This Privacy Policy explains how XinChao.Asia handles information when you visit our website or contact us, and how we use the TikTok, Instagram and Pinterest APIs.
1. Who we are
XinChao.Asia (“we”, “us”, “our”) is a small creative brand behind the cat-and-bear characters Xin and Chao. We run the website xinchao.asia, where we present our designs and link to the products we sell through Amazon Merch on Demand. This policy explains what information we handle, why, and what choices you have.
2. Information we collect
- Information you send us. If you use the contact form we receive your name, email address, the topic and message you write, and optionally your marketplace/country and an order or product reference. We use it only to answer you.
- Technical data. When you visit, our hosting provider (Cloudflare) processes technical data such as your IP address, browser type and requested pages in order to deliver the site and keep it secure.
- Browser storage. The site stores your country choice in your browser (local storage) and may keep a short-lived copy of shop data in session storage to load faster. This stays on your device. We do not use advertising or cross-site tracking cookies.
- Link clicks. When you click a “View on Amazon” button we count the click anonymously (which product, marketplace and page). We do not store your IP address and we do not use cookies for this.
- Approximate location. To preselect the right store for you, the site uses the country derived from your IP address by our hosting provider (or, if that is unavailable, your browser language). We do not store your IP address or precise location, and you can change the country at any time with the flag button in the header.
- Payments. We do not take payments and do not collect payment details. Purchases are completed on Amazon.
3. Social media integrations (TikTok, Instagram, Pinterest)
We connect our own brand accounts to this website through the official APIs of TikTok, Instagram (Meta) and Pinterest, so that our own published posts can appear on our blog. Visitors do not sign in with these platforms and we do not collect data about visitors through them.
- What we access: basic profile information of our own account (display name, profile picture, account ID) and our own published posts (title or caption, thumbnail, date and link to the original post).
- What we do not access: private messages, follower or following lists, other users' personal data, or any data of accounts we do not own or manage.
- How we use it: only to display our posts on the blog with a link back to the original platform. We do not sell it, share it for advertising, or use it for profiling.
- Access tokens: the authorisation tokens we receive are stored encrypted on our server and used only to refresh our posts. They are never shown publicly.
- Control: we can disconnect an account at any time, and the account owner can revoke access in the settings of the respective platform. When a post is deleted on the platform, it is removed from our blog when the feed is next refreshed, or sooner on request.
These integrations follow the terms and policies of each platform, including the TikTok Developer Terms and Privacy Policy, the Meta Platform Terms and the Pinterest Developer Guidelines.
4. How we use information
- To reply to your messages and questions.
- To operate, secure and improve the website.
- To display our own social media posts on our blog.
- To meet legal obligations.
5. Sharing and third parties
We do not sell your personal information. We share it only with service providers that help us run the site, and only as needed:
- Cloudflare for hosting, storage and database services.
- Google Fonts, from which the site loads its fonts; Google receives your IP address when the fonts are requested.
- Amazon, when you click a product link. Amazon then handles your data under its own privacy notice, and our links may carry an affiliate tag so Amazon can attribute a purchase to us.
- TikTok, Instagram, Pinterest and X, when you follow a link to our profiles; their own privacy policies apply there.
We may also disclose information if the law requires it.
6. How long we keep information
We keep contact messages only as long as needed to handle your request and for our records, and then delete them. Access tokens and synced posts are kept while an account is connected and removed when it is disconnected.
7. Your rights and choices
Depending on where you live (for example in the EEA, the UK or California), you may have the right to access, correct or delete your personal information, to object to or restrict its use, and to withdraw consent. To use these rights, contact us using the details below. You can also clear the data stored by this site in your browser at any time.
8. Data deletion
To have information we hold about you deleted, send us a request with the subject “Data deletion” using the contact details below, from the email address you used with us. We will confirm and delete it, except where we must keep it by law.
Because we only access our own social media accounts, we do not hold personal data of TikTok, Instagram or Pinterest users. If you believe we hold such data, tell us and we will remove it. Account owners can also remove our access directly: TikTok (Settings and privacy → Security & permissions → Apps and services), Instagram (Settings → Apps and websites) and Pinterest (Settings → Apps).
9. Children
The website is not directed to children under 13 (or under 16 where the law sets a higher age) and we do not knowingly collect their personal information. If you think a child has sent us data, contact us and we will delete it.
10. Security and international processing
We use HTTPS and encrypt stored access tokens. No system is perfectly secure, but we take reasonable measures to protect information. Our providers operate globally, so information may be processed in countries other than yours.
11. Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. Continued use of the site after an update means you accept the new version.
12. Contact
XinChao.Asia
Email: our contact form
Website: xinchao.asia