Privacy Policy
Version date: November 10, 2026
Applicable website: demin (domain: demin.men).
Operator and data controller for processing covered by this policy: Zhu Xingwang, an individual operator. Support and privacy contact email: [email protected].
1. Scope
This