Privacy Policy / PRIVACY

Overview

Serein Team ("we", "us" or "our") respects and protects the privacy of its users. This policy explains how we collect, use and protect your personal information when you use serein.ren.

By using our services, you consent to the practices described in this Privacy Policy.

What Information We Collect

We support both GitHub OAuth and Google OAuth for authentication and only collect information provided by the authorized platform during login:

Collected via GitHub OAuth:

• GitHub username — used to identify your account
• GitHub avatar — used to display your profile picture
• GitHub primary email — used to contact you when necessary
• GitHub user ID — used to link accounts internally

Collected via Google OAuth:

• Google Subject Identifier (sub) — used to link accounts internally
• Google display name — used to display your account name
• Google avatar URL — used to display your avatar
• Google email address — used to contact you when necessary

We do not collect the following:

• Passwords — we do not store any passwords; authentication is handled entirely by GitHub or Google
• Browsing history — we do not track your browsing activity on the website
• Device information — we do not collect detailed data such as device models
• Third-party analytics — we do not use Google Analytics, Baidu Tongji, or similar user behavior tracking services

Server access logs: To safeguard the website and troubleshoot issues, the server (Nginx + Cloudflare) automatically records access logs that include each visitor's IP address, time of access and requested path. Such information is used solely for security protection and operational troubleshooting, and is not used to build user profiles. Logs are automatically purged after 30 days.

How We Use the Information

• To create and manage your account
• To display your username and avatar on the website
• To contact you by email when necessary (e.g., notification of service changes)

We will not sell, rent or trade your information with any third party.

Information Storage

Your data is stored on our servers (located in Hong Kong, China). Data is stored using an SQLite database and is accessible only to authorized personnel. We take reasonable technical measures to protect your information.

Third-Party Services and Data Processors

In providing our services, we involve the following third-party data processors. Each processor provides a privacy policy link you can review to understand how it handles data:

• GitHub OAuth (GitHub, Inc.) — Provides GitHub account authentication. GitHub Privacy Statement →
• Google OAuth (Google LLC) — Provides Google account authentication. Google Privacy Policy →
• Cloudflare (Cloudflare, Inc.) — CDN, DDoS protection, reverse proxy. Processes request IP/UA/Referer for security and performance only — not for profiling. Cloudflare Privacy Policy →

Cross-Border Data Transfer

Our servers are in the Hong Kong Special Administrative Region (HKSAR) of China (server IP: 45.207.210.240). Your personal information is processed and stored in Hong Kong regardless of your access location.

Under China's Personal Information Protection Law (PIPL), cross-border transfer is permitted when "necessary for performing a contract between you and our team". Your OAuth login creates a service contract requiring user identification, account management, and security maintenance on our servers.

Hong Kong operates under the Personal Data (Privacy) Ordinance (Cap 486).

Data Controller

The data controller is Serein Team (an independent small team operating the service — not registered as a business entity). Privacy contact: [email protected].

Cookies

We use a single session cookie to maintain your logged-in state. This cookie:

• Contains only a session identifier and no personal information
• Is transmitted over an encrypted HTTPS connection
• Expires automatically 7 days after you close your browser
• Becomes invalid immediately upon sign-out

We do not use tracking cookies or advertising cookies.

Your Rights

• Right of access — You may review the information we hold about you at any time
• Right of deletion — You may request that we delete your account and all related data
• Right of correction — You may request the correction of inaccurate information
• Right to withdraw — You may sign out or revoke your GitHub authorization at any time

To exercise any of the rights above, please contact us at [email protected].

Data Retention

We retain your information only for as long as you have an active account. If you request the deletion of your account, we will delete all related data within 30 days. Session cookies expire within 7 days after you close your browser and become invalid immediately upon sign-out.

Protection of Minors

Our services are intended for general developer users and are not directed at individuals under the age of 14. If you are under 14, please use our services with the consent and guidance of your parent or legal guardian. We do not knowingly collect personal information from minors under 14. If we become aware that we have processed such information without guardian consent, please contact us immediately and we will promptly delete the relevant data.

Changes to This Policy

We may update this Privacy Policy from time to time. In the event of material changes, we will notify you through announcements on the website. Your continued use of the services constitutes acceptance of the updated policy.

Contact Us

If you have any questions about your privacy, please contact: [email protected]