Privacy Policy
Last updated: 2026-10-191Information We Collect
To provide a better service experience, we may collect your information in the following scenarios:
| Scenario | Information collected | Purpose |
|---|---|---|
| Account registration | Username, email, password (stored as salted hash) | Account creation, authentication, password recovery |
| Profile | Nickname, avatar, homepage link (optional) | Personalized display of your homepage |
| Using the service | The websites, articles, notebook content and categories you add | Providing bookmark and management features |
| VIP orders | Payment platform, amount, trailing order digits (no full payment credentials) | Reviewing and granting VIP benefits, accounting and after-sales verification |
| Login & access | Login time, IP address, browser information | Security audit, abnormal-login detection |
| Feedback | The email and feedback content you provide | Replying to your questions and suggestions |
| Cookies | Login state, theme preference, language setting | Remembering your preferences |
We do not collect: sensitive personal information unrelated to the service, such as your real name, ID number, bank card number or geolocation.
2Use of Information
The information we collect is used only for the following purposes:
- Providing the service: core features such as website navigation, bookmark management and the notebook
- Account security: verifying identity, detecting and preventing fraud, abuse and other security risks
- Service notices: sending important account-related notices (e.g. password reset, security alerts)
- Product improvement: analyzing anonymized usage data to improve features and experience (never linked to personal identity)
- Customer support: handling your feedback, bug reports and service requests
- Legal compliance: cooperating with lawful investigations by competent authorities when required by law
We will not send you marketing or spam emails, and will not use your personal information for purposes not stated in this policy.
3Storage & Protection
We adopt industry-accepted security measures to protect your personal information:
- Password security: all passwords are stored with bcrypt/Argon2 salted hashing — we cannot view your plaintext password
- Encrypted transport: site-wide HTTPS/SSL to prevent eavesdropping or tampering in transit
- Access control: strict admin permission management; only necessary administrators can access user data, and all access is logged
- Data backup: regular encrypted backups to prevent data loss from hardware failure
- Vulnerability protection: parameterized queries against SQL injection, output escaping against XSS, CSRF tokens against cross-site request forgery
- Server security: regular security patches, firewall and intrusion detection
Despite reasonable security measures, no internet environment is 100% secure. If you discover a personal information leak, notify us immediately so we can handle it promptly.
4Cookies & Local Storage
This site uses cookies and browser local storage (localStorage) to improve your experience:
- Essential cookies: remember your login state (session) and CSRF security token; partially expire when the browser closes
- Preference cookies: record your theme (light/dark), language and homepage mode, valid for 1 year
- Local storage (localStorage): the page background image URL and search engine preference in the settings panel are stored only in your browser, never uploaded to the server
- Cookies we do NOT use: no cross-site tracking, no ad targeting, no sharing with third-party advertisers
You can manage or clear cookies via browser settings, but after clearing, some features (such as remembered login state and theme preference) may need to be set again.
5Sharing & Disclosure
We will not sell, rent or trade your personal information to any third party. Your information may be shared only in the following circumstances:
- With your explicit consent: with your prior explicit authorization
- Required by law: pursuant to laws and regulations, judicial orders or lawful requests from competent authorities
- Protecting legitimate rights: disclosure necessary within the scope permitted by law to protect the rights, property or safety of this site, its users or the public
- Emergencies: to protect personal safety in an emergency
- Business changes: in the event of a merger, acquisition or asset transfer, your information may be transferred to the successor entity, which remains bound by this privacy policy
6Data Retention
6.1 Your account data (bookmarks, articles, notes) is retained for as long as your account exists.
6.2 If you actively delete your account, we will delete or anonymize your personal data within 30 days, unless otherwise required by law.
6.3 Server logs (IP address, access time, etc.) are kept for security analysis for no more than 90 days and then automatically cleared.
6.4 Data of banned accounts is retained as necessary evidence to prevent repeat violations.
7Your Rights
As a user, you have the following rights over your personal information:
- Access: view your profile and collected content on your personal homepage at any time
- Correction: modify your nickname, avatar, personal links and more in profile settings
- Deletion: delete your collected content, or contact an administrator to close your account and delete your personal data
- Export: VIP users can export their website bookmarks as a bookmark file (HTML)
- Withdraw consent: withdraw consent to this policy by clearing cookies and ceasing to use this site
To exercise these rights or for any privacy question, email us at wsy24mh@163.com — we will reply within 15 business days.
8Protection of Minors
8.1 This site is intended primarily for adult users. If you are a minor under 14, please read this policy and use this service under the guidance of a guardian.
8.2 We do not actively collect personal information from minors. If a guardian discovers that a minor has provided personal information without consent, contact us and we will delete the relevant data promptly.
9Third-Party Services
This site may contain links to third-party websites or embed third-party services (e.g. icon library CDN, font CDN). These third parties have their own independent privacy policies, and we are not responsible for their practices:
- External links: clicking through takes you to a third-party website whose information collection is not governed by this policy
- CDN services: used to load static resources (CSS/JS/fonts); they may log IP visits but do not involve personal identity information
We recommend reading the privacy policy of any website you visit after leaving this site.
10Updates to This Policy
10.1 We may update this privacy policy from time to time. Updated versions will be published on this page with the update date shown at the top.
10.2 For material changes (e.g. collecting new types of data or adding data recipients), we will notify you via site announcement or email.
10.3 Continued use of this site after a policy update constitutes acceptance of the updated policy.
We recommend reviewing this page periodically for the latest privacy policy.
11Contact Us
If you have any questions, comments or complaints about this privacy policy, contact us:
- Owner email: wsy24mh@163.com
- Website: https://www.quzhan.top
We will reply and handle your request within 15 business days.