Privacy policy

1. Information we process

• Account details: email, a random account ID, a salted one-way password hash and creation time, stored in the server database.
• Login status: a signed session token containing account ID, email and expiry, valid for up to 30 days, in an HttpOnly, Secure, SameSite=Lax cookie.
• Security data: IP address and basic request information used for login/registration rate limiting, troubleshooting and infrastructure security logs. These reside in short-lived application memory and hosting logs.
• Local activity: age confirmation, browsing and search history, likes, favorites, follows and local comments, stored in your browser's localStorage. These features do not automatically upload that data.
• Analytics: an anonymous visitor ID, site domain, page path, referring page and basic device/browser information; episode start, completion and playback errors; and character/placement labels for chat entry links. Query strings and URL fragments are removed before sending. Chat text and form inputs are not collected. Data is stored in browser localStorage and PostHog's US region.

We currently do not request real names, identity documents, payment details, precise location or address books. Do not submit sensitive personal information in comments, search fields or public third-party communities.

2. Purposes and legal bases

• Create accounts, authenticate login and provide features you request;
• Save on-site preferences, playback progress and interaction state;
• Understand page visits and navigation to improve pages;
• Prevent abuse, protect accounts and services, and troubleshoot;
• Meet applicable legal obligations and handle privacy, copyright and safety reports.

Depending on local law, legal bases may include performing our service agreement, legitimate interests in service security, your consent and legal obligations.

3. Cookies and local storage

The hg_session cookie is necessary for login and lasts up to 30 days. Age confirmation, on-site activity and the anonymous analytics ID use localStorage. You can clear on-site activity in the account area. Age confirmation and analytics IDs remain until you clear browser data or the browser removes them. We do not set advertising cookies or analytics cookies.

4. Sharing, third parties and international processing

Cloud hosting and database infrastructure providers may process data needed to operate the service under contracts, security measures and applicable law. PostHog processes the anonymous visit and interaction events described above in its US region; automatic click capture, heatmaps, session recordings and person profiles are disabled.

Your browser accesses Telegram, X, Instagram or TikTok only when you click an identified link, or Google when you choose to leave at the age gate. Those third parties independently determine how they process data. We may also disclose limited information when required by law or necessary to protect users or respond to lawful rights requests. Processing may occur outside your country or region.

5. Retention

• Account details: until deletion, or a shorter or longer period necessary for security, disputes or legal obligations.
• Login cookie: up to 30 days, invalidated earlier on sign-out or account deletion.
• Application rate-limit records: usually about one minute, only in running memory.
• Local activity: retained by your browser until you clear it.
• Analytics events: according to the PostHog project's retention settings.
• Infrastructure logs and backups: according to providers' security and rotation schedules.

6. Choices and rights

• Use the account area (Simplified Chinese) to view your login email, sign out, clear local activity or delete your server account.
• Clear cookies and localStorage through browser settings; you will need to confirm your age and sign in again.
• Where applicable, request access, correction, deletion, restriction, objection to processing or a portable copy.
• Withdraw consent where processing relies on it. Withdrawal does not affect the lawfulness of earlier processing.

Submit privacy requests through Contact. To prevent impersonation, we may require necessary verification through your active session or registered email.

7. Security and minors

Passwords use random salts and scrypt one-way hashing. Production login cookies use Secure and HttpOnly. No measure guarantees absolute security; use a unique password. This service is not intended for anyone under 18. Contact us immediately if a minor's information has been submitted; we will investigate and delete it.

8. Updates

When features, providers or legal requirements change, we will update this policy and the date above. Changes that significantly affect your rights will be communicated in a manner proportionate to their impact.