Tiếng Việt

Privacy Policy

Last updated: October 18, 2026.

This policy explains what NumHalo (www.numhalo.com) collects, why, who receives it, how long we keep it and what rights you have. We keep it short and describe what the system actually does.

Summary

  • The free calculator and the tools (Baby Names, Numerology for Children, Compatibility, Personal Day) run in your browser. The names and birth dates you type there are not sent to our server.
  • We store data on our server only when you sign in or buy a report.
  • We do not sell your data, do not use it for advertising and do not store your IP address in our database.

Who is responsible for your data

NumHalo is run by Nguyen Van Quang, a sole trader based in Hai Phong, Viet Nam. He decides why and how your data is used (the "controller" under the GDPR). Send any question or request about your data to the email address at the bottom of this page.

We follow Vietnam's Personal Data Protection Law (Law No. 91/2025/QH15). For users in the European Union, the European Economic Area and the United Kingdom, we apply the GDPR and the UK GDPR.

What we collect

  • When you sign in with Google: your name, email, profile picture, Google account ID and the site language when you signed up. We never receive your Google password.
  • Your session: a random token kept in a cookie; our server stores only a one-way hash of it.
  • When you buy a report: the birth name, birth date and calculation method for the person the report is about. Couple reports and child reports also include the second person's name and birth date.
  • Orders: order code, product, amount, payment method, status, and when the order was created and paid.
  • Gumroad payments: the Gumroad sale ID and the payment notice Gumroad sends us. Before saving that notice we remove the email, name, address and country. What remains may include your Gumroad buyer ID, the card type and the last few digits of the card, if Gumroad includes them. We never receive your full card number.
  • Bank transfers (VND): when you transfer money, our bank shows the sender's name, account number and transfer note. We use this only to match the payment to your order and do not copy it into NumHalo.
  • Your reports: the report content (which includes the names and birth dates in it), so you can open it again at any time.
  • Emails you send us: their content, including the bank account details you give us when asking for a refund on a VND order.
  • Operational logs: events such as "signed in" or "order created" linked to your account and site language, and a log of admin actions (for example confirming or cancelling an order, revoking a report, changing a role). No IP address, no browser details.
  • Referral code: if you reach NumHalo through an affiliate's link, we record that affiliate's code and when you clicked on your account, and copy the code onto orders you place in the following 30 days, to calculate their commission. Clicks per code are only counted as daily totals. Affiliates never see your name, email or reports.

Why we use your data

  • To do what you ask (performing our contract with you): sign you in, create orders, confirm payment, prepare and deliver reports, handle refunds, and help when something goes wrong.
  • To meet legal obligations: keep order and payment records as accounting and tax rules require.
  • To keep the service safe and running (our legitimate interests): spot unusual orders, fraud and abuse, and count sign-ins and orders to see how the service is doing. You have the right to object to this.
  • To pay affiliates (our legitimate interests and those of the person who referred you): recording the referral code as described above. You have the right to object to this.
  • With your consent: for example remembering your birth date in your browser on the Personal Day page. You can withdraw consent at any time; this does not affect anything done before.

The free calculator does not require you to give us anything. To buy a report you need to sign in with Google and enter a name and birth date; without them we cannot prepare the report.

Reports are generated by computer using the rules published on our How we calculate page. We do not use your data for any automated decision that has legal or similarly significant effects on you.

Who receives data

  • Google: verifies your sign-in. Google's sign-in box loads only when you open it. Your browser loads your profile picture directly from Google's servers.
  • Gumroad (USD payments): you enter your card and email directly on Gumroad, which sends your receipt and is responsible for that data under its own privacy policy. We pass the order code in the checkout link. If an order needs to be matched, our server asks Gumroad for sales made with the email on your NumHalo account. The person running NumHalo can see your transaction details in the Gumroad dashboard (such as email, country and amount) to match payments and issue refunds.
  • VietQR and banks (VND payments): your browser loads the QR image from img.vietqr.io. The image link contains the amount, the order code and NumHalo's receiving account, not your name or email. The money passes through your bank and ours.
  • Cloudflare: hosts the website and database. When you visit, Cloudflare receives your IP address to route the page, guess your country to pick the language, and block attacks. Cloudflare Web Analytics counts page views without cookies.
  • Telegram: sends order alerts to the person running NumHalo, containing only the order code, product name, amount and order status, never your name, email or birth date.
  • Public authorities: only when the law requires it.

