Privacy Policy

What stays in your browser

The trip, the addresses you save, your dietary restrictions and the last menu you had read are kept in this browser’s local storage. They are not uploaded to an account and they are not synced to another device.

• The trip. The answers you give on each step, including nationality, travel dates and passport validity dates — but never a passport number, a scan or a photograph of any document.
• The address book. For each address, the short name you gave it, the Chinese text, the English text and the Amap result it was chosen from.
• Your dietary restrictions and allergies. These are yours and they are the most sensitive thing on this site, which is why they stay here.
• The last menu reading. The dish lines, so the food card and the cards still work with no signal.
• An offline copy of pages you have opened. The service worker keeps them on the device so the cards open without a network.

You can clear all of it from your browser’s settings. The account page also lists what this browser is keeping. Signing out and signing in as someone else points the app at that account’s own storage keys, so two people sharing one phone do not see each other’s trip.

What we hold on a server

An account is optional, and every tool on the site works without one. If you create an account, we hold:

• Your email address, which is where the sign-in codes and links are sent.
• An internal account id and the date the account was created.
• If you sign in with one of the providers offered on the sign-in page, we receive the identity that provider returns for you — typically your name, email address and profile picture URL. We never receive your password, and there is no password of ours to store: sign-in is a code sent to your email, or one of those providers.

Deleting your account from the account page deletes the account and everything attached to it on the server, and the copies this browser kept under that account’s keys. Your browser’s own book of addresses and the device-level trip are the phone’s, not the account’s, and stay until you clear them.

What is sent to other services, and why

Amap (AutoNavi)

The words you type into an address search, and the coordinates of a place you pick, are sent to Amap from our server so it can return the Chinese address. Amap does not see your account or your email. A map drawn on a card or in the address sheet is a different road: your browser loads the Amap library and the map tiles straight from Amap, which means Amap sees your IP address and the part of the map you are looking at. Pressing a map link opens Amap’s own site, and Amap’s policy applies from there.

Volcengine Ark (Doubao), for reading and translating

A photograph of a menu you choose to have read, and the text you ask us to translate, are sent to Volcengine’s model service through our server. The photograph is held in Volcengine object storage only while it is being read and is deleted as soon as the reading finishes. The reading — the dish names — is cached in our database for up to seven days, keyed by a hash of the photograph. A reading is also kept for up to two years under a signature of the menu itself, the dish names and prices it printed, so that the same menu photographed by someone else is not read again; that row names no account and no device either.

Supabase, for the account and these tables

The account, the menu readings and the failure reports described on this page are rows in a Supabase project, which is also the service that sends and checks sign-in codes. It holds what we ask it to hold and nothing else, and the public key the browser uses cannot read those tables.

Volcengine speech, for the microphone on a card

When you press the microphone, that recording is sent through our server to be turned into text. It is not stored.

The entry check

The six answers it asks for are sent to our server, which computes the result and returns it. They are not written to a database, and they are not in our error reports.

Our host and our email

The site runs on Vercel, which keeps short-lived request logs. Vercel Web Analytics counts page views by path only: the query string is removed before a view is sent, so a restriction shown in a link never reaches it. There are no analytics cookies and no advertising pixels. Sign-in emails are delivered by Resend, which sees the address they are sent to.

The sign-in providers

Only if you choose to sign in with one of them. Their own privacy policies then apply to what they do on their side.

We do not sell your data, and we do not share it for advertising. The services above are processors: they handle it to do the job described and for nothing else.

When a page fails

A page that breaks sends us the kind of failure, the path of the page, and the place in our code the error came from. It deliberately does not send the query string, anything you typed, or who you are. These reports are kept for six months.

Cookies and local storage

• The session cookie (sb-…-auth-token) exists only when you are signed in. It is how the site knows the session is yours. A session too large for one cookie is split across sb-…-auth-token.0, sb-…-auth-token.1, and so on.
• The language cookie (chinaclear_lang) remembers whether you chose English or 简体中文.
• A sign-in cookie while a sign-in is in progress (sb-…-auth-token-code-verifier) exists only while a sign-in is in progress — it is how the browser that finishes the sign-in proves it is the one that started it. It is cleared when the sign-in completes.

Everything else is the local storage described above. There are no advertising or third-party tracking cookies, which is why there is no consent banner: every cookie above exists only to make the site work.

How long things are kept

• A menu reading waiting to be collected: ten minutes.
• A menu reading kept for the same photograph: seven days.
• A reading kept for the same menu, by its dish names and prices: up to two years.
• Error reports: six months.
• An account: until you delete it.
• Anything in your browser: until you clear it.

Your choices

Use the site without an account. Sign out at any time. Delete the account and its server-side data from the account page. Clear everything this browser holds from your browser’s settings. Ask us a question about any of it at the address below, including a copy or a correction of what we hold about you.

Children

The site is for adults planning a trip. It is not directed at children, and if an account has been created for someone under 13, write to us and it will be deleted.

Changes to this policy

When what the site does changes, this page changes with it and the date at the top moves. The Terms of Service describe what the site is and is not.

Contact

Write to kongh08@gmail.com. Please do not send passport numbers, medical records or payment card details by email.