星典隐私政策 | Star Echo Decoder — Privacy Policy (International)

最后更新日期 | Last Updated: May 3, 2026

星典（Star Echo Decoder，以下简称"我们"或"本产品"）深知个人信息对您的重要性，并承诺严格遵守适用的数据保护法律法规。本产品面向全球华语用户提供服务，您的个人信息将通过位于美国及其他国家和地区的云服务基础设施进行处理和存储。请您在使用本产品前仔细阅读并充分理解本隐私政策（以下简称"本政策"）的全部内容。您勾选"同意"或开始使用本产品任一服务，即视为您已阅读、理解并同意本政策的全部约定。

Star Echo Decoder ("we," "us," or "our") takes your privacy seriously and is committed to complying with applicable data protection laws. Our Service is available to Chinese-speaking users worldwide. Your personal information will be processed and stored on cloud infrastructure located in the United States and other countries and regions. Please read this Privacy Policy ("Policy") carefully before using the Service. By checking "I Agree" or accessing or using any part of the Service, you acknowledge that you have read, understood, and agree to this Policy.

如中英文版本存在不一致或冲突，以中文版本为准。英文版本仅供参考。 / In the event of any inconsistency or conflict between the Chinese and English versions, the Chinese version shall prevail. The English version is provided for reference only.

1. 适用范围 | Scope

本政策适用于星典 Web 应用（PC 端和移动端）以及我们向您提供的所有相关服务。本政策说明我们如何收集、使用、存储、共享和保护您的个人信息，适用於您所在司法管辖区的数据保护法律，包括但不限于《中华人民共和国个人信息保护法》（PIPL）、《欧盟通用数据保护条例》（GDPR）及《加利福尼亚州消费者隐私法案》（CCPA）中的相关要求。

This Policy applies to the Star Echo Decoder web application (desktop and mobile) and all related services. It explains how we collect, use, store, share, and protect your personal information in compliance with applicable laws, including the PIPL (China), GDPR (EU), and CCPA (California), where applicable.

2. 我们收集的信息 | Information We Collect

2.1 必填信息 | Required Information

邮箱地址 | Email address： 用户注册与身份认证（Supabase Auth 邮箱验证链接登录），用于发送登录链接和服务通知 / User authentication (Supabase Auth) and for sending login links and service notifications.

出生日期与时辰 | Date and time of birth： 紫微斗数命盘排盘（年、月、日、时、分）/ Zi Wei Dou Shu astrological chart calculation.

性别 | Gender： 命盘排盘（传统命理文化语境下指出生时的生理性别标识）/ Astrological chart calculation.

法律依据（GDPR）| Legal Basis (GDPR)： 履行合同所必需 / Contractual necessity (Art. 6(1)(b)).

2.2 可选信息 | Optional Information

出生城市 | City of birth： 提升排盘精度（真太阳时计算）/ Improving chart accuracy (true solar time calculation). 法律依据：同意 / Legal Basis: Consent (Art. 6(1)(a)).

2.3 我们不收集的信息 | Information We Do NOT Collect

• 银行卡号、支付账号等金融信息 / Bank card numbers, payment account details
• 身份证号、护照号等个人身份证明文件 / National ID or passport numbers
• 生物识别信息 / Biometric information
• 精确地理位置（GPS 坐标）/ Precise geolocation (GPS coordinates)
• 通讯录、通话记录 / Contact lists, call logs
• 种族或民族起源、政治观点、宗教信仰等敏感信息 / Race, political opinions, religious beliefs, or other special categories of data

2.4 自动收集的技术信息 | Automatically Collected Technical Information

设备信息 / Device Information： 浏览器类型、操作系统版本、设备类型、屏幕分辨率 / Browser type, OS version, device type, screen resolution.

使用日志 / Usage Logs： 访问时间、页面、功能使用频率。我们不记录出生信息与命盘输出之间的映射关系用于其他用途 / Access timestamps, pages visited, feature usage frequency. We do not record mappings between your birth info and chart outputs for unrelated purposes.

