☾MOONLITTEAHOUSE
A PRIVATE CONVERSATION

Your story stays with you.

This policy explains what Moonlit Teahouse collects, why we use it, when it leaves your device, and the choices available to you.

Effective and last updated: September 14, 2026

1. Scope

This Privacy Policy applies to Moonlit Teahouse (the “Service”), including our website, Saju readings, character conversations, accounts, purchases, saved books, and public keepsakes. “We,” “us,” and “our” refer to the operator of Moonlit Teahouse.

2. Information we collect

Information you provide

  • Reading details: an optional name, birth date, birth time or “unknown” selection, birth city, time zone, and the questions or focus you choose.
  • Reading activity: chart symbols, generated or selected reading text, conversation history, corrections, bookmarks, notes, and reading progress.
  • Account details: your account identifier and email address when you sign in through Google or email.
  • Public keepsakes: the title and quote you choose to publish.
  • Support messages: the information you include when you contact us.

Purchases

Stripe processes your payment details and receipt email. We receive transaction identifiers, the item purchased, price, currency, payment status, and the account identifier used to restore access. We do not receive or store your full card number.

Information collected automatically

The Service and its hosting providers may receive technical information such as your IP address, browser and device type, requested pages, timestamps, and security or error logs. If you allow optional analytics, Google Analytics receives page views and selected journey events such as entering the teahouse, completing an input step, opening a reading, beginning checkout, and completing a purchase. We do not send Google Analytics your name, birth details, birthplace, questions, notes, corrections, or conversation text.

When you begin entering birth details, ipapi.is receives your IP address to suggest a city and time zone. We do not send it your name or birth details, and we do not store the location lookup response on our server.

We use browser local storage to keep reading progress, notes, preferences, an anonymous reading reference, and—when you sign in—session information. A secure, HttpOnly visitor cookie controls access to anonymous saved books for 30 days. After you sign in and save or claim a book, access is tied to your account. This is not advertising tracking.

3. How we use information

We use information to:

  • calculate and display your chart and reading;
  • respond to your questions and preserve the context and corrections you choose to keep;
  • save and restore readings, purchases, and public keepsakes;
  • process payments, refunds, disputes, and customer support;
  • operate, secure, debug, and improve the Service; and
  • comply with law and protect the rights and safety of users, the Service, and others.

4. When information is disclosed

We disclose information only as needed for the purposes above:

  • Fireworks AI receives your question, limited recent conversation, chart symbols, selected reading context, and corrections to produce a reply. Your name and birth location are not sent as separate fields.
  • Supabase provides Google and email sign-in. Our hosting database saves each reading automatically with your account identifier or a private browser session.
  • Stripe processes checkout, receipts, refunds, and disputes. We send the selected product and the account identifier needed to restore access—not your birth details, chart, questions, or notes.
  • ipapi.is receives your IP address for the optional city and time-zone suggestion.
  • Google Fonts and hosting providers deliver the Service and may receive ordinary request and device information.
  • Google Analytics receives limited usage and commerce events only if you allow analytics. Advertising storage and Google signals are disabled, and payment and sign-in query values, private book IDs, and shared-book tokens are redacted.
  • Authorities or other parties may receive information when reasonably necessary to comply with law, protect rights or safety, investigate abuse, or complete a merger, financing, sale, or transfer of the Service.

We do not sell personal information or use it for cross-context behavioral advertising.

5. Shared books and public keepsakes

Personal book URLs require the original browser session or the owning account. You may create a separate read-only shared copy, available to anyone with its link without automatic expiration, and revoke it from the book’s Share menu. Shared copies omit your name field, exact birth inputs, question field, and private notes. Answers may still contain personal details. Deleting the saved reading withdraws its shared links. Screenshots or copies made by a recipient cannot be withdrawn.

A keepsake is private unless you deliberately create a public link. A public keepsake includes only the title and quote you approve and can be viewed by anyone with the link. You can remove its public link from My account. Search engines are asked not to index keepsakes, but we cannot control copies, screenshots, or links shared by other people.

6. How long information is kept

Information stored only in your browser remains until you clear it, clear browser data, or the browser removes it. Clearing browser data does not delete account data, public keepsakes, or transaction records held on our systems or by service providers.

Server-saved readings, including anonymous readings, remain until deleted; cookie expiry by itself does not delete the saved content. Readings and public keepsakes are kept until you remove them or ask us to delete them, subject to technical and legal exceptions. Purchase, refund, dispute, security, and support records may be kept as long as reasonably necessary for accounting, fraud prevention, legal compliance, and resolving disputes. Service providers may retain information under their own policies and legal obligations.

7. Your choices

  • Use “Clear my reading from this device” in the in-app Privacy panel, or clear the site’s browser data, to remove the local reading.
  • Delete a saved reading and its shared links from My library. This does not refund a payment or delete transaction records.
  • Choose not to sign in; anonymous saved books remain accessible only through the original browser session.
  • Sign out to end the account session on a device.
  • Remove a public keepsake link from My account.
  • Allow, decline, or later change optional Google Analytics collection from “Analytics choices” in the in-app Privacy panel.
  • Avoid including sensitive personal details in free-text questions, notes, or public keepsakes.

8. Your privacy rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of personal information; receive a portable copy; object to or restrict certain processing; or appeal a decision. You may also have the right not to be discriminated against for exercising a privacy right.

To make a request, email support@sizhu.ai. Describe your request and the email address or transaction reference connected to your data. We may need to verify your identity before completing it. An authorized agent may submit a request where local law permits. We will respond within the time required by applicable law.

Because we do not sell personal information or use it for cross-context behavioral advertising, there is no sale or advertising share to opt out of. You may contact us if you believe this statement does not match your experience.

9. Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No online service can guarantee absolute security. Use a secure email account and do not submit information you would not want processed as described in this policy.

10. International use

Moonlit Teahouse and its service providers may process information in countries other than the one where you live. Those countries may have different data-protection rules. Where required, we use appropriate measures for international transfers.

11. Children

The Service is intended for adults age 18 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us so we can review and delete it as appropriate.

12. Changes to this policy

We may update this policy as the Service changes. We will post the revised date here and provide additional notice when a change is material and the law requires it.

13. Contact

For privacy questions or requests, contact support@sizhu.ai.