International transfers

NumHalo's database is stored in Cloudflare data centers in Western Europe, and the person running NumHalo accesses it from Vietnam. Google, Gumroad and Cloudflare process data in several countries, including the United States. These transfers are needed to provide the service you ask for.

If you are in Europe or the UK: Vietnam has not been recognized by the EU as offering an equivalent level of data protection, so we protect your data ourselves as described in this policy. Google and Cloudflare use the EU's standard contractual clauses for transfers; Gumroad applies the measures set out in its own privacy policy.

How long we keep data

The system deletes data automatically on the schedule below, checked once a day:

  • Account, profiles and reports: until you ask us to delete your account.
  • Operational events (sign-ins, orders created): deleted after 2 years.
  • Orders, payment records and the admin log: for as long as accounting and tax rules require, even after you delete your account; where the law allows, we then remove your name and email from those records.
  • Unpaid orders: marked "expired" after 24 hours and deleted after 90 days.
  • Sessions: expire after 30 days or when you sign out; expired sessions are deleted.
  • Referral code on your account: stops counting after 30 days or once used for an order; the record is kept until you delete your account. The code copied onto an order is kept with the order.
  • Emails you send: for as long as needed to resolve your request and any related orders.

Security and who can see your data

Connections are always encrypted (HTTPS). Session tokens are stored only as one-way hashes.

The person running NumHalo (the Administrator) can see orders and open customers' reports, only to confirm payments, give support and fix problems. People given the Manager role can see customers' names, emails, profile pictures, order lists and amounts spent, but cannot open your reports. Confirming or cancelling orders, revoking reports and changing roles are all logged.

No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority within the time the law requires.

Your rights

You have the right to be informed about how your data is used; to access your data and get a copy (including in a machine-readable file); to correct inaccurate data; to ask us to delete it; to withdraw consent; and to object to or ask us to restrict processing.

To use these rights, email the address at the bottom of this page from the address you sign in with. We reply within 30 days, or sooner if the law where you live requires it. There is no self-service delete button yet. Deleting your account also deletes the reports you bought and they cannot be restored, so save your reports as PDF first.

If you feel your rights have not been respected, you can complain to the personal data protection authority of Vietnam's Ministry of Public Security, to the data protection authority where you live or work (EU, EEA), or to the ICO (United Kingdom).

Children and other people's information

NumHalo accounts are for people aged 16 and over. Child reports and couple reports contain another person's name and birth date. For a child under 16, only a parent or guardian may enter the child's details. For an adult, only enter their details if they have agreed. If you appear in a report someone else bought and want it removed, contact us.

Cookies and browser storage

  • nh_session (cookie, 30 days): keeps you signed in. Scripts on the page cannot read it. Needed for your account to work.
  • nh_lang (cookie, 1 year): remembers the site language (English or Vietnamese). On your first visit the language is chosen by country; you can change it with the language switch.
  • nh_calc_input, nh_calc_options (tab storage, cleared when you close the tab): carry the name and birth date you just entered to the result and checkout pages. They are sent to our server only when you create an order.
  • nh_day_birth (browser storage): only if you tick "remember my birth date" on the Personal Day page; untick to remove it.
  • nh_ref (browser storage, 30 days): the affiliate's code and when you clicked their link, while you are not signed in; sent when you sign in, then deleted. If you are in the EU, EEA, UK or Switzerland, we store it only after you press "Allow" in the bar at the bottom of the page. Nothing is stored in your browser if you are already signed in.

We use no advertising cookies and no third-party trackers. When you open the sign-in box, Google may set its own cookies under Google's policy.

Changes

When this policy changes we update the date at the top. We will announce important changes on the site before they take effect.

Questions about your data or these terms: