曼妮新娘童话小镇Manee Brides Fairy Town
Policy version 2026-10-18

隐私政策

草案，待律师审阅。生效日期：2026-10-18。运营方：曼妮新娘 Manee Brides（下称「我们」）。

1. 我们收集什么

  • 咨询表单：称呼、联系方式、咨询内容、咨询类型、你勾选的同意项，以及经过单向哈希处理的 IP（用于防滥用，无法还原）。
  • 访问统计：我们使用 PostHog 统计页面访问量、来源、设备类型和点击（仅链接与按钮），用于改进网站。我们不开启会话录屏，不采集表单输入内容，并尊重浏览器的「请勿跟踪（DNT）」设置。
  • 错误监控：我们使用 Sentry 收集页面报错信息（浏览器类型、出错代码位置），不包含你的个人身份信息。
  • 人机验证：Cloudflare Turnstile 会处理必要的设备信号来判断是否为机器人。
  • AI 角色对话：开始对话前需要你单独同意。回复由 Cloudflare Workers AI（或日后启用的其他模型服务）生成；我们只保存每条消息约 160 字的脱敏摘要（自动去掉手机号、邮箱、微信号、证件号、链接）、所选角色、地区与时间，不保存完整对话原文；为防滥用会按当天轮换的匿名 IP 哈希限流。
  • 地区显示：我们根据 Cloudflare 提供的国家/地区代码决定展示哪些社交平台，不存储你的 IP。
  • 开放 API / AI agent 接入：小屋主人可以生成只读或读写 API 密钥交给自己的 AI 助手；密钥只以哈希形式保存，可随时吊销，每次调用都会记录审计日志（路由、时间、匿名 IP 哈希）。通过 API 写入的内容只进入人工审核队列，不会自动发布或私信他人。

2. 我们怎么用

仅用于：回复你的咨询；在你单独同意时发送小镇动态；统计和改进网站；安全防护。我们不出售你的个人信息。

3. 存储地点与跨境

咨询数据存储在 Supabase（新加坡区域）；网站由 Cloudflare 全球网络提供；统计数据存储在 PostHog（美国）；错误日志存储在 Sentry（美国）。对于中国境内用户，提交表单即涉及个人信息出境，我们会在表单中单独征求你的同意；不同意的，可通过小红书等站外渠道联系我们。

4. 保存期限

咨询记录在最后一次沟通后保存 24 个月后删除；统计数据按服务商默认期限保存。

5. 你的权利

你可以查阅、更正、导出、删除你的信息，或撤回同意。请通过咨询表单选择「其他」并注明「隐私请求」，我们会在 15 个工作日内处理。

6. 未成年人

本站服务面向成年人，我们不会主动收集未满 14 周岁未成年人的个人信息。

7. 变更

政策更新时我们会更新版本号与生效日期，重大变更会在网站显著位置提示。

Privacy policy

Draft pending legal review. Effective 2026-10-18. Operator: Manee Brides ("we").

1. What we collect

  • Contact form: name, contact details, message, inquiry type, the consents you tick, and a one-way hashed IP for abuse prevention.
  • Analytics: PostHog counts page views, referrers, device types and clicks on links/buttons to improve the site. Session recording is off, form inputs are never captured, and Do Not Track is respected.
  • Error monitoring: Sentry receives page error reports (browser, code location) without personal identifiers.
  • Bot protection: Cloudflare Turnstile processes device signals needed to tell humans from bots.
  • AI character chat: requires your separate consent. Replies are generated by Cloudflare Workers AI (or another model provider we may enable). We keep only a ~160-character redacted summary of each message (phone numbers, emails, messaging IDs, ID numbers and links removed), the character, region and time — never the full transcript. Abuse limits use a daily-rotated anonymous IP hash.
  • Region: we use Cloudflare's country code to choose which social platforms to show; your IP is not stored.
  • Open API / AI agents: cottage owners can create read-only or read-write API keys for their own AI assistants. Keys are stored only as hashes, can be revoked at any time, and every call is audit-logged (route, time, anonymous IP hash). Content written via the API goes to a human review queue and is never auto-published or sent as messages.

2. How we use it

Only to reply to you, send town news if you separately opt in, measure and improve the site, and keep it secure. We do not sell personal data.

3. Where it is stored

Inquiries: Supabase (Singapore). Website: Cloudflare global network. Analytics: PostHog (US). Errors: Sentry (US). For users in mainland China, submitting the form involves cross-border transfer, for which we ask your separate consent.

4. Retention

Inquiry records are deleted 24 months after our last contact; analytics follow provider defaults.

5. Your rights

You may access, correct, export or delete your data, or withdraw consent, via the contact form (choose "Other", mention "privacy request"). We respond within 15 business days. EU/UK residents may also lodge a complaint with their supervisory authority.

6. Children

Our services are for adults; we do not knowingly collect data from children under 14.

7. Changes

We update the version and date when this policy changes and highlight material changes on the site.