HomePrivacy Policy
Privacy · 隐私
What I collect,
and what I don’t.
A short, honest account of the personal data this site touches. There is not much of it, and that is deliberate.
Life Shenzhen combines public pages on Cloudflare Pages with an account and booking dashboard. The dashboard is handled by a Cloudflare Worker, and its account, booking and message records are stored in a Cloudflare D1 database. The site does not sell personal data.
What the dashboard stores
Account data
When you create an account, I store your name, email address, a salted hash of your password, the version and time of the terms you accepted, your account role, and account timestamps such as creation and last login. Your password itself is never stored in readable form.
Booking, message and contact data
When you submit a booking request or message through the dashboard, I store it with the booking in D1. That can include the service or package you chose, your preferred date if supplied, your chosen contact method and contact detail, the description or message you write, a booking reference, status updates, notes shown to you, and timestamps. I use this information to review the request, prepare a quote, communicate with you, and carry out a confirmed engagement.
The dashboard also emails the booking request or message to Giovanni's Life Shenzhen inbox. Cloudflare Email Service handles normal email delivery, and the destination mail provider processes and stores the delivered email under its own privacy terms.
The MVP does not request or provide fields for payment-card, passport or medical data. Do not put any of that information in a booking or message box. If sensitive information is genuinely needed after a scope is agreed, I will arrange a separate appropriate way to handle it and explain what will happen first.
Security records
For login protection and rate limiting, the dashboard temporarily records hashed versions of the email address and IP address used for signup or login, whether the attempt succeeded, the event type, and the time. These security records are deleted after seven days.
Email and other direct contact
If you email or message me outside the dashboard, I hold what you send in that service and use it to answer you and, if you become a client, carry out the work. I do not add enquiries to a mailing list or sell, rent or share contact details for advertising.
Sessions and cookies
The dashboard sets one necessary, host-only session cookie after signup or login. It contains an opaque session token and is marked Secure, HttpOnly and SameSite=Lax. The corresponding session record and anti-forgery token are stored in D1. The session expires after seven days; logging out removes the cookie and ends the server session.
Google Ads measurement
With measurement storage denied, Google may still receive limited cookieless signals containing the denied consent state and basic technical request information; the tag is not permitted to read or write advertising or analytics storage.
Life Shenzhen loads the Google tag for Google Ads account AW-18350134897 on public pages and the dashboard. It starts with advertising, advertising-user-data, advertising-personalisation and analytics storage denied. If you choose “Allow measurement,” Google may use cookies or similar storage to measure whether an advertisement led to a visit or action on the site. Google receives technical information associated with that measurement, which can include the page URL, browser and device information, IP-derived information and advertising click identifiers in the URL. Life Shenzhen uses this for advertising performance and conversion measurement, not to sell your personal data.
Your choice is saved only in this browser under lifeshenzhen:google-consent:v1. Declining keeps those storage permissions denied. You can clear the choice in your browser or reopen the controls here.
Checking this browser’s choice…
Payments
Submitting a booking request does not create a charge, and the MVP dashboard does not collect card or bank credentials. If you later accept a written quote, payment may be arranged separately through PayPal, Wise or Alipay. Those providers process the transaction under their own privacy policies; I receive the confirmation and reconciliation details they make available, not your full payment credentials.
Cloudflare and technical data
Cloudflare serves and protects the site, runs the account and booking functions, hosts the D1 database, and handles dashboard email delivery. In doing so it processes technical request and delivery data such as IP address, browser type, requested page and security or email-routing signals. The weather line on the home and news pages calls the Open-Meteo forecast API from your browser. Some pages embed a map or link to external sites; their own terms apply when you use them.
How long I keep data
Dashboard sessions last no more than seven days, and signup and login security records are deleted after seven days. I keep account, booking and dashboard-message records while your account is active and for as long as reasonably needed to answer or fulfil a request, administer the service, keep necessary accounting records, or resolve a dispute. Copies delivered to an inbox may remain there for the same purposes. I delete or anonymise data when it is no longer needed.
Your choices
You can ask what personal data I hold about you, request a copy or correction, or ask for your account, booking and message data to be deleted by writing to [email protected]. I may retain limited information where reasonably required for legal, accounting, fraud-prevention or dispute purposes, and I will explain that if it applies.
Changes
If this policy changes materially, the date at the top changes with it.