DRAFT — placeholder text. Pending review by qualified counsel before launch.
Legal

Privacy Policy

Last updated: 2026-05-14

What we collect

To cast a chart, we need your birth date, birth time (if known), and birthplace. To deliver a reading, we need your email and (for postal Deep Charts) a shipping address. To process payment, Stripe collects your card details on our behalf — we never see or store them.

How we use it

Birth data is used solely to compute your BaZi chart and generate readings. Email is used for the readings you ordered, transactional notifications, and (if you opted in) our Daily Letter. We do not sell, rent, or trade your data to advertisers.

Who can see your chart

You. The Reader assigned to your Deep Chart or Counsel session. Our engineering and customer-care team, in narrow cases (debugging, refunds). No one else, ever.

Cookies & analytics

We use first-party cookies for sign-in and theme/language preference. We use PostHog (hosted in the EU) for product analytics, with IP anonymization and PII masking. We do not use ad-tracking cookies.

Your rights

You can export everything we hold on you, request a correction, or ask us to delete it. From your dashboard you can do all three in a single click. Where the GDPR applies, you can also lodge a complaint with your data protection authority.

Retention

Active accounts: data retained while the account exists. Deleted accounts: chart and reading data erased within 30 days; financial records retained for the minimum period required by tax law (typically 7 years), in anonymized form where possible.

Children

Mirror is intended for adults. We do not knowingly collect data from anyone under 18. Naming readings about a child are placed in the parent's account, not the child's.

Contact

For data questions or to exercise any right above, write to privacy@mirror.studio.