The short version. This is a personal site. I am not selling your data and there is no mailing list waiting for you.
Two analytics tools run on the public pages. The free Bazi and Human Design calculators keep a small anonymous record of each run — your birth date, an age bracket, and your country, but not your name and not your birth time. Testimonials keep what you type in the form. That is the whole of it.
Want any of it gone? Email me and it is gone.
kevinchia.sg is the personal website of Kevin Chia, an individual based in Singapore. There is no company behind this site and no data protection department. Questions and requests go to a person — me — at [email protected].
This policy covers kevinchia.sg and its subdomains. It does not cover the other businesses I am involved in, which run their own sites and their own policies.
Two third-party tools load when you visit a public page:
These load automatically when the page does. There is currently no cookie banner asking first — see section 06, where I say what that means and what you can do about it.
The private dashboard pages under /one/ carry no analytics at all.
You type in a birth date, a birth time, and a birth location. Those go to my calculation server so the chart can be worked out, and the result comes back to your browser.
Separately, one row is written to my database recording that a calculation happened. That row contains:
What that row does not contain: your name, your birth time, your exact birth location, your email, or anything that identifies you. The name and birth time are used for the calculation in the moment and are not written to the database.
I use this to see whether the tools are worth keeping. That is genuinely all.
If you submit a testimonial, I store exactly what the form asked for: your name and business name (both optional) and your message. Nothing else is captured — no email, no IP.
Submissions are held for review and are not published until I approve them. If I never approve it, it stays private.
The sign-in page exists for me. It is a private dashboard restricted to my own accounts, and sign-ups are blocked at the database for any other address. If you sign in, the site records your email address, your Google account identifier, and the times you signed in.
Like any website, the servers and the CDN in front of them keep short-lived request logs containing IP addresses, timestamps, and which page was asked for. This is ordinary infrastructure logging, not something I analyse.
Meta Pixel and Microsoft Clarity set their own cookies. Those are the only tracking cookies on the site.
The site also uses your browser's local storage for things that never leave your device and are never sent to me:
Clearing your browser data removes all of it.
I use these services to run the site. Each holds some data as a result, and each has its own privacy policy which governs what they do with it.
| Service | What it handles | Where |
|---|---|---|
| Supabase | Database and sign-in | Singapore |
| Railway | Application hosting | Singapore |
| Cloudflare | CDN, DNS, request logs | Global edge network |
| Sign-in, web fonts | Global | |
| Meta | Pixel analytics | Global |
| Microsoft | Clarity analytics | Global |
Because several of these operate globally, data may be processed outside Singapore. I do not sell your data, and I do not share it with anyone beyond the services listed above.
I would rather tell you exactly where this site stands than write something reassuring and vague.
There is no consent banner yet. The analytics tools load as soon as a public page does. Under Singapore's PDPA my obligation is to tell you what is collected and why, which is what this page is for. If you are in the EEA or the UK, the stricter standard there is opt-in consent before anything loads, and this site does not currently meet it. I would rather write that down than pretend otherwise. It is on my list to fix.
In the meantime, these all work:
To see, correct, or delete anything I hold about you, email [email protected]. Tell me roughly when and what you submitted so I can find it. There is no form and no ticket number — it is one person reading email. I will action it as quickly as I reasonably can.
This site is not directed at children and I do not knowingly collect anything from anyone under 13. If you believe a child has submitted something, email me and I will remove it.
The site is served over HTTPS. Database access is governed by row-level rules so that private data is reachable only by my own signed-in account, and the private dashboard is restricted to a fixed list of addresses at the database level rather than only in the page.
No system is perfect and I am not going to claim otherwise. If you find a security problem, please email me before telling anyone else — I will fix it and I will thank you properly.
If this policy changes materially, the date at the top changes with it. There is no version history; the current page is the whole policy.
Kevin Chia — Singapore
[email protected]
@kevinchia.sg on Instagram
The email address moves to [email protected] in 2027. Mail to the old address will keep reaching me.