We collect only the information needed to provide and improve the Service:

• Account information: your email address and display name, provided when you create an account.
• Authentication data: secure session tokens stored in your browser to keep you signed in.
• Subscription data: subscription status and billing period, processed by our payment partner Paddle. We do not see or store your full card details.
• Usage data: anonymous, aggregated analytics about which dishes are viewed, used to improve content.

We use the information we collect to operate the Service, to authenticate your account, to process your subscription, to respond to your enquiries, and to improve the experience for all visitors. We do not sell, rent, or trade your personal information to third parties, and we do not use it for advertising.

To deliver the Service, we rely on a small number of trusted third-party providers. Each is bound by appropriate data protection obligations:

• Supabase — secure hosting of authentication and account data.
• Paddle — payment processing and tax handling for subscriptions.
• Cloudflare Pages — global content delivery and hosting of the website.

The Service uses a small number of strictly necessary cookies to keep you signed in and to remember your preferences. We do not use advertising cookies or third-party tracking cookies. You can disable cookies in your browser settings; however, doing so may affect the functionality of the Service.

We retain your account information for as long as your account remains active. If you delete your account, we will delete or anonymise your personal data within thirty (30) days, except where retention is required for legal, tax, or accounting purposes.

You have the right to access, correct, or delete the personal information we hold about you. You may also withdraw consent or object to processing where applicable. To exercise any of these rights, please contact us using the details on our Contact page. We will respond to all reasonable requests within thirty (30) days.

The Service is intended for users aged sixteen (16) and over. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will promptly remove it.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Material changes will be communicated through the Service or by email where appropriate. We encourage you to review this policy periodically.

Questions, concerns, or requests relating to your privacy are always welcome. Please reach us at chinafoodstory@163.com.