Privacy Policy
Controller and Contact
This website is operated by Ziqiang Zhou under the Pinwo name. Data protection requests can be sent to cnotesinfo2024@gmail.com. Full operator information is available on the Legal Notice page.
Data We Process
When you browse the site, we process necessary technical data to deliver pages and protect the service. When you register or sign in, we use Firebase Authentication and store membership data: Firebase user ID, member ID, email address where available, display name, photo URL or selected avatar ID, sign-in provider, guest or signed-in account status, favorites, preferences, email marketing consent state, and coupon redemption history. Contact forms store restaurant name, address, contact person, contact method, and notes. Printed-map QR visits record campaign code, target page, inferred language, referrer origin, browser family, and a salted IP hash.
Purposes and Legal Bases
Member accounts, saved items, coupon redemption, and necessary service communication are processed to provide the service or take pre-contractual steps (GDPR Art. 6(1)(b)). Security, abuse prevention, debugging, QR campaign measurement, and basic traffic analytics are based on our legitimate interests (GDPR Art. 6(1)(f)). Contact form processing is based on your submitted request and our legitimate interests. Optional coupon and event emails are sent only if you consent (GDPR Art. 6(1)(a)); you may withdraw consent at any time.
Third-Party Services and Recipients
We use Google Firebase Authentication, Google Cloud Firestore, Firebase Storage, and Firebase App Check / reCAPTCHA for accounts, data storage, file storage, and abuse prevention; Vercel for hosting and Vercel Analytics for anonymized aggregate usage insights; Google Gemini may be used for internal content generation or translation; restaurant pages may link to Google Maps; the footer links to Instagram and WhatsApp. If you open external links, those platforms process data under their own privacy policies.
Local Storage, Cookies, and Analytics
We may store member or guest state, theme choice, and avatar choice on your device to restore your site experience. We do not use advertising tracking cookies. Vercel Analytics is used for aggregate usage measurement. Firebase App Check / reCAPTCHA may process device and browser signals to verify that requests come from genuine clients and to prevent abuse.
Storage Location and International Transfers
Data may be processed outside the EU/EEA by the service providers we use, especially Google, Firebase, Vercel, Meta/Instagram, WhatsApp, or related services. We rely on the relevant providers' GDPR data processing terms, standard contractual clauses, or other applicable transfer mechanisms.
Retention
QR visit logs are planned for 90-day retention; contact submissions for 180-day retention; guest and member account data is retained until account deletion or the end of the service relationship, except where legal, dispute, security, or operational records are necessary. Coupon redemption records involve users, merchants, and platform operations and may be retained after account deletion to the extent necessary until a separate retention decision is completed.
Your Rights
Where GDPR applies, you may request access, correction, deletion, restriction of processing, and data portability, and you may object to processing based on legitimate interests. Consent-based processing can be withdrawn at any time without affecting processing before withdrawal. You also have the right to lodge a complaint with a competent data protection authority.
Email Marketing Consent
When registering or signing in, you can choose whether to receive Pinwo coupon and event emails. This option is off by default. We store your consent state and update time. You may withdraw consent at any time via cnotesinfo2024@gmail.com; when an email delivery system is launched, each marketing email should also include an unsubscribe method.
Changes
We may update this policy from time to time. The latest version will always be available on this page. If processing changes materially, we will update this page or provide additional notice where reasonable.
Last updated: June 2026