Privacy Policy - Davin Chong

1. Introduction 1. 引言

Welcome to DavinChong.com. This Privacy Policy outlines how we handle data across the main domain and all associated sub-domains (including the admin dashboard at it.DavinChong.com). We respect your privacy and employ privacy-by-design principles. 欢迎访问 DavinChong.com。本隐私政策概述了我们如何处理主域名及其所有子域名（包括控制台后台 it.DavinChong.com）的数据。我们尊重您的隐私，并采用隐私保护设计（Privacy-by-Design）原则。

2. Information We Collect 2. 我们收集的信息

We generally do not collect personally identifiable information from regular visitors. However, we automatically collect basic network traffic data (e.g., IP addresses, browser types, timestamps) via our security provider (Cloudflare) to prevent DDoS attacks and abuse. If you use our Contact Form, we will collect your Name, Email, and Message solely for the purpose of responding to your inquiry. Admin dashboard users will have authentication data (email, passwords, biometrics/WebAuthn) securely managed by Supabase, and specific system actions (e.g., adding links, updating profiles) are recorded in internal Activity Logs for security auditing. 通常情况下，我们不会向普通访客收集个人身份信息。但是，为了防止 DDoS 攻击和恶意滥用，我们会通过安全服务商 (Cloudflare) 自动收集基本的网络流量数据（例如：IP 地址、浏览器类型、时间戳）。如果您使用我们的联系表单，我们将收集您的姓名、电子邮件和留言内容，该数据仅用于回复您的咨询。后台管理用户的身份验证数据（电子邮件、密码、生物识别/WebAuthn）由 Supabase 进行安全托管，以及特定的系统操作（如添加链接、更新资料）将被记录在内部的活动日志 (Activity Logs) 中，用于安全审计。

3. Cookies & Local Storage 3. Cookie 与本地存储 (Local Storage)

This Site utilizes `localStorage` within your browser to save non-sensitive UI preferences, such as your selected Theme (Light/Dark) and Language (EN/ZH). We do not use tracking cookies for marketing or advertising purposes. Security cookies may be deployed by Cloudflare and Supabase strictly for session management and bot mitigation. 本站利用您浏览器中的本地存储 (`localStorage`) 来保存非敏感的界面偏好设置，例如您选择的主题（明/暗）和语言（英文/中文）。我们绝不使用追踪 Cookie 进行营销或广告推广。安全 Cookie 可能由 Cloudflare 和 Supabase 部署，严格仅用于会话管理和防止机器人攻击。

4. Content & WebSocket Real-Time Data 4. 内容与 WebSocket 实时数据

Our website utilizes WebSocket technology to provide real-time, zero-refresh updates for our blog and insights section. Data fetched from our cloud database is strictly for displaying content. This connection does not monitor, track, or profile your reading habits or personal device data. 我们的网站利用 WebSocket 技术为博客和文章区域提供实时、无刷新的更新。从云端数据库调取的数据严格仅用于向前台展示文章内容。该实时连接机制绝不会监控、追踪或描绘您的阅读习惯或个人设备数据。

5. Privacy of Local Web Tools 5. 本地网络工具隐私说明

All utility tools provided on the site (including but not limited to the Password Generator, QR/Barcode Generators, Extract Color, Lucky Draw, and Service Links Library) process data entirely locally via client-side JavaScript. We do not upload, store, monitor, or transmit any of your inputs, generated passwords, or uploaded images to our servers. 本站上提供的所有实用工具（包括但不限于密码生成器、二维码/条形码生成器、颜色提取器、幸运抽奖以及服务链接库）均通过客户端 JavaScript 完全在您的本地浏览器内处理数据。我们绝对不会将您的任何输入内容、生成的密码或上传的图片发送、存储或监控至我们的服务器。

6. Third-Party Service Providers 6. 第三方服务提供商

We employ trusted third-party services to operate the Site effectively, including Cloudflare (DNS/Security), Supabase (Database & Auth), and hosting providers. These providers have their own strict privacy policies compliant with international data standards. 我们聘请受信任的第三方服务来有效运营本站，包括 Cloudflare (DNS/网络安全)、Supabase (数据库与身份验证) 以及托管服务商。这些提供商拥有各自严格且符合国际数据标准的隐私政策。

7. Governing Law & Data Protection 7. 管辖法律与数据保护

This Privacy Policy is governed by the laws of Malaysia and complies with the principles of the Personal Data Protection Act 2010 (PDPA). By submitting any contact queries, you consent to the processing of your data as outlined herein. 本隐私政策受马来西亚法律管辖，并严格遵循马来西亚《2010年个人数据保护法》(PDPA) 的原则。当您提交任何联系查询时，即表示您同意我们按照本文所述处理您的数据。

Questions about your privacy or data deletion requests? 对隐私政策有疑问或需要请求删除数据？ davinchong@davinchong.com