What we do NOT store
- Your browsing history on this site.
- Raw IP addresses. (We store a salted SHA-256 hash that can't be reversed, used only to deter comment abuse.)
- Files, passwords, or anything private you didn't voluntarily post in a comment.
- Location data.
- Third-party advertising or tracking cookies.
What we store (only when you sign in)
If you choose to sign in with Google or Facebook to comment, we keep:
- Display name — to attach to your comment.
- Email address — visible to moderators only, never shown publicly. Used only to contact you when needed (e.g. if a comment is removed for violation).
- Avatar URL — a link to your image on Google/Facebook. We do not download the image to our servers; if you delete it on the provider, the link breaks naturally.
- Provider subject ID — so we recognise you across sessions and stop spam.
Your comments are public — anyone visiting the site can read them.
Cookies
One sign-in session cookie only (HTTP-only, JWT-encrypted). It only exists after you sign in, and is wiped when you sign out. No advertising cookies, no Google Analytics, no Facebook Pixel.
Analytics
We record aggregate page views (visits/day, which articles are read) — never linked to an individual, no browser fingerprinting.
Your rights
- Delete all comments and associated data — email thanh.xle85@gmail.comand we'll wipe within 7 days.
- Delete a specific comment — email us with the link or quoted text.
- Request a data export— we'll send back everything we have about you as JSON.
Contact
Questions about this policy: thanh.xle85@gmail.com.