About your data
No ads, no third-party analytics. Here is exactly what stays behind.
Email me ↗
Sign-in
You can sign in with Google, X or GitHub. I receive your name, avatar, email and which platform you used — enough to show your account, record likes and tell signed-in visits apart. No emails, nothing passed on.
Page views
Each page view records the path, language, referrer, a random visitor ID, the IP address and the country / region / city inferred from it. The visitor ID is a random string kept in your browser: it tells a returning visitor from a new one without revealing who you are, and works even when signed out. Visit rows are deleted after 90 days and the IP-to-location cache after 60 days.
Cookies & local storage
Signing in writes one session cookie that expires in 7 days, the language switch remembers your choice, and the random visitor ID lives in browser local storage. Clearing browser data gives you a new visitor ID. No ad cookies, no cross-site tracking.
Third-party content
Posts may link to other sites or embed YouTube and Bilibili players. External links show a warning first; playing an embedded video sends one request to that platform under its own terms.
Removing it
Signing out clears the session. To remove likes, your profile or visit records, email me and I will delete them by hand.
Membership and invitation codes
Members-only posts require an invitation code. A code is a 6-character, case-sensitive random string, valid for 7 days and single-use. On redemption we store which account used which code — no passwords or payment data. For non-members the server sends only the permitted preview; locked text never reaches your browser.