IP 地址 / IP Address： 用于防滥用检测和基础地域统计 / Used for abuse detection and basic regional statistics.

法律依据（GDPR）：合法利益 / Legal Basis (GDPR): Legitimate interest (Art. 6(1)(f)).

3. 信息存储与跨境传输 | Data Storage & International Transfers

3.1 存储方式 | Storage

账号信息 / Account Info： Supabase Auth（云基础设施 / Cloud infrastructure）。

生辰信息与偏好 / Birth Data & Preferences： Supabase（PostgreSQL）/ Supabase (PostgreSQL).

3.2 跨境传输 | International Transfers

您理解并同意，您的个人信息将传输至、存储于并处理于美国及其他国家和地区的服务器上。/ You understand and agree that your personal information may be transferred to, stored on, and processed on servers in the United States and other countries.

保障措施 / Safeguards：

• 标准合同条款（SCCs）：与云服务供应商之间的数据传输遵循欧盟 SCCs / Data transfers follow EU Standard Contractual Clauses
• 数据隐私框架 / Data Privacy Framework：服务商参与 EU-US Data Privacy Framework（如适用）
• 出境合规机制 | Cross-border Compliance Mechanism：对中国境内用户的个人信息出境，我们将依法采取相应的合规机制（如签订国家网信部门制定的标准合同等）/ For users in mainland China, we will implement appropriate cross-border compliance mechanisms as required by law (such as entering into standard contracts prescribed by the Cyberspace Administration of China).

3.3 数据安全 | Security

• 传输加密：TLS 1.3 / Encryption in transit: TLS 1.3
• 存储加密：生辰数据存储层加密 / Encryption at rest for birth data
• 访问控制：最小权限原则 / Access control: Need-to-Know & Least Privilege
• 定期安全审计和渗透测试 / Regular security audits and penetration testing

3.4 数据保留期限 | Data Retention

• 账号活跃期间持续保留 / Retained while account is active
• 账号注销后 30 天内彻底删除或匿名化 / Permanently deleted or anonymized within 30 days of account deletion
• 法律法规另有要求的，按法定期限保留 / Retention for legally mandated periods where required

4. 信息的使用 | How We Use Information

4.1 核心用途 | Core Purposes

• 命盘排盘 / Chart Calculation — 使用出生信息进行紫微斗数命盘计算 / Using birth information for astrological charts
• AI 解读 / AI Interpretation — 将命盘 JSON 发送至 Dify API 生成解读。原始出生信息不会被传递至 AI 服务，仅传递已排好的命盘数据 / Chart JSON sent to Dify API. Raw birth info is NOT transmitted to the AI service
• 服务优化 / Service Improvement — 使用匿名化统计数据改进功能 / Using anonymized statistics
• 账号管理 / Account Management — 使用邮箱发送通知 / Using email for notifications

4.2 我们不做的 | What We Do NOT Do

• 不用于广告推送或精准营销 / No advertising or targeted marketing
• 不与第三方共享、出售或出租您的生辰数据或个人信息 / No sharing, selling, or renting your data to third parties
• 不将您的命盘数据用于训练 AI 模型（除非严格匿名化处理后用于产品改进，届时将另行告知并征求同意）/ We do not use your chart data for AI model training (unless strictly anonymized, with advance notice and consent)

4.3 例外情形（法律要求的披露）/ Exceptions (Legally Required Disclosure)

根据适用法律法规、司法或行政机关的合法要求；为保护用户或公众人身财产安全所合理必要；为维护我们的合法权益所合理必要。 As required by applicable law or valid legal process; where reasonably necessary to protect personal safety; where reasonably necessary to protect our legitimate rights.

5. Cookie 与跟踪技术 | Cookies & Tracking Technologies

5.1 本产品使用 Session Cookie 维持登录状态，为功能性必要 Cookie，不用于跟踪浏览行为。 The Service uses Session Cookies to maintain your login state. These are strictly necessary cookies, not used for tracking.

