Privacy notice
Privacy, in plain language.
This notice explains the information supwil.com processes, why it is used, and the services involved when you use the public site.
Last updated: August 19, 2026
Information we process
We process only the information needed to operate the site, respond to messages, prevent abuse, and improve reliability. We do not sell personal information or use it for advertising profiles.
| Context | Retention | Data |
|---|---|---|
| Access analytics | 90 days | Page and referral information, coarse location, browser family, and a salted IP hash. |
| AI chat | 30 days | Conversation identifiers, prompts, responses, cited sources, and a salted IP hash. |
| Error monitoring | 14 days | Error scope, diagnostic context, and stack information used to investigate reliability issues. |
Contact forms process the name, email address, optional phone number, subject, and message you submit so we can reply. The application does not persist that form submission; it is delivered through EmailJS, whose retention practices are governed by its own service terms. Browser preferences such as theme, language, tool state, player settings, and a chat session identifier remain in your browser until you clear them.
Services involved
- Vercel hosts the site and serves edge requests.
- MongoDB Atlas stores application data, including access analytics and chat records when those features are enabled.
- OpenAI processes AI chat and article-embedding requests; requests may route through Vercel AI Gateway when configured.
- EmailJS delivers contact-form messages.
- AWS S3 stores site media and administrator uploads.
- YouTube may process information when you choose to play an embedded video.
- Vercel Web Analytics may be enabled for aggregate performance and usage measurement.
Security and retention
Where an IP-derived identifier is needed for analytics or abuse prevention, the application stores a salted, one-way hash rather than the raw IP address. Chat, error, and access records use automatic expiry rules. Contact submissions are validated on the server and protected with same-origin checks, a honeypot field, and rate limits. Administrator sessions use HTTP-only cookies, with Secure and SameSite protections in production.
Your choices
You can avoid using the contact form or AI chat, decline to play embedded media, and clear local preferences through your browser settings. You may also ask about access, correction, or deletion of personal information related to a direct interaction with this site. Requests are assessed under applicable law and the technical limits of the relevant service providers.
Contact
For privacy questions or requests, email huahaoshang2000@gmail.com or use the contact form. This notice describes the public site operated by Wilson Shang.