Xiandai stores the name, username, email address, password hash, submissions, votes, and session identifiers required to operate an account. Passwords are processed with PBKDF2 and are not stored in plain text.
Uploaded project logos are stored in Cloudflare R2. Directory records and account data are stored in Cloudflare D1. Cloudflare processes network requests for security and delivery.
If you join the weekly digest, Xiandai stores your email address, consent time, subscription status, and signup source. Subscriber addresses are visible only to administrators and are exported only for sending the requested directory digest. We do not add account emails to the digest automatically.
We use Google Analytics to understand aggregate website traffic and PostHog to understand page visits and product usage. These services may process device, browser, approximate location, referral, and interaction data and may use cookies or similar browser storage. PostHog session recording is disabled, and anonymous visitors do not receive PostHog person profiles.
You can limit analytics through browser privacy controls, including Do Not Track where supported, and by blocking or deleting cookies and site data. Google explains its data practices in its privacy policy, and PostHog explains its practices in its privacy notice.
We do not sell personal information. Every digest includes an unsubscribe path once delivery begins. To request account or subscription deletion or correction, contact contact@xiand.ai.