1. Who we are
This website ("The Bell of the Great Wall") offers a paid entertainment service: a randomly selected Eastern philosophy phrase presented as a digital card. This Privacy Policy explains what information we process, why, and your rights under the EU General Data Protection Regulation (GDPR).
2. Data we collect and why
2.1 The question you type (only for your card)
- What: the question you enter on the home page.
- Why: it is printed on your generated card. It is not used for any analysis.
- How long: it is stored only long enough to generate and deliver your card, then deleted. We do not retain questions.
2.2 Payment data (processed by Lemon Squeezy)
- Payments are handled entirely by Lemon Squeezy (Merchant of Record). We never see or store your card number, CVC or full payment details.
- Lemon Squeezy may process your email address, billing address and payment method information to complete the transaction and send a receipt.
- Lemon Squeezy's privacy policy applies to that processing. See https://www.lemonsqueezy.com/privacy.
2.3 Order records
- When a payment succeeds, we store an order record (order id, the randomly selected phrase, and — if provided — your email) to deliver your card and for bookkeeping.
2.4 Technical data
- Web server logs may record your IP address and browser type briefly for security and abuse prevention. These logs are not sold or shared.
3. Cookies and local storage
- This site sets no advertising or tracking cookies.
- We use sessionStorage (temporary, cleared when you close the tab) to carry your question from the home page to the card page.
- We store a local consent flag (localStorage) only to remember whether you accepted the cookie notice. You can clear it at any time in your browser settings.
- Lemon Squeezy's hosted checkout may set its own necessary cookies to run the payment page; those are governed by Lemon Squeezy's privacy policy.
4. Legal bases (GDPR Art. 6)
- Contract (Art. 6(1)(b)): processing needed to deliver the digital card you purchased.
- Legitimate interests (Art. 6(1)(f)): security, abuse prevention and record keeping.
- Consent (Art. 6(1)(a)): where we ask for it, such as the cookie notice.
5. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you;
- Request correction or erasure of your data;
- Object to or restrict processing;
- Data portability;
- Lodge a complaint with your local data protection authority.
Because our service is anonymous by design (questions are not retained and no account exists), in most cases there is no personal data to access. For any privacy request, contact us at the address below.
6. Contact
Privacy requests and questions: privacy@your-domain.com (replace with the real address before launch).