Privacy

This page describes how this site works as built; it will be updated when that changes.

What this site collects

  • There are no user accounts and no sign-up. Merchant email alerts, feedback, the AI assistant and visitor analytics send data (see below).
  • No ads. The production site uses 51.LA visitor analytics with autoTrack enabled; your browser sends visit data to the analytics service.
  • Of our application code only the assistant service sets a cookie (see “AI assistant” below); none of it uses sessionStorage; third-party analytics may use cookies or browser storage. What is kept in your browser (localStorage, on your device only, never sent to us): the egg identifier’s query history (with any “hatched” marks), the Jinies and saved groups of the size compare, the size simulator’s queries, the egg groups page’s filters, which eggs the egg catalog has shown you, your handbook progress ticks, the outfits and avatars you marked as owned, which things the map shows and whether it shows place names, your PVP teams and saved battles, the catch review’s prices and saved reviews, the luck test’s pulls, your home page arrangement, the settings of several merchant alert plans, the ids of the feedback you sent, the assistant’s chat history and liveliness setting, and, once you close it, that the “View in English” bar stays hidden. Clearing the site’s data in your browser deletes all of it. The data api (/api) sets no cookies either: its routes use no session or cookie middleware.
  • Production pages load a third-party analytics script from sdk.51.la and connect to its analytics service, which receives your IP address and related requests. Fonts are served from this site.
  • Anonymous visit statistics: each time a page loads, this site’s own api records the page path, the page language, the website you came from (its domain only, never the full address), the device type (phone, tablet or computer) and an anonymous identifier. The identifier is a hash of your IP address and browser details with a secret key that changes every day, so it differs daily and cannot link you across days; the IP address itself is not stored. When you use a tool (egg identifier, size simulator, size compare, catch review, luck test, battle simulator, saving a PVP team) it also records that the tool was used, only the name of the tool and never what you entered or chose. This counting sets no cookie and uses no browser storage. Raw records are kept for 90 days; after that only daily totals remain, with no personal identifier.

Other hosts your browser contacts

  • Jini, item, skill and trait images: where an image has not been copied to this site, your browser loads it from lk-cdn.lkmerchant.online, the image host of the data source. That host sees your IP address and the image request, as any web host does.
  • Live pages (Merchant, Events): your browser requests current data from this site's api. Image addresses inside that live data are supplied by the data source and can point to other hosts.
  • Some images or icons may be loaded from other third-party hosts named in the data.

The map

The map's images and data are static files served from this site; nothing is sent back from the map.

Traveling-merchant email alerts

  • If you subscribe on the Merchant page, we store your email address, the goods you ticked and the language of the page you subscribed from, and use them only to email you when those goods are on sale.
  • A new address first gets a 3-digit code by email; the code is kept to check it and expires after 10 minutes.
  • The emails are sent from QQ Mail sender accounts, so that mail service handles your address while delivering them.
  • We never sell, rent or share your address, and never use it for anything but these alerts.
  • You can unsubscribe on the Merchant page at any time; the alerts stop at once. The address stays in our records, marked as unsubscribed. An address the mail service reports as rejecting our mail or not existing is unsubscribed automatically.

Feedback

  • When you send feedback we keep what you wrote, the images you added, the contact you gave (optional) and the page language, only to read it and reply.
  • Each message gets a random id kept in your browser, used to fetch the reply under “My feedback”; without it nobody else can see your message. Only the site owner can open the images, in the admin.

AI assistant

  • The assistant page sends what you type, and any screenshots you attach, to our assistant service, which passes them to an AI model (DeepSeek) to write the answer. Do not send anything private in a screenshot.
  • We keep each question, the answer, the tools used and the cost, tied to a random session id kept in your browser and a one-way hash of your IP address (not the address itself), to limit abuse and improve answers. Screenshots themselves are not stored, only that some were sent.
  • The assistant service sets one cookie in your browser (a random id, sent only with the assistant’s own requests and not readable by page scripts) to recognise a returning visitor. Under a one-way hash of that id the server keeps Dafeiyu’s affection for you, her mood, the name you gave her and today’s feeds / pats; if abuse puts her on strike, the strike also applies to a one-way hash of your IP while it lasts. The chat history and the liveliness setting stay in your browser (localStorage) and go with “Clear chat” or by clearing the site’s data; after clearing the cookie she treats you as a new visitor.

The api

  • The Merchant and Events pages send plain requests without credentials or cookies (GET to read data; POST only when you press Subscribe or Unsubscribe); the api answers cross-origin only to the site origin it is configured with.
  • The api fetches each merchant round’s goods from the data source and reads event data from it, and caches answers for a short time (up to a few minutes). Nothing about you is sent to the data source.
  • Apart from the email subscribers (above), the api has no accounts. It keeps the anonymous visit statistics described above, errors, and the delivery of each alert email. Requests are rate-limited per IP address, which the framework counts temporarily.
  • Standard web-server logs may record IP addresses and request paths for both this site and its api. We do not use them for tracking.

Contact