Privacy Policy
Last updated: 2026-10-06
The YouBimo developer site (developer.youbimo.com) collects open-source projects: browsing the project list and details requires no account, and there are no analytics or ad trackers. Only when you choose to create a YouBimo pass do we store the minimum information needed for sign-in.
Scope
This policy covers the pages we operate on developer.youbimo.com. Pass accounts (sign-up, sign-in, account centre) are provided by the authentication service at uc.youbimo.com, and the information it processes likewise serves sign-in only. This policy explains when and how we process information, and what rights you have.
What we do not collect
We run no analytics, statistics or ad-tracking scripts and use no cross-site tracking cookies. While you browse the project list and details, pages only request project content from our API and never attach or report your identity.
Account information (the pass)
Creating a YouBimo pass is optional — it only provides a signed-in state, and you can browse everything without one. On sign-up we collect a username and email; phone number and display name are optional. Passwords are stored as one-way hashes only — nobody, including us, can see the original. After sign-in, the access token lives in browser memory and is re-issued automatically on reload; the signed-in state itself is maintained by an HttpOnly cookie issued by the server (unreadable by JavaScript) and revoked the moment you sign out.
Sign-in device information
Requests related to sign-in and the account centre carry a randomly generated device identifier (kept in localStorage, not a credential) plus a device description derived from the User-Agent (e.g. "Chrome on Windows"). These exist only so you can recognise your own devices in the account centre; they are not used to identify or track you.
Local storage
The only routine data written to your browser is display preferences: your colour theme (the theme key), font size and weight (the reader-font-size / reader-font-weight keys in localStorage), plus the random device identifier above (yb_device_id). All of it stays on your device and is removed when you clear browser data.
Hosting and network logs
This site is served through Cloudflare, which proxies requests to our origin. To keep the service secure and available, Cloudflare logs standard request information (such as IP address, request time and User-Agent) under its own privacy policy; our server access logs record similar standard request details (IP, time, URL, status code) solely for security and troubleshooting. They are rotated out after a short period and never used for profiling or marketing.
Use and sharing of information
Account information is used only to create your account, verify sign-ins and recover access. We never sell your information, use it for advertising, or share it with unrelated third parties — except where required by law or strictly necessary to provide the core service (such as hosting infrastructure or the authentication service).
Data security
All traffic uses HTTPS, passwords are salted and hashed, and session tokens are short-lived and revocable at any time. We follow data minimisation: if something can work without collecting data, we do not collect it.
Retention and deletion
Account information is kept for as long as your account exists. You can sign out at any time; to delete your account or related data, email us via the contact below and we will process it within a reasonable period and confirm back.
Your rights
Under applicable law (including, but not limited to, the GDPR and personal information protection legislation), you may have the right to access, correct, export or delete your personal data, restrict or object to its processing, and lodge a complaint. To exercise these rights, contact us using the details below.
Children’s privacy
This site is directed at a general audience and we do not knowingly collect personal information from children under 14. If you are a guardian and believe your child has provided us with personal information, contact us and we will delete it promptly.
Changes to this policy
If this policy changes materially, we update the date at the top of this page. For significant changes we will notify you in a more prominent way, such as an on-site announcement.
Contact us
For any questions, requests or complaints about this policy or our handling of personal information, email [email protected]. We usually reply within 7 business days.