Who is responsible
The responsible independent operator and a usable privacy contact method are still being finalized. Live commercial bookings and real personal-data collection will remain unavailable until they are published. Sandbox testers must use fictitious details.
Sandbox test data
The test flow stores the values entered to verify order, payment, assignment, and chat behavior. Use fictitious names, email addresses, birth details, and questions. Do not submit real personal data at this stage.
Access and international transfers
The site is hosted in the United States. Sandbox test data may be reviewed by the operator while validating the system. The final notice will explain any access needed by practitioners or translation reviewers located in mainland China before live bookings open.
Public-site traffic measurement
Public pages send a first-party, cookie-free event containing the page path, referring domain or campaign tag, device category, and an ephemeral session identifier. The server also records the visitor IP address for traffic identification and security review. Full referring URLs, form values, and private-area paths are not stored. These records, including IP addresses, are automatically removed after 90 days under the current configuration.
Retention
Sandbox test records are retained only while the operator validates the system and may be removed during test cleanup. The final public policy will state the retention schedule, deletion process, and support contact before live bookings open.
Your choices
Do not provide another person’s real birth details unless you have authority to do so. A published contact method for access, correction, deletion, and consent-withdrawal requests will be added before live data collection begins.
Security
The application encrypts sensitive fields at rest, keeps database access off the public internet, limits administrative access, and does not send birth data in page URLs, advertising events, or session replay. No system can guarantee absolute security.