Privacy Policy

Last updated: October 1, 2026

This policy explains how DouShu.App (the “Site”, at doushu.app) handles your data. We collect only what is needed to provide the service. We do not sell or rent your data, and we do not use advertising or tracking analytics.

1. Visitors (not signed in)

The birth details, groups, notes and display settings you enter are stored only in your browser (localStorage) and are not uploaded to our servers. You can delete them by clearing your browser data or with “Clear this browser’s chart data” (清除此瀏覽器的命盤資料) in Settings.

To enforce the daily AI question limit for visitors, the server processes your IP address with an irreversible hash and keeps only a daily count of questions and token usage.

2. Signed in with Google

  • Account data: the name, email address and profile picture provided by Google. We never receive your Google password and do not access your Gmail, Drive or other Google data.
  • Birth data: the charts you keep in your account (display name, sex, date and time of birth, time zone, groups and notes), used to sync across your devices. On your first sign-in, the visitor charts already in this browser are added to your account and removed from the browser.
  • Sign-in records: your sessions, with the IP address and browser information at sign-in, used to keep you signed in and to protect your account.
  • Usage: your daily number of AI questions and token usage, used to apply daily limits and control costs.
  • Role: for example regular or restricted user, which determines the features available to you.

3. AI Q&A

When you ask the AI a question, your question, the conversation so far, the text of the current chart and your most recent search results are sent to a third-party AI model provider to generate the answer (currently Cloudflare Workers AI). We do not store conversation content; we keep only question counts and token usage. If the provider changes, we will update this page. Please do not include sensitive personal information unrelated to your chart in your questions.

AI answers are for reference only. Charts and searches are calculated by the Site’s own deterministic code; the AI takes no part in those calculations.

4. Storage and security

The Site and its database are provided by Cloudflare (Cloudflare Workers and a D1 database located in Eastern North America). All connections are encrypted with HTTPS. Cloudflare holds security and privacy certifications including ISO/IEC 27001, ISO/IEC 27701, ISO/IEC 27018, SOC 2 Type II and PCI DSS Level 1; details and its public SOC 3 report are on Cloudflare’s website, and the services each certification covers are as published by Cloudflare. These are Cloudflare’s certifications, not certifications of the Site itself.

Site administrators can see users’ names, email addresses, roles and AI usage in the admin console, but the console offers no way to view users’ birth data. As the system administrator, the Site owner has technical access to the database and uses it only for maintenance or to handle your requests.

5. Third-party services

  • Google: sign-in. Web fonts are loaded from Google Fonts, so your browser sends requests to Google.
  • Cloudflare: hosting and database, and the AI model. System logs are kept briefly for debugging only.

These services handle data under their own privacy policies.

6. Cookies and browser storage

The Site uses only the cookies needed to keep you signed in, plus browser storage (localStorage) for your settings and visitor data. We do not use advertising or third-party tracking cookies. Signing out also clears the record of the last chart you opened in this browser.

7. Retention and your rights

  • Download: use “Download my data” (下載我的資料) on the Settings page to get your account data and charts as JSON.
  • Correct: you can edit your charts at any time; your name, email and picture follow your Google account.
  • Delete: “Delete account” (刪除帳戶) in Settings immediately and permanently deletes your account, cloud charts, AI usage records and sign-in records. Daily visitor statistics keyed by hashed IP cannot identify you and are kept for statistics.

Account data is kept until you delete your account.

8. Changes to this policy

If we make material changes, we will update the date on this page and let you know on the Site.

9. Contact

For questions or requests about this policy or your data, email admin@doushu.app.