Privacy

You do not sign in, and you do not give a name or an email address.

• Page views are counted by two separate systems, so the two numbers will not match exactly.
• One is Vercel Web Analytics. It does not use cookies. Each page view is counted, including when you move to another page inside the site. Country, device, browser, and where you came from are worked out by Vercel. The detailed report is only for the site owner.
• The other is our own daily total: how many times pages were opened, and about how many different people that was. A person is recognised by a hash of the IP address, the browser string, the day, and a server secret. The same IP address and the same browser count as one person on the same UTC day. A new day starts at 8:00 in the morning, Hong Kong time. The raw IP address and browser string are not stored. The hash is deleted after about two days. The daily totals are kept. Obvious automated visits are left out of this total.
• Visits made while the owner is signed in are not included in this total.
• Vercel Speed Insights also measures how fast pages open. It is not advertising.
• The site has no likes, no comments, and no accounts for friends, so a friend's name, comment text, or email address is not stored.
• The photographs, titles, descriptions, and captions in an album are uploaded by the owner. A visitor does not type them in.

We do not use cookies to follow you around. Vercel Web Analytics does not use cookies either.

Choosing Chinese or English does not set a cookie. The language is the page address. English pages live under /en.

• tj_pref stores only the colour you pick with the theme control. It is a session cookie: there is no expiry date, and it goes away when you close the browser. It is not httpOnly, so the page can apply that colour before the first paint. SameSite is Lax. On https it is also marked Secure. The value is a colour name only. It is not written to the database, and it is not a sign-in. Choosing the site colour again removes it.
• tj_color is set only when the owner has set the site colour to Random and you have not already chosen a colour in tj_pref. The browser remembers one colour name for this visit, so the home page, the album, and the photograph stay the same colour. It is a session cookie, not httpOnly, with SameSite Lax, and Secure on https. The value is a colour name from that random set, not who you are. A fixed site colour does not set it.
• tj_visit_theme is an older colour cookie. If the browser still has it, the site deletes it.
• tj_session exists only after the owner signs in. It is httpOnly, so page scripts cannot read it. SameSite is Lax, and it is Secure in production. It remembers that sign-in for 30 days. Looking at photographs does not set it.
• The site's own view count does not set a cookie. A person in that total is the hash described above, not a cookie.

This is a personal album, not an advertising site.

• There are no ads, and no ad trackers.
• We do not sell your data, and we do not hand it to advertisers.
• The pages do not include a Facebook pixel or any other social-network tracking pixel.
• If you share a link in WhatsApp or Instagram, that app reads the public title and preview image. That is a share preview, not a tracker we installed.

The site itself is hosted on Vercel. In production, photograph files are stored in Vercel Blob.

Album data, including titles, captions, and which photograph belongs to which album, is stored in Neon's PostgreSQL. The install notes say production is usually placed on the US East Coast, next to the website.

A backup runs once a night, around 03:17 Hong Kong time, and it can also be started by hand.

• Text and database content is backed up nightly to a private GitHub repository. Each run copies the whole database. A new version is saved only when the data has changed. Every earlier version stays in version control. There is no rotation, and no window that deletes them after 30 days. That repository is not a public web page. Each new database version is also copied to the off-site store used for photographs.
• Photographs are backed up off-site to Backblaze B2, in the EU, in a different region from the website and the database. Only new or changed photographs are uploaded. Each uploaded version has a 90-day deletion lock. The backup key can write and read, and it cannot delete. Files already in the backup are not deleted, including photographs removed from the live site.

Some albums do not appear on the home page. Anyone with the link can view them, still with no sign-in.

• These albums are left out of the sitemap, and search engines are asked not to index them.
• A link can be forwarded. Link-only is not a lock for very private photographs. Anyone who knows a photograph's address can still open that image.

There are no likes or comments to remove. If you would like a photograph taken out of public view, or you have another privacy question, contact the owner: contact@dickycheng.online