Privacy Policy

Feedback data

The private feedback form collects the category, subject, message, an optional nickname, an optional page pathname, and ticket and message timestamps. A one-way keyed summary of the client IP is used for rate limiting; the feedback system does not place the raw IP address in the ticket record.

A private ticket link is returned after submission. The database stores only a SHA-256 token hash; the raw token is retained by the visitor in the link and is not stored in the database. The full link can be stored in this browser's localStorage for My feedback. Anyone with the link can read and reply to that ticket, and a lost link cannot be recovered through an account.

Feedback tickets and messages are retained indefinitely by default until the site operator, Terence XU, explicitly deletes them as part of operational cleanup or a valid request.

Technical delivery data

Hosting, database, and CDN providers may process routine request information such as IP address, browser details, requested URL, and timestamps to deliver and secure the site. Private feedback messages are processed so Terence XU can review or respond.

Public-page analytics

Public pages use Google Analytics 4 to measure page visits, session statistics, approximate geolocation, browser and device information, and interaction events. Google Analytics uses the request IP address at collection time to derive location information and states that the address is discarded before the data is logged.

The Google tag is not loaded in the private feedback ticket layout. Private ticket URLs and message contents are not intentionally sent to Google Analytics by this site's analytics integration.

Advertising data

Google AdSense connection code is loaded on public pages for site verification and potential ad delivery. No site-authored ad units are currently enabled. The Google script may process an IP address plus browser, device, page, and interaction information; if advertising is enabled, Google and other third-party advertising vendors may also place or read cookies and use web beacons or similar technologies to select, deliver, limit, secure, and measure ads.

Depending on the visitor's region and consent choices, advertising may be personalized using previous visits or interests, or non-personalized using the current page and coarse location. Non-personalized ads can still use cookies or similar storage for frequency capping, aggregated reporting, fraud prevention, and security.

Google explains how it uses information from its partner sites at https://policies.google.com/technologies/partner-sites. Visitors can review or control Google advertising choices at https://adssettings.google.com/ and may also use the controls presented by the site's consent management platform when advertising is enabled. The AdSense script is not loaded in the private feedback ticket layout.

Regional consent

Before personalized or non-personalized advertising is enabled for visitors in the European Economic Area, the United Kingdom, or Switzerland, this site will use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. The consent interface will provide choices to accept, reject, or manage applicable advertising purposes. Until that certified configuration is active, this site will not treat a generic local notice as valid AdSense consent.

Third-party media

Official videos are loaded from their original platform only after a visitor chooses to play them. The external platform then applies its own privacy terms.