Skip to main content
Spark RadarSpark every idea

Privacy Policy

This policy explains how Spark Radar collects, uses, stores and deletes your personal data, following PIPL and GDPR on the principles of legality, fairness and necessity.

90 天

Contact form

3 天

News window

30 天

Fetch logs

Domestic

No cross-border

1. Data we collect

  • Account data: Email (required), phone (optional), plus display name, bio and avatar.
  • Contact form: Topic, message body and any contact details you provide. The “website” field is a honeypot — leave it empty.
  • News metadata: Public RSS/API metadata — titles, summaries, sources, links — not linked to your identity.
  • Service logs: Minimum logs for security and stability. IP/UA are not persisted with submissions or public pages.

2. Purposes

  • Provide account, login session and preferences.
  • Reply to feedback, submissions and partnership requests via the contact form.
  • Display public news summaries with link-out only — no full-text scraping.
  • Run security and anti-abuse checks such as rate limiting and honeypot validation.

3. Retention

  • Contact submissions: Retained 90 days from submission, then auto-deleted.
  • User accounts: Kept while the account exists; removed on deletion along with sessions.
  • News metadata: 3-day rolling window in Asia/Shanghai; expired items pruned automatically.
  • Fetch logs: fetch_runs retained 30 days.

4. Third-party recipients

  • Cloud hosting: Hosted on Tencent Cloud nodes in mainland China, for hosting only.
  • Alerting: Bark / ServerChan receive availability alerts only — no personal data.
  • Public sources: Fetching public RSS/API sends a site identifier header — never your personal data.
  • Except as listed or required by law, we do not sell, rent or share your personal data.

5. Cross-border transfer

Servers and databases run on Tencent Cloud within mainland China — your personal data is not stored abroad or transferred across borders.

6. Your rights

  • Access and copy: view account info at /account; other data on request.
  • Rectification: correct at /account, or ask us to do it.
  • Erasure: delete your account anytime; we remove associated data within a reasonable period.
  • Withdraw consent: delete your account, stop submitting, or disable cookies.
  • You may lodge a complaint with a supervisory authority.

7. Security measures

  • Passwords are stored as salted one-way scrypt hashes, never in plaintext.
  • Login sessions use signed cookies plus a database re-check.
  • Image proxy blocks internal addresses to prevent SSRF.
  • Admin routes and endpoints are protected by least-privilege and rate limiting.

8. Changes to this policy

This policy may be updated as the service evolves. Material changes will be highlighted on this page; continued use after an update constitutes acceptance.

9. Contact

For any questions or requests about this policy, reach us via the contact page.