Privacy Policy
Know what data is processed today and what would change at launch.
隐私政策
了解当前信息处理情况及未来正式上线的变化。
1. Who controls personal information?
The site is a demo. Before it takes orders, the Chinese company that operates the service must disclose its registered identity, address, and privacy contact. Proposed operator: [REGISTERED CHINESE COMPANY]. Proposed privacy contact: [PRIVACY EMAIL]. The volunteer who assembled the static website is not intended to be the merchant or controller of future checkout data, but actual responsibilities depend on contracts and real operations.
2. Current demo: what data is involved?
The demo runs as static files, uses no registration form and has no application database or checkout. The chosen English/Chinese language is saved in your browser's localStorage. The gift preview exists in memory only while the page is open and is not transmitted to the site's own application server. Standard hosting and network infrastructure may nonetheless process IP addresses, browser/device metadata, request times and security logs to deliver and secure the site; the operator must verify the hosting provider's actual practices and document them before launch.
3. What changes if paid checkout launches?
The operator must update this policy before collecting data. A live implementation may need contact information, billing and order details, recipient selection, payment status, fraud signals, customer support messages, fulfillment records and legal/tax logs. Payment card numbers should be collected by an authorized hosted payment provider, not by website code. The company must disclose purposes, legal bases, categories, providers, retention periods and user rights.
4. Vendors and transfers
Possible services include website hosting, email support, payment processors, anti-fraud services and order systems. No such checkout processor is connected in this demo. If personal information of people in China is transferred to another country or region, applicable PIPL cross-border requirements, notices, legal mechanism and separate consent where required must be addressed. Operating on Cloudflare Pages or with PayPal does not itself establish compliance.
5. User rights and security
Subject to applicable law, individuals can request access, correction, deletion, explanation and other rights concerning their personal information via the operator's published privacy contact. The operator must implement access controls, appropriate data minimization, secure transport, restricted retention, backups and breach response procedures. This demo sets no marketing cookies or third-party tracking scripts. Infrastructure cookies/logs, if any, depend on the eventual host's configuration.
6. Retention and children
Live-service retention periods must be based on actual processing purposes and applicable recordkeeping law, not indefinite storage. Current language preference remains on your device until you clear it. No paid services for people under 18 are intended. The operating company must implement legally appropriate procedures for suspected minors' information and transactions.
Official references
1. 个人信息处理者是谁？
本网站目前为演示版。正式接受订单前，中国运营公司必须公示注册主体、地址及隐私联系方式。拟定运营公司：[中国注册公司名称]；隐私联系邮箱：[隐私邮箱]。无偿协助制作静态网页的个人不拟担任将来付款交易的商户或数据控制主体，但实际责任仍应以合同和真实运营行为为准。
2. 目前演示版处理哪些信息？
本站为静态页面，不提供账号注册，也无应用订单数据库或支付功能。用户选择的中英文语言偏好保存在浏览器 localStorage。礼物预览数据仅在页面打开期间留存于内存中，不会提交到网站应用后台。但标准网站托管与网络基础设施仍可能处理 IP 地址、浏览器及设备信息、请求时间及安全日志，运营方在上线前应核实并如实说明服务商实际处理情况。
3. 未来如开放付款会怎样？
开始收集真实支付数据之前必须更新本政策。届时可能涉及联系信息、订单及账单信息、礼物接收对象、支付状态、风险防控信息、客服通信及法律税务记录。银行卡号应由获授权的支付机构托管页面处理，不应由本站代码直接收集。运营方应明确告知处理目的、依据、信息类别、第三方、保存期限及用户权利。
4. 服务提供商和跨境传输
未来可能涉及网站托管、客服邮箱、支付机构、反欺诈及订单系统。当前演示版没有连接任何付款服务商。若将境内个人信息提供给境外接收方，应根据《个人信息保护法》落实对应的出境要求、告知、法定机制及需要时的单独同意。使用 Cloudflare Pages 或 PayPal 本身不代表已经合规。
5. 用户权利与安全
在适用法律规定范围内，用户可通过公开的隐私联系渠道申请查阅、更正、删除个人信息或行使其他权利。运营方应采取权限控制、最小化收集、安全传输、合理保存、安全备份及事件响应措施。本演示版不自行设置营销 Cookie，也没有加载第三方追踪脚本；未来托管服务本身可能使用的 Cookie/日志需要以实际配置为准。
6. 保存期限与未成年人
正式业务的数据保存期限应依据处理目的和法定留存义务确定，不能无限期保留。当前语言偏好一直保存在本机，直至用户清理。计划中的付费服务不向18岁以下用户开放。运营公司应建立涉嫌未成年人个人信息及付款的合规处理机制。