Privacy Policy

1. When you browse

To understand which posts are read and where readers come from, the site records the following when you open a page:

• What you visited: the page, the time, and the page that sent you here (for example a search engine or another website).
• Network information: your IP address and the approximate region (province/state, city) and network provider estimated from it. This only gives a rough area and cannot pinpoint where you are.
• Device information: the basic description your browser sends to every website, which shows your device type, operating system and browser.
• Browser feature summary: an irreversible code calculated from basic settings such as language, time zone and screen size. It is only used to recognize the same browser again if the visitor cookie has been cleared. We do not use more invasive “device fingerprinting” techniques.
• Account link: if you are signed in, your visits are linked to your account.

Visits from search engine crawlers and other automated programs, as well as the site owner’s own visits, are not recorded. Only the site owner can view visit records in the admin console, where the second half of each IP address is hidden.

2. Signing up and signing in

An account is optional — you can read all public content without one. If you choose to sign up or sign in:

• Registration details: username, nickname, email and password. Your email is used for verification codes and password recovery; your password is stored with irreversible encryption, so nobody can see it. You may also choose to add an avatar, profile background, gender, preferred language and theme color.
• Signing in with another account: if you sign in with a third-party account, we receive your account ID, name, username, email and avatar from that platform to create or link your account here, and update them each time you sign in. You can unlink it in your account settings.
• Sign-in records: to keep you signed in and protect your account, each sign-in session records the IP addresses it was used from. Sessions that stay inactive for a long time are deleted automatically.
• IP region on your profile: by default, your profile page shows visitors the approximate region of the IP address you last signed in from (not the IP itself). You can turn off “Show IP Location” in your account settings.

3. Comments and likes

You need to sign in to comment or like.

• Comments: besides the comment text and time, the site stores the IP address, approximate region and device information from when you posted it, to fight spam and abuse. Your IP address is never shown publicly.
• Public client info: if you tick “Show client info” when commenting, other readers can see your approximate region, operating system and browser; otherwise nothing is shown.
• Likes and interactions: the site records what you have liked. Your likes and comments also appear in the site owner’s interaction log so they can follow reader feedback; when you remove a like, its record is deleted too.

4. Do Not Track

If your browser has “Do Not Track” or “Global Privacy Control” (GPC) turned on, the site respects your choice: it only records the page, time, referring page, approximate region and device type. It does not store your IP address or full browser information, does not set the visitor cookie, and does not compute the browser feature summary (your IP address is used briefly to estimate your region but is not stored). If you are signed in at the same time, the visit is still linked to your account.

5. Cookies and local storage

Cookies are small pieces of data a website stores in your browser. This site only sets the following cookies itself, and none of them are used for advertising or cross-site tracking:

• Visitor ID (nb_vid): a random number used to recognize repeat visits from the same browser, kept for one year. It is not set when “Do Not Track” is on.
• Sign-in state (token, refresh_token): set only after you sign in, to keep you signed in. They expire when you sign out or when they time out.
• Third-party sign-in check (oidc_nonce): set briefly when you sign in with a third-party account, to confirm the request came from your own browser. It expires after 10 minutes.
• Local preferences: interface settings such as light/dark theme and the music player’s volume and progress are stored only in your browser and never uploaded to the server.

You can view or clear this data in your browser settings at any time. After clearing it you will need to sign in again, and your next visit will be counted as a new visitor. Third-party services used on the pages may set their own cookies; see the next section.

6. Third-party services

Some features rely on third-party services. When you use them, your browser or this site’s server communicates with that service, which may therefore receive basic information such as your IP address and handle it under its own privacy policy. Which services are enabled depends on the site owner’s configuration:

