Privacy Policy

Last updated: September 26, 2026

How we handle your birth details — and why there is almost nothing to handle.

AurumTao sells one thing: a written reading based on your birth details. This page explains exactly what we collect, what we do with it, and — just as important — what we never do with it.

The short version

We do not store your birth details. Your date, time and place of birth are used to prepare your reading, and then deleted. They are never written to a database, never logged, and never attached to your identity.

We never see or store your card number. Payment is handled entirely by our payment provider.

We do not sell your data and we do not share it with advertisers for profiling.

What we collect

Information you give us

Birth date — required, it is the basis of the reading
Birth place — required. Clock time is corrected to where you were actually born, so the city matters. If you use the "current location" button, we use the coordinates supplied by your browser for that calculation only
Birth time — optional, but worth adding if you know it. With it the reading is more precise; without it the reading still works, a few finer points are simply less specific
Email address — optional on our site. You do not need one to buy or to read. Creem may ask for one on their own checkout page; that is described under Payment below

Information collected automatically

Standard server records: IP address, browser type, and the page requested. These exist because any web server produces them
A short access code that appears in the address bar after you submit — the t=… part of the link. It is what lets the page reload and lets you reopen your reading for 30 days. It identifies the reading, not you: no name, no account, nothing that points back to a person
If we are running advertising campaigns, a third-party measurement tag (for example a TikTok Pixel) may record that a visit or a purchase happened. These tags tell us that something happened, not who it happened to

What we do not do

We do not store birth details. Once your reading is produced, the input is not kept. There is no client database to leak, and nothing for us to hand over even if we were asked
We do not keep your reading past 30 days. After payment the finished text is kept as a snapshot for 30 days so your private link works, and is then deleted. That snapshot is the written result, not the input — it holds no birth data of its own. The PDF you download exists only on your device
We do not sell, rent or trade personal information. Ever
We do not use your birth details for advertising. They are never sent to an ad platform, and we do not build profiles of visitors
We do not knowingly collect anything about children. The service is for adults (18+). If we learn that a child has submitted details, we delete them

How your birth details are handled

Your date, time and place of birth are used only to calculate the reading you asked for. Specifically:

Calculated in memory, then deleted. Your birth details are held in working memory for the few seconds it takes to produce the report and are then deleted. They are not written to a customer database and not kept after the reading is delivered
What we do keep is an order log only. For payment disputes and accounting we retain: an order reference, the payment provider's transaction reference, the time of payment, the amount and currency, the time the report was generated, and the expiry time of your access link
That log contains no birth details in plain text — no name, no date, time or place of birth, and no email address
No email is required. You can buy and read your report without giving us an email address

Payment

Payments are processed by our payment provider (Creem) on their own checkout page. Your card number, expiry and security code go directly to them and never reach our server. We receive only a confirmation that an order was paid, and an order reference.

Creem may ask for your name, email address and billing address on their own checkout page — that is their requirement as the legal seller, not ours. Those details are held by Creem, not by us. They are not part of the order record we keep, and you do not have to give us an email address to get your reading.

Your access link. After payment your reading is shown on screen immediately. The link in the address bar is yours for 30 days — save it or bookmark it and you can come back to it. We do not send it by email, because we do not ask for your email. When it expires, the reading is no longer retrievable — which is the point: there is nothing left on our side to retrieve.

Why we are allowed to process it

Wherever you live, we hold ourselves to the same standard. The paragraphs below spell out what that means under EU and UK law, and for California residents.

Under the EU and UK GDPR, we rely on:

Your consent — you choose to enter your birth details to get a reading, and you can withdraw it at any time by leaving the site
Performance of a contract — we need the details to produce what you bought
Legitimate interests — keeping the site secure and understanding, in aggregate, whether our advertising works

Your rights

If you are in the EU or UK, you may ask us to:

give you a copy of the order record we hold — it contains no birth details
correct it, delete it, or restrict how we use it
hand it to you in a portable format
object to processing based on legitimate interests

If you are a California resident, you have the right to know what is collected, to have it deleted, to opt out of any sale or sharing, and not to be discriminated against for exercising those rights.

We do not sell or share personal information, so there is nothing for you to opt out of. We are telling you this because California law requires it.

In practice this is easy for us, because in most cases we hold nothing. Write to support@aurumtao.com and we will confirm and deal with it within 1–2 business days, and always within 3 business days.

How long we keep things

Birth details: held in working memory only while the reading is produced, then deleted — never written to storage
Finished readings: kept as a snapshot for 30 days so your access link works, then deleted automatically
Server records: retained for a limited period for security and troubleshooting, then rotated out
Order records: kept by our payment provider for tax and accounting purposes as the law requires. We keep the minimum needed to handle refunds and disputes
Emails you send us: kept as long as needed to answer you, then deleted

Security

The site is served over HTTPS. Access to the server is restricted and key-based. No system is perfectly secure, but because we do not retain your birth details, the realistic impact of any incident is small.

Changes to this policy

If we change this policy in a way that matters, we will update the date at the top. We will not quietly start doing something different with data we have already collected.

Contact

Questions, or want your data dealt with: support@aurumtao.com — we reply within 1–2 business days, and always within 3 business days.