Legal Document

Privacy Policy

Privacy Policy

Last updated: 8 May 2025 · Applies to: xuanyin.org and all Xuanyin subdomains

Xuanyin respects and protects your privacy. This policy explains what information we collect when you use the Xuanyin platform, how we use it, how we protect it, and your rights over your data. Our principles: collect only what is necessary, never sell data, never process beyond the scope described in this policy.

01 Data Controller

Xuanyin is the data controller for this platform, responsible for deciding what personal data is collected and how it is processed.

  • Platform name

    玄隐 · Xuanyin

  • Website

    xuanyin.org

  • Privacy contact email

    privacy@xuanyin.org

02 Data We Collect

We collect only data you actively provide, plus the minimum technical data necessary for the platform to function.

We do not collect: location data, device fingerprints, social media account information, payment information, or any tracking data related to your content consumption behavior.

  • Email address

    Provided when you subscribe to the Hidden Newsletter or complete the join form. Used to deliver subscription content.

  • Contact form content

    When you submit a contact form, includes name, email, contact type, and message body. Used solely to respond to your request.

  • Preferences

    Language preference (Chinese/English) stored in your browser's localStorage — never transmitted to servers.

  • Visit statistics

    The visitor counter uses localStorage for local counting and does not collect IP addresses or device identifiers. We may use privacy-friendly analytics (such as Plausible) that collect no personal information to track page views.

03 How We Use Your Data

We will not use your personal data for: automated decision-making, user profiling, targeted advertising, or any processing beyond the purposes stated above.

  • Send the Hidden Newsletter: Your email is used to deliver the weekly newsletter you subscribed to, and important notifications directly related to the subscription (such as policy changes).
  • Respond to contact requests: Contact form information is used solely to respond to your specific request and is not used for any other purpose after the matter is resolved.
  • Improve the platform: We use aggregated, non-personally-identifiable visit statistics to understand which content users find valuable, in order to improve content quality.

04 Legal Basis for Processing

  • Email subscription

    Consent — you actively provide your email and submit the subscription form. You can withdraw consent at any time by unsubscribing, after which we stop processing your email for newsletter delivery.

  • Contact responses

    Legitimate Interest — responding to contact you have initiated is necessary communication that both parties reasonably expect.

  • Visit statistics

    Legitimate Interest — understanding content popularity to improve the platform, using data that contains no personal identifiers.

05 Data Sharing & Transfers

We do not sell or rent your personal data. We may share data with third parties only in the following limited circumstances:

Where we transfer data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place (such as Standard Contractual Clauses). See our GDPR Notice for details.

  • Email delivery service providers (such as Mailchimp, Resend, etc.): limited to what is necessary to deliver the Hidden Newsletter. These providers are bound by data processing agreements and may not use your data for other purposes.
  • Legal requirements: When required by applicable law, court order, or government authority, we may disclose necessary information, but will notify you in advance where legally permitted.

06 Cookies & Local Storage

Xuanyin does not use tracking cookies and does not place third-party advertising cookies. We use browser localStorage to save the following information on your device — it is never transmitted to servers:

You can clear localStorage data at any time through your browser settings. After clearing, the language preference will reset to the default (Chinese).

  • xuanyin-lang

    Your chosen interface language (Chinese / English). Used to remember your language preference on next visit.

  • xy_total_v2 etc.

    Local cumulative values for the footer visitor counter (numeric only). This data stays in your browser and is never sent to us.

07 Data Retention

  • Subscription email

    Retained until you unsubscribe. After unsubscribing, your email will be removed from the active list within 30 days and cleared from backups within a reasonable period.

  • Contact form data

    After resolving your request, we will delete related records within 12 months (unless there is an ongoing business relationship or legal requirement to retain).

  • Local storage

    Stored on your device until you actively clear it or uninstall the browser. We cannot remotely clear this data.

08 Your Rights

Under applicable data protection law, you have the following rights over your personal data:

To exercise any of these rights, send an email to privacy@xuanyin.org stating the type of request. We will respond within 30 days (or within any period required by law). Exercising these rights is free of charge.

  • Right to be informed

    Know how we process your data.

  • Right of access

    Obtain a copy of data we hold about you.

  • Right to rectification

    Request correction of inaccurate data.

  • Right to erasure

    Request deletion of your data in certain circumstances.

  • Right to restrict processing

    Request restriction of processing in certain circumstances.

  • Right to data portability

    Receive your data in a machine-readable format.

  • Right to object

    Object to processing based on legitimate interests.

  • Withdraw consent

    Withdraw any consent you have given at any time.

09 Data Security

We implement appropriate technical and organizational measures to protect your personal data, including: HTTPS encrypted transmission, access controls (only authorized personnel can access the mailing list), and use of security-certified third-party service providers.

In the event of a data security incident that may affect your interests, we will report to the relevant regulatory authority as required by applicable law and notify affected users where necessary.

10 Children's Privacy

The Xuanyin platform is intended for users aged 16 and above. We do not knowingly collect personal data from persons under 16. If you believe we have inadvertently collected data from a minor, please contact privacy@xuanyin.org and we will delete the relevant data promptly.

11 Policy Changes

We may update this Privacy Policy from time to time. For material changes (such as new types of data collection or new purposes), we will notify you by: posting a prominent notice on the website; and, if you are subscribed to the Hidden Newsletter, by email notification in advance.

The updated policy will show the effective date at the top of this page. Continued use of the platform constitutes acceptance of the updated policy.

12 Contact Us

For any questions or comments about this Privacy Policy, or to exercise your data rights, please contact us through:

  • Privacy matters

    privacy@xuanyin.org

  • General contact

    hello@xuanyin.org

  • Response time

    Usually 5–10 business days

Version: 8 May 2025