |
| Cloudflare AI Gateway | The content sent to DeepSeek (next row) | Relay AI requests | Cloudflare global network (US company) |
| DeepSeek | Reports: the calculated chart (including birth date, time, gender and coordinates). Questions: your question text and chart-derived evidence (no names) | Write readings and answers | China (cross-border transfer) |
| Stripe | Payment details (card numbers are handled directly by Stripe), amount, currency, order number | Payments, refunds, receipts | United States |
| PAYUNi | Payment details (card numbers are handled directly by PAYUNi), amount, order number, name, email | Payments and refunds for Taiwan orders | Taiwan |
| Amego e-invoice (through PAYUNi) | Name, email, invoice carrier or tax ID, order items and amounts | Issuing and voiding Taiwan e-invoices | Taiwan |
| cf-email (Cloudflare Email) | Recipient email, message content and delivery records | Send newsletter confirmation and unsubscribe emails | Cloudflare global network (US company) |
| Google Analytics (only after you choose “Allow”) | Page URLs you visit, referring site, device and browser details, approximate location (derived from IP), the browser cookie identifier, and events such as add to cart, checkout and order value. No name, email, birth details or question text | Understand site usage, improve the site and measure marketing | United States (Google LLC) |
| Meta (Meta Pixel and Conversions API, only after you choose “Allow”) | Page URLs you visit, products you view or add to the cart, checkout and order value; when you order, also hashed email, phone, name and billing address, plus the browser cookie identifier, IP address and browser details. No birth details, petition content or question text | Measure ad results and show Facebook/Instagram ads to people likely to be interested | United States (Meta Platforms, Inc.) |
| Teacher Zhang of Cisheng Temple, Banling, Ruifang (New Taipei) (瑞芳半嶺慈聖宮, No. 16, Banling Road, Ruifang District, New Taipei City), who performs the Nine Emperor Gods lamp blessing | Only for people who register for the lamp blessing: participant names, gender, Gregorian birth dates, birth times and wishes, the address for the petition, and, if you ask for the gift to be shipped, the recipient name, phone and Taiwan address | Write and read the petitions; ship the blessed rice and talisman (this data is never sent to DeepSeek or any AI service) | Taiwan |
What we collect
Account and orders
- Your email, a generated username and the password you set (we store only a hash and never see your password).
- Billing details at checkout: name, country and email. We do not ask for a postal address, company name or phone number.
- You must be logged in to buy; guest checkout is not available.
- Order contents, payment status, Stripe payment ID and credit history.
People you save
- Name, gender, birth date, birth time (or “unknown”) and birthplace. You choose the birthplace from a built-in city list, and we save its timezone and coordinates.
- Whose data it is: you, an adult who gave you permission, or a person under your legal guardianship.
- The disclosure version you accepted and when.
- People records are stored encrypted (XChaCha20-Poly1305) and only the account owner can access them.
Questions and reports
Your question text, the methods and people you chose, and the answers, evidence and reports we generate.
Newsletter
Email, subscription status, signup source, language, and the times you subscribed, confirmed or unsubscribed. To prevent abuse we rate-limit by a hashed IP address per hour; this is short-lived and the raw IP is not stored.
Analytics and ad tracking
With your consent, this website uses Google Analytics to understand how the site is used, and Meta Pixel and the Meta Conversions API to measure ad results (see the data flow summary). With your consent we also note which website or ad link brought you here (WooCommerce order attribution) and save it with your order to see which ads lead to purchases; it is never sent to third parties. Until you choose “Allow”, the site does not load any Google or Meta tracking code, sets no order attribution cookies, and the server sends no events; back-office and scheduled tasks never send any. You can change your analytics and ad cookie choice at any time; after you decline, we delete these cookies and stop sending. We use Google Search Console to see how the site performs in Google Search; it runs no code in your browser.
Why we use it
- To create and manage your account and process orders, payments and refunds.
- To calculate charts from birth data and generate reports and answers.
- To track, reserve, return and expire question credits.
- To send the newsletter after you confirm by email, and to honor unsubscribes.
- To keep the service secure, prevent abuse, and meet accounting and tax obligations.
Birth data and consent
- Before a person is saved, you must tick the consent box and choose whose data it is.
- Only people with active consent can be used for reports or questions.
- People moved over from the old site show “Needs review” and are not used until you confirm them again.
- Only enter data for yourself, an adult who agreed, or a person under your legal guardianship.
Third parties and cross-border transfer
- Chart engine: receives only the birth data needed for the chart, never names.
