Privacy Policy

This website, located at rd.me, is the personal site of Ran Ding. It includes a blog, book summaries, and a few small browser-based tools. This page explains what information may be collected and how it is used.

Information I Collect

• Analytics: I use Google Analytics to understand aggregate traffic and usage patterns. IP addresses are processed by Google. I do not use GA to build personal profiles.
• Affiliate/Widgets: Some travel pages load the GetYourGuide widget, which may set its own cookies and collect usage data to measure performance.
• Contact Flow: If you use the contact form, your name and email are used to send you a verification link. A one-time token is stored in a Supabase table with a short time‑to‑live and is deleted after use. Your final message is delivered to my inbox via Resend and is not published.
• Admin Authentication: Google OAuth via Supabase is implemented for single-user admin access only (me). You cannot create an account on this site.
• Server/Hosting Logs: Vercel may collect standard request logs for security and reliability.

Cookies

• rd-theme: remembers your light/dark theme preference.
• contact_session: a signed, HTTP-only cookie set after you verify your email for the contact form; expires automatically.
• Supabase auth cookies: used only for the private admin session.
• Third-party scripts (e.g., Google Analytics, GetYourGuide) may set their own cookies.

How Your Information Is Used

• Operate and secure the site and contact flow.
• Measure aggregate traffic and content performance.
• Respond to messages you voluntarily send.

Data Sharing

I do not sell your personal information. Limited data is shared with service providers as necessary to run the site:

• Google Analytics (analytics)
• GetYourGuide (widget analytics/affiliate tracking)
• Supabase (database and authentication)
• Resend (transactional email)
• Vercel (hosting)

International Transfers

Services used by this site may process data in the United States and other countries. By using the site, you consent to these transfers.

Your Choices

• Block or delete cookies in your browser settings.
• Use content blockers to restrict analytics.
• Contact me to request deletion of messages you sent via the contact form.

Children

This site is not directed to children under 13, and I do not knowingly collect their data.

Changes

I may update this policy from time to time. Material changes will be reflected on this page with an updated effective date.

Contact

Questions about this policy? Please use the contact form.