Last updated: 2026
The Traditional Chinese version is the binding text; this page is a reference translation.There is one policy, and it is written in Traditional Chinese. Where the two read differently, the Chinese wording is the one that applies.Read the Traditional Chinese version.
This page is about what we do with your personal data. It is short, because we collect very little — little enough to list field by field. Every sentence below matches a field that really exists in the system. There is no “we may collect various kinds of information” here, leaving ourselves room.
Listed item by item, not as examples. This is all of it.
When you sign in with Google, Google tells us exactly one thing:your verified email address. We do not get your name, your profile picture, your contacts or anything else from your Google account.
The email address is the only identifier we use to recognise you — what you have bought and whether your subscription is active all hang off it.
An order holds: your email address, which product it was, the transaction reference Stripe gave us, the time of delivery, the number of delivery retries, and the time it was created.
A subscription holds: the subscription and customer references Stripe gave us, your email address, the subscription status, the end of the current period, and the times it was created and last updated.
Once you sign in, your browser receives a credential that stands for “signed in”, valid for 7 days; after that you sign in again. It has exactly one purpose: so that you do not have to sign in every time you come back.
Mail you send to [email protected] stays in our mailbox — the same as any other email. We use it to reply to you, and not for anything else.
This section is a statement of fact too, not a posture: the things below haveno corresponding field in our database. It is not “we promise not to look” — there is simply nowhere to put them.
Payment goes through a checkout page hosted by Stripe — the card number is entered into Stripe directly, never passes through our servers, and we never see it at any point. What we receive is a transaction reference from Stripe and whether the payment succeeded.
What we sell is downloadable files. Nothing is shipped physically, so we do not need these and have not asked you for them. Billing details, where they exist, are kept by Stripe under its own policy.
This site hasno website analytics and no advertising tracker installed — no Google Analytics, no Facebook pixel, no third-party tracking code of any kind. We do not do cross-site tracking, and we do not sell your data to anyone or use it to target advertising.
You can check this: there is no such code in the source of the pages on this site. The day we install one, this section has to change — leaving it as it stands would be a false statement.
One, to recognise who you are, so that you can download what you have bought. Two, to handle payment, renewal and refunds. Three, to send you delivery emails and the service notices we have to send.
We do not send marketing email you did not ask for.
The sign-in credential: 7 days, then it expires by itself.
Order and subscription records: kept — they are at once proof of the transaction, an accounting record, and the basis on which we decide whether you are entitled to download. If you ask us to delete them, see “Your rights” below.
Data is held on access-controlled servers and is encrypted in transit throughout (HTTPS). We will not claim to be “completely secure” — no online service can do that. What we can say is this: we keep very little, and the most sensitive item of all, your card number, we simply do not have.
We use a handful of outside services to run the business at all. Below, each one is listed with what it gets — listing company names alone is not a disclosure. Each of these services has its own privacy policy, which applies to the data it holds.
| Service | What it is used for | What it receives |
|---|---|---|
| Stripe | Payments and subscription management | Your email address, payment method and billing details — you enter these directly into the checkout page Stripe hosts, and they do not pass through our servers. |
| Sign-in (Sign in with Google) | When you choose to sign in with Google, Google tells us your verified email address. We do not thereby get your Google account password or your contacts. | |
| Resend | Sending delivery and notification emails | The recipient email address and the contents of the message (delivery links, subscription notices). |
| Cloudflare | Domain proxying and traffic protection | Technical connection data (IP address, browser headers) — this is what happens on any website that sits behind a CDN, and we do not keep those logs separately. |
| DigitalOcean | Server and database hosting | The order and subscription records described on this page physically sit on machines here. |
We do not sell, rent or trade your personal data. Disclosure to anyone beyond those listed above would happen only where the law requires us to disclose it (a valid court order, for example).
You can ask us to list the data we hold about you, and you can ask us to correct anything that is wrong. Write to [email protected] and we will reply within a reasonable time.
You can ask us to delete your data. We will do it, but two things have to be clear first:
One, once it is deleted wecan no longer tell what you have bought, and you will not be able to download purchased content from us again. Two, transaction records may have to be kept to the minimum extent necessary for accounting or statutory obligations — where that is the case, we will tell you in our reply exactly what was kept and why.
Delivery emails and billing notices are the mail we have to send to perform the contract, and they go out for as long as the subscription exists. You can stop them by cancelling the subscription (how to cancel is in theTerms of Service).
We operate from Hong Kong, and the handling of personal data is governed by thePersonal Data (Privacy) Ordinance. If you have a question or a complaint, write to [email protected] first; you also keep the right to complain to the Office of the Privacy Commissioner for Personal Data in Hong Kong, and this page does not exclude that route.
If a change means westart collecting a new category of data, we will notify existing subscribers by email before it takes effect — we will not change it quietly and leave it at that.