• IP region lookup: IPv4 addresses are resolved offline on this site’s server and are not sent to anyone. IPv6 addresses (when the site owner has not set up offline data) and the “IP region” shown on profile pages are looked up by sending the IP address to a third-party lookup service (mir6.com).
• Weather card location: picking a city in the editor stores only that city's name and approximate coordinates (~1 km precision). When the author has not picked a city, the card first asks whether it may use your location: if you allow it, the coordinates are rounded to roughly 1 km and used only to fetch the weather where you are and to look up the name of that place (through QWeather when the site owner has configured it, otherwise BigDataCloud's free reverse-geocoding endpoint, which again only receives the rounded coordinates) — never stored or written into the post. If you decline or your browser does not support it, the site falls back to estimating your city from your IP address for that single request. Weather data is requested by our server from Open-Meteo or the QWeather account the site owner configured; your IP address or raw position is not sent to them.
• Human verification: sign-in and sign-up may load Cloudflare Turnstile, hCaptcha or Google reCAPTCHA to block fake sign-ups and password guessing.
• Third-party sign-in: when you sign in with a third-party account, you are sent to that platform to authorize it.
• Gravatar avatars: users without an avatar are shown their Gravatar picture. Your browser requests the image from Gravatar using a scrambled digest of the email address, not the address itself.
• Email delivery: emails such as verification codes are sent through the mail service configured by the site owner.
• Static resources and music: images, scripts, music and other files may be hosted on a CDN or other platforms, and pages may load a small CDN status widget; posts may include external images. When the music player is enabled, the playlist and audio are loaded from their own addresses.
• Embedded content: the sidebar and other areas may embed pages from other websites (such as a social media timeline), which works the same as visiting that website directly.

Some third-party services may have servers outside your country or region. Apart from the cases above and where required by law, we do not share your personal information with any third party.

7. How we use this information

• Understanding readership: measuring post popularity, traffic sources and regional distribution so the site owner can improve the content.
• Providing features: letting you sign in, comment, like and have a profile page.
• Keeping the site safe: detecting and blocking spam, fake sign-ups and abnormal traffic.

We do not sell your personal information or use it for advertising or marketing profiles. Visit statistics are based on the site owner’s legitimate interest in understanding how the site is used; account information is necessary to provide the features you ask for; optional public displays such as your region or client info are based on your choice and can be turned off at any time.

8. How long we keep it

• Visit and interaction records: kept for 90 days, then deleted automatically.
• Visitor summaries: each browser has one summary (last IP address, approximate region, device type and visit count). It is currently not deleted together with visit records; you can ask the site owner to delete it.
• Account and comments: kept for as long as you use your account. Once you delete a comment it is no longer shown; to have comment data erased completely or to close your account, please contact the site owner.
• Sign-in records: deleted automatically once a session has been inactive for a long time.

9. Your rights

You have the right to be informed about, access, obtain a copy of, correct and delete your personal information, to withdraw consent, and to close your account. Here is how:

• Do it yourself: after signing in, edit your nickname, avatar, email, password and other details in your account settings, turn off “Show IP Location”, or unlink third-party accounts.
• Manage your content: delete comments you have posted, or remove your likes.
• Reduce tracking: turn on “Do Not Track” or “Global Privacy Control” in your browser, or clear this site’s cookies.
• Contact the site owner: to view or get a copy of information about you, delete visit records, erase comments completely or close your account, please contact the site owner. To protect your information, we may need to verify your identity first.

We will reply and handle your request as soon as possible. If you believe the way we handle personal information violates your rights, you may also lodge a complaint with your local data protection authority.

10. Security

We take reasonable measures to protect your information: passwords are stored encrypted; sign-in cookies cannot be read by page scripts; visit records can only be viewed by the site owner in the admin console, with IP addresses partially hidden. No system on the internet is perfectly secure, though. If a data breach ever happens, we will let you know on this site promptly and do our best to limit the impact.

11. Children

This site is meant for a general audience and is not directed at children. If you are under 14 (or the minimum age required by law where you live), please get a parent or guardian’s consent before signing up or commenting. If a parent or guardian finds that a child has given us personal information without consent, please contact the site owner to have it deleted.

12. Changes to this policy

We may update this policy as the site’s features change. The updated version will be published on this page with the date shown at the top; for significant changes we will also make a clear announcement on this site.

13. Contact us

If you have any questions about this policy or want to exercise the rights above, please contact the site owner, LawanceWang, through the contact details published on this site (for example the links in the footer or on the owner’s profile).