- DeepSeek: for reports, we send the calculated chart (which includes birth date, time, gender and coordinates) to DeepSeek through Cloudflare AI Gateway; for questions we send your question text and chart-derived evidence. DeepSeek is a China-based provider, so this is a cross-border transfer. If you do not agree, do not request a report or ask a question.
- OpenAI: the report service can technically use OpenAI as a backup, but it is not enabled. We will update this policy before enabling it.
- Stripe: handles payments, refunds and receipts. Card details go directly to Stripe; this website does not store card numbers.
- PAYUNi: handles payments and refunds for Taiwan orders. Card details go directly to PAYUNi; this website does not store card numbers.
- Amego e-invoice: issues Taiwan e-invoices for Taiwan orders through PAYUNi.
- cf-email: our email relay, which sends newsletter confirmations through Cloudflare and keeps delivery status and bounce records.
- Google Analytics: only with your consent, receives the browsing and shopping events listed in the data flow summary to produce site usage statistics. Google processes them under its privacy policy; event-level data that can be linked to a browser is deleted after 14 months, while aggregated statistics with no personal identifiers are kept.
- Meta: only with your consent, receives the browsing and purchase events listed in the data flow summary to measure and optimize Facebook/Instagram ads. Meta stores and processes them under its own data policy; you can ask Meta to delete data already sent under that policy.
Cookies and browser storage
| Name | Type | Purpose | Duration |
|---|---|---|---|
| WordPress login cookies (wordpress_logged_in_* etc.) | Essential | Keep you signed in | Up to 14 days (with “Remember me”) |
| WooCommerce session and cart cookies | Essential | Cart and checkout | Up to 2 days |
| life_ui_locale | Essential (preference) | Remember your language | 1 year |
| life_ad_consent | Essential | Remembers your analytics and ad cookie choice | 180 days |
| WooCommerce order attribution cookies (sbjs_*) | Analytics (only with your consent) | Note which website or ad link brought you here; saved with your order and kept on this site only | Deleted when you close the browser (session cookies; sbjs_session lasts 30 minutes) |
| Google Analytics cookies (_ga, _ga_*) | Analytics (only with your consent) | Recognize the same browser to measure site usage | Up to 2 years |
| Meta cookies (_fbp, _fbc) | Advertising (only with your consent) | Recognize the same browser to measure ad results | Up to 90 days |
| Stripe cookies (such as __stripe_mid, __stripe_sid) | Essential (fraud prevention) | Payment security on the checkout page | Set by Stripe |
| life_newsletter_popup (browser localStorage) | Preference | Hide the newsletter popup for 30 days after you close it | Stays in your browser until you clear it |
| Question draft and credit reservation state (browser sessionStorage / localStorage) | Essential | Restore an unsent question after login; recover a credit reservation | Stays in your browser until completed or cleared |
Apart from the order attribution, Google Analytics and Meta cookies, which run only with your consent, all of these are essential or preference storage.
How long we keep data
- People: until you delete them.
- Questions, reports and credit history: until you delete your account.
- Orders and payment records: 7 years, for accounting, tax and dispute handling.
- Newsletter: after you unsubscribe we keep the “unsubscribed” status so we never email you again; you can ask us to delete it.
- Lamp blessing participant data (names, birth details, addresses, wishes and shipping details): deleted within 90 days after the ceremony; the order amount and other transaction records are kept as described above.
- Backups: kept for up to 30 days, then overwritten.
- Newsletter confirmation links work for 48 hours; unsubscribe links for 30 days (you can request a new one).
Your rights
- Withdraw consent: on the “My chart & questions” page, choose “Withdraw consent” for that person. The person can no longer be used for new reports or questions.
- Delete a person: “Delete” erases the person’s name, birth data and consent record. Reports and answers already generated are not deleted automatically; email us to remove them.
- Delete your account: accounts with credits or people cannot be deleted by yourself. Email [email protected] and we will complete it within 30 days, except for transaction records we must keep by law.
- Unsubscribe: use the link in any newsletter email.
- Access, correct, export or stop use: email [email protected] from your account email; we reply within 30 days.
Minors
You must be at least 18 to create an account. A person under 18 can have their data saved by their legal guardian, in the guardian’s own account, under “Legal guardianship”.
Security
The site uses HTTPS throughout, people’s birth data is stored encrypted, and connections to our internal computation services require authentication. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.
Changes
We update the date above when this policy changes. If a change affects how birth data is used, we will ask you to confirm your consent again.