Privacy Policy
This policy explains how MiniCrafts (news.minicrafts.ai, oldnews.minicrafts.ai and the related Android app, the "Service") collects, uses, stores and protects your personal information, and the rights you have. The Service is operated by [Operator name] ("we" or "us"). Contact email: [Contact email].
You can read news and market data without signing in. The personal information described below is involved only when you sign in or use features such as AI summaries or translation.
1. Information we collect
| When | Information | Purpose |
|---|---|---|
| Signing in with Google | Email, name, profile picture and Google account ID | Creating and identifying your account |
| Signing in with an email code | Email address | Sending the code, creating and identifying your account |
| Signed-in devices | Browser and operating system summary, country or region (inferred from the network), sign-in and last activity times | Managing devices and investigating unusual sign-ins |
| Usage quotas | Daily usage counts per feature; when you are not signed in, counts are kept against an irreversible hash of your IP address | Enforcing free quotas and preventing abuse |
| Cloud sync | News language and category filters, watchlist and hidden market items, sidebar state and video summary length | Syncing your settings across devices |
| Selection translation, AI summaries and AI News reports | The text you select and the stories you open | Producing translations, summaries or full reports |
| Consent records | The version of the terms you agreed to and when | Showing that we obtained your consent |
We do not collect phone numbers, identity documents, payment information, precise location or contacts, and we do not use your personal information for advertising or profiling.
2. How we use information
- To sign you in, identify you and keep you signed in;
- To calculate and show daily quotas and to prevent bulk registration and automated abuse;
- To sync settings across your signed-in devices;
- To keep your account secure, for example by listing signed-in devices and signing devices out;
- To handle your requests to access, export, correct or delete your data.
3. Cookies and local storage
pn_session: your sign-in session. It lasts 30 days and renews while you use the Service; it applies to the minicrafts.ai domain so that both news sites share the sign-in.pn_oauth: a security check during Google sign-in that expires after 10 minutes.- Browser local storage: keeps your filters, watchlist and other settings; after you sign in they sync to your account, and signing out removes this device's copy of the account settings.
We do not use advertising cookies or cross-site tracking.
4. Processors and third-party services
| Provider | Information processed | Purpose | Location |
|---|---|---|---|
| Cloudflare, Inc. | All of the information above (stored and in transit) | Website hosting, database, human verification and Workers AI translation | United States and data centers worldwide |
| Google LLC | Account information during Google sign-in | Google sign-in | United States |
| X.AI Corp. (xAI) | News content and the text you select, without account information | AI summaries, translation and AI News reports | United States |
| Resend, Inc. | Your email address and sign-in code | Sending sign-in code emails | United States |
These providers may process the information only on our instructions and for the purposes above.
5. Cross-border transfer of personal information
The Service's servers and the providers listed in section 4 are located outside mainland China. If you use the Service from mainland China and sign in, your account information, signed-in device information, usage records and cloud sync settings are transferred abroad for storage and processing.
- Overseas recipients: the providers listed in section 4; see their websites for contact details;
- Purpose and method: to provide sign-in, quota and sync features, the data is sent over encrypted connections and stored in the recipients' data centers;
- Types of information: the sign-in, quota and sync information listed in section 1;
- Your rights: you can exercise your rights to access, correct and delete your information with us or with the overseas recipients as described in section 8.
We make these transfers only after you separately check the box to agree. If you do not agree, you can still read news and market data without signing in.
6. Retention
| Information | Retention |
|---|---|
| Account profile, cloud sync settings and personal quota settings | Until you delete your account |
| Sign-in sessions | Deleted when they expire (30 days, renewed while in use) |
| Sign-in codes | Expire after 10 minutes; records are deleted within 24 hours |
| Usage records (including IP hashes) | 30 days |
| Admin audit records | 180 days, containing only account IDs and action types |
| Translation cache (no user information) | 30 days |
| Database backups | Expire after at most 30 days |
7. Security
The whole site uses HTTPS; the sign-in cookie is HttpOnly, so scripts cannot read it; the database stores only irreversible digests of session tokens and sign-in codes; the admin console is limited to administrators signed in with Google, and every admin action is recorded in an audit log.
8. Your rights
- Access and export: download your data in your account settings;
- Correction: change your name in your account settings;
- Deletion and withdrawal of consent: delete your account in your account settings, or contact us;
- Managing signed-in devices: sign any device out in your account settings.
For other help, email [Contact email]. We will reply within 15 working days.
9. Children
The Service is intended for adults. Children under 14 may not register; a parent or guardian who finds such an account can contact us to have it deleted.
10. Changes to this policy
We show the version and effective date on this page. For major changes, we will notify you on your next visit and ask for your consent again.
11. Contact us
Operator: [Operator name] · Email: [Contact email]. You can also complain to the personal information protection authority where you live.