Privacy Policy (draft v0.2, batch 1: username + password)

Effective date: {{EFFECTIVE_DATE}}
Operator: the Xingyun Live operations team (xingyunzhibo.com)

1. Scope.

This policy explains what we collect when you use Xingyun Live (Chinese and English versions), why, how long we keep it, and how to delete it. Browsing, schedules and watching never require an account; an account only syncs your favorites and reminders across devices.

2. What we collect.

• Without an account: favorites and reminders stay in your own browser and are never uploaded. We record anonymous usage events (page views, playback start and errors) tied only to a random visitor ID, with no name, phone number or email.
• With an account: your username (set once, cannot be changed, no public profile page); your password, stored only as an irreversible argon2id hash; a sign-in cookie sent only to account endpoints, with its hash, creation and last-used time and broad browser/OS type stored on our server (no IP address); the favorites and calendar reminders you save; feedback you submit in the site form; and a link between your anonymous visitor ID and a hashed account ID (no username) so we can measure retention for signed-in users and guests separately.
• We do not collect: phone number, birthday, real name, avatar, contacts or precise location. Batch 1 does not collect email.

3. Why.

To sign you in and sync favorites and reminders; to prevent bulk sign-ups and abuse (rate limits by network range, and bot checks where enabled); to measure and improve the site using aggregate data; to handle feedback. We do not sell personal information or use it for ad targeting.

4. How long.

Sign-in sessions expire after 30 days unused (180 days max) and end immediately when you sign out. Favorites are kept until you delete them or your account. Reminder records disappear from your list at kick-off and are purged within 30 days. Feedback: 1 year, unlinked from your account on deletion. Username, password hash and the visitor-account link are deleted 15 days after you delete your account. Anonymous event details: up to 90 days (deduplication records up to 97 days); visitor summaries and aggregate reports: up to 400 days (first-visit summaries up to 400 days after last activity); compressed event archives: up to 365 days.

5. Third parties.

Cloudflare provides delivery, security and bot checks (Turnstile); where bot checks are enabled they run at sign-up, some sign-ins and feedback, and Cloudflare processes your network address and browser information for that purpose; its servers may be outside your country or region. Our servers and database are located in Hong Kong SAR, China (Amazon Web Services Hong Kong region). When email features launch (batch 2) we will use Amazon SES and update this policy. Streams and replays come from third-party sources that handle data under their own rules.

6. Your rights.

Export your data (JSON) from My account; delete favorites and reminders any time; change your password (old password required); delete your account (password required) — you are signed out everywhere and favorites and reminders are deleted immediately and cannot be restored; signing in with your password within 15 days cancels deletion (favorites are not restored); after 15 days the account is permanently deleted and the username released. Batch 1 has no email, so a forgotten password cannot be recovered and we do not reset passwords manually.

7. Children.

Users under 14 should register only with a guardian's consent. Guardians can ask us to delete such an account via the feedback form.

8. Security.

Passwords are hashed, the sign-in cookie is limited to account endpoints, write requests are CSRF-protected, and accounts are separate from our admin system. No system is perfectly secure; we will post a notice on the site if an incident affects you.

9. Contact and changes.

Use the in-site feedback form for any question, including requests to access, correct or delete personal information. This policy is governed by the laws of the Hong Kong SAR. We will show a notice on the site and update the effective date when this policy changes materially.