Privacy Policy

What we collect

Account data: your email address, password (stored only as a bcrypt hash, irreversible), and sign-up time.

Nickname: by default the part of your email before the @ sign, shown to owners of dolls you send hearts to.

NFC verification records: time, chip serial number, result, and device type (browser UA digest).

Heart records: your hearts sent to doll profiles and their timestamps.

We use no tracking cookies or analytics scripts; browser local storage only keeps your login token (strictly necessary).

How we use data

Account data is used for authentication and password recovery; verification records for anti-counterfeit checks and security auditing; heart records to show received hearts to the doll owner.

We never sell or share your personal data with third parties; verification emails are delivered via Tencent Cloud SES (data processed in China).

Retention

Account data is kept until you delete your account; verification and heart records are anonymized upon deletion (identity association removed, unidentifiable counts retained).

Your rights (incl. GDPR)

You can change your password or delete your account anytime on the My Account page — deletion is immediate and irreversible.

To request a copy of your personal data or exercise other rights, contact us below; we respond within 30 days.

Contact

Email: support@askindoll.com