5.2 目前未接入第三方分析或广告跟踪工具。未来如需引入，将通过独立的 Cookie 同意层征得您的同意。 We currently do not use third-party analytics or advertising tracking tools. If introduced in the future, we will obtain your consent through a dedicated cookie consent layer.

5.3 EEA 用户：必要的 Session Cookie 基于合法利益部署。非必要的跟踪技术将仅在您明确同意后激活。/ Necessary cookies are based on legitimate interest. Non-essential tracking will only activate after explicit consent.

5.4 加州用户：我们目前不出售或共享个人信息（依据 CCPA 定义）。/ We do not currently "sell" or "share" personal information as defined by CCPA.

5.5 您可通过浏览器设置管理或禁用 Cookie。禁用后登录功能可能无法正常使用。 You may manage cookies through your browser settings. Disabling may affect login functionality.

6. 用户权利 | Your Rights

通用权利 | Universal Rights

GDPR 附加权利（EEA 用户）/ GDPR Additional Rights (EEA Users)

• 限制处理权 / Right to Restriction of Processing：在特定情况下（如您对数据的准确性有异议时），您有权要求我们暂停处理您的个人数据 / You have the right to request that we restrict processing of your personal data in certain circumstances (e.g., where you contest the accuracy of the data).
• 反对权 / Right to Object：反对基于合法利益对您个人数据的处理 / Object to processing based on legitimate interest
• 自动化决策异议权 / Automated Decision-Making：我们的命盘解读不构成"重大影响决策"/ Our interpretations do not constitute "significant effects" decisions
• 向监管机构投诉 / Lodge a Complaint：向您所在欧盟成员国的数据保护监管机构投诉 / Lodge a complaint with your local data protection authority

CCPA 附加权利（加州用户）/ CCPA Additional Rights (California Residents)

• 知情权 / Right to Know：了解过去 12 个月内收集、使用的个人信息类别 / Know categories of personal info collected in the preceding 12 months
• 删除权 / Right to Delete：要求删除我们收集的您的个人信息 / Request deletion of your personal info
• 不受歧视权 / Right to Non-Discrimination：不会因您行使 CCPA 权利而歧视您 / No discrimination for exercising CCPA rights

如何行使您的权利 / How to Exercise Your Rights

邮箱 / Email：support@starlore.pro 产品内 / In-app： 个人中心 → 账号设置 → 数据管理（即将上线）/ Personal Center → Settings → Data Management (coming soon)

为验证您的身份，我们可能会要求您提供合理必要的信息。/ We may require reasonable identity verification. 我们将在收到完整请求后 30 日内回复 / We will respond within 30 days.

7. 儿童隐私保护 | Children's Privacy

本产品不面向 18 周岁以下 的未成年人提供服务（EEA 地区为 16 周岁以下）。我们不会故意收集未成年人的个人信息。如发现无意中收集，将立即删除。 / The Service is not directed to individuals under 18 (under 16 in EEA). We do not knowingly collect personal information from minors. If we become aware of inadvertent collection, we will immediately delete such data.

如您是监护人，发现您的孩子使用了本产品，请联系 / If you are a guardian, please contact: support@starlore.pro

8. 第三方服务 | Third-Party Services

上述第三方的数据处理行为不归我们控制。建议您阅读它们各自的隐私政策。/ We do not control their data processing. Please review their respective privacy policies.

9. 数据保护官（DPO）| Data Protection Officer

dpo@starlore.pro

对于与数据保护相关的问题、投诉或建议，可联系我们的数据保护官。 For questions, complaints, or suggestions related to data protection, you may contact our DPO.

10. 政策更新 | Changes to This Policy

重大变更将提前至少 30 日通过产品内通知或注册邮箱告知。若您在更新后继续使用本产品，视为接受更新后的政策。 / Material changes will be communicated at least 30 days in advance. Your continued use after any update constitutes acceptance.

11. 联系方式 | Contact Information

support@starlore.pro 数据保护官 / DPO：dpo@starlore.pro

如对以上条款有疑问，请联系 / If you have any questions, please contact: support@starlore.pro