PRIVACY
Privacy Policy
This policy explains how Spark Radar collects, uses, stores and deletes your personal data, following PIPL and GDPR on the principles of legality, fairness and necessity.
90 天
Contact form
3 天
News window
30 天
Fetch logs
Domestic
No cross-border
1. Data we collect
- Account data: Email (required), phone (optional), plus display name, bio and avatar.
- Contact form: Topic, message body and any contact details you provide. The “website” field is a honeypot — leave it empty.
- News metadata: Public RSS/API metadata — titles, summaries, sources, links — not linked to your identity.
- Service logs: Minimum logs for security and stability. IP/UA are not persisted with submissions or public pages.
2. Purposes
- Provide account, login session and preferences.
- Reply to feedback, submissions and partnership requests via the contact form.
- Display public news summaries with link-out only — no full-text scraping.
- Run security and anti-abuse checks such as rate limiting and honeypot validation.
3. Retention
- Contact submissions: Retained 90 days from submission, then auto-deleted.
- User accounts: Kept while the account exists; removed on deletion along with sessions.
- News metadata: 3-day rolling window in Asia/Shanghai; expired items pruned automatically.
- Fetch logs: fetch_runs retained 30 days.
4. Third-party recipients
- Cloud hosting: Hosted on Tencent Cloud nodes in mainland China, for hosting only.
- Alerting: Bark / ServerChan receive availability alerts only — no personal data.
- Public sources: Fetching public RSS/API sends a site identifier header — never your personal data.
- Except as listed or required by law, we do not sell, rent or share your personal data.
5. Cross-border transfer
Servers and databases run on Tencent Cloud within mainland China — your personal data is not stored abroad or transferred across borders. Overseas model info on /models is a local aggregation of public vendor pages, with none of your personal data.
6. Your rights
- Access and copy: view account info at /account; other data on request.
- Rectification: correct at /account, or ask us to do it.
- Erasure: delete your account anytime; we remove associated data within a reasonable period.
- Withdraw consent: delete your account, stop submitting, or disable cookies.
- You may lodge a complaint with a supervisory authority.
7. Security measures
- Passwords are stored as salted one-way scrypt hashes, never in plaintext.
- Login sessions use signed cookies plus a database re-check.
- Image proxy blocks internal addresses to prevent SSRF.
- Admin routes and endpoints are protected by least-privilege and rate limiting.
8. Changes to this policy
This policy may be updated as the service evolves. Material changes will be highlighted on this page; continued use after an update constitutes acceptance.
9. Contact
For any questions or requests about this policy, reach us via the contact page.