Privacy Policy

1. Data controller

This site and the apps described below are developed and operated by XiaoNiuBuNiu, an individual developer, acting as data controller for the limited processing described in this policy. Contact: xiaoniubuniu@gmail.com.

2. What data is processed, and on what legal basis

Legal bases are stated per the EU/UK GDPR; equivalent rights for California residents are covered in section 8.

3. ActionSense (macOS)

ActionSense is free, open-source software. It does not collect, transmit, or store any data outside your Mac:

• No backend, no accounts, no analytics SDKs, no network calls.
• Clipboard content, detection results, and history stay in local storage on your machine and are never uploaded.
• The source code is public at github.com/xiaoyunchengzhu/ActionSense and can be independently audited.

4. BrowserDrop (Android)

BrowserDrop turns your phone into a file server inside your own Wi-Fi network:

• No account or sign-in. The app never asks you to identify yourself.
• Files transfer only over your local network (LAN). They are never uploaded to any server owned by me or anyone else.
• Only the folder you explicitly pick is shared; the app cannot access the rest of your storage.
• During the beta period, the app sends anonymous crash reports (stack trace, device model, OS version) so I can fix crashes. No file content, no advertising or device identifiers, no location. You can stop this simply by uninstalling the app; there is no account to delete.

5. This website & cookies

• The site is statically hosted and sets no first-party cookies or local storage of your activity. Because nothing requires storage consent, the site deliberately shows no cookie banner.
• No advertising or behavioral analytics scripts are loaded, from me or any third party.
• Some outbound links to third-party services are affiliate links. Clicking them means those third parties (e.g. Namecheap, Vultr) may set their own cookies — their privacy policies apply from the moment you leave this site.

6. International data transfers

Website hosting (including Cloudflare's server logs in section 2) and crash-report collection may involve processing outside your country. I rely on the hosting provider's standard safeguards (Cloudflare's data-processing terms and EU model clauses). App data itself is never transferred anywhere — that's the point of local-first.

7. Retention

• Hosting logs: retained per Cloudflare's default policy (typically 24 hours to 30 days for security logs); I do not receive or archive them separately.
• Email correspondence: kept only as long as needed to resolve the conversation, then deleted on request.
• Crash reports: raw reports are deleted once the underlying bug is fixed or after 90 days, whichever comes first.

8. Your rights

Where any of the limited processing above applies to you, you have the right to access, rectify, erase, restrict, or object to processing, and to data portability (GDPR Art. 15–21); California residents have equivalent rights under the CCPA/CPRA to know, delete, and opt out of "sharing" (I do not share personal data, so there is nothing to opt out of). Just email xiaoniubuniu@gmail.com — because I don't build profiles, requests like these are usually settled in one reply.

You also have the right to lodge a complaint with your local data protection supervisory authority (EU/UK), or with the FTC/State Attorney General (US). I'd genuinely prefer you email me first.

9. Children's privacy

My apps are general-purpose utility software, not directed at children, and they collect no personal data from anyone of any age — consistent with COPPA (US), the UK Age Appropriateness Code, and Google Play's Families policies.

10. Security & changes

The architecture is the security story: apps hold nothing server-side, so there is no app database to breach. Hosting is behind Cloudflare with automatic HTTPS.

If any future product or version starts collecting data, this page will be updated (with a new effective date) before that version ships.