Who we are and how to contact us
Operator: Beijing Xinsheng Culture Media Co., Ltd. (北京鑫升文化传媒有限公司), Beijing, China.
Privacy contact: [email protected]. Use the same address for access, correction, deletion or objection requests.
The service is aimed at adults. It is not directed to children; do not create an account if you are under 16.
What we process
Guest browsing: pages, film and event records, and local bookmarks stored in your browser. Local bookmarks are not sent to us unless you choose to merge them after signing in.
Accounts: an email or mainland China phone identity, a keyed identity digest, masked contact display, account ID, session and CSRF cookies, cloud bookmarks, account creation and consent timestamps.
Email and phone verification: the address or number you submit, a one-time code challenge, delivery status and short-lived hashes. We do not store the raw code or a full email address or phone number in the account database.
Submission-kit downloads: account ID, kit ID, kit version and download time. We do not record the raw IP address for this log.
Email waitlist: email address, consent version, confirmation status and timestamps. Waitlist registration is separate from an account and does not start a newsletter or reminder service.
Optional analytics: daily aggregate counts only. The current implementation does not create per-visitor profiles or store raw IP addresses.
Hosting and security: Cloudflare may process IP address, request, routing and device information to deliver the site, prevent abuse and keep it secure.
Cookies and local storage
Account sessions use an HttpOnly session cookie and a CSRF cookie. Local bookmarks use browser storage on your device.
We do not use advertising cookies or sell personal data. The optional aggregate analytics service is operated by us through Cloudflare Pages Functions and D1.
Cloudflare Turnstile is loaded only after you read and tick the relevant consent boxes on a send form. It processes network and browser information to reduce automated abuse. Its loading is not required for ordinary browsing.
Why we process it
To provide the pages, accounts, cloud bookmarks and submission-kit downloads you request.
To authenticate you, prevent fraud and abuse, enforce rate limits and keep the service secure.
To operate the separate waitlist and confirmation flow, where you have explicitly opted in.
To measure aggregate service usage and improve the product, using the optional aggregate analytics described above.
Where consent is required, we rely on your consent; where the processing is necessary to provide the service or secure it, we rely on that necessity and our legitimate interest in operating a safe service.
Processors and international processing
Cloudflare, Inc. provides Pages hosting, Pages Functions, D1, Turnstile and the global network. Cloudflare states that information is mainly stored in the United States and the European Economic Area and may be accessed or transferred in other service regions.
Alibaba Cloud (Aliyun) provides email delivery through DirectMail and, for the Chinese phone flow, SMS verification. The private submission-kit ZIPs are stored in an Alibaba Cloud OSS bucket in Hong Kong with server-side encryption and no public access.
Cloudflare may transfer requests to Alibaba Cloud for email or SMS delivery. Processing is not limited to mainland China and may involve transfers outside your country.
We do not sell personal data. We may disclose information if required by law, to protect rights and safety, or as part of a reorganisation, subject to appropriate safeguards.
Retention
Account sessions last up to 30 days from sign-in unless you sign out earlier. Cloud bookmarks and account records remain until you delete the account or ask us to delete them, subject to security and legal requirements.
Email and phone one-time codes expire after five minutes and have limited attempts. Delivery and rate-limit records expire on a short schedule; rate-limit counters expire within about one day.
Kit-download records are removed when the account is deleted, subject to backup and security retention.
Waitlist records: unconfirmed double opt-in records expire after seven days; confirmation links are valid for 24 hours; confirmed records are kept for 180 days from confirmation unless withdrawn. Older intention-only records are kept for 180 days from registration.
Aggregate analytics keeps daily counts and removes data older than 90 days when a later write triggers cleanup. No scheduled cleanup means an expired aggregate may remain until the next write.
Cloudflare's own logs are retained under its policies and business purposes; we do not promise a single fixed period for provider logs.
Your choices and rights
You can browse as a guest, decline optional analytics, clear local bookmarks in your browser, sign out, and choose whether to merge local bookmarks.
You can request access, correction, export, deletion, restriction or objection, and withdraw consent where processing is based on consent. Use the account settings page or email [email protected].
The full account settings page is currently in Chinese. The English account page covers email sign-in; contact us if you need help with export or deletion.
If you are in the EU/UK, you may also complain to your local supervisory authority. We will respond within a reasonable period and may need to verify control of the relevant mailbox or account.
Deleting an account does not automatically remove a separately submitted waitlist address; withdraw that separately or contact us.
Changes
We will update this notice when the service, processors or legal requirements change. The date at the top shows the latest version. Material changes will be communicated on the site or by email where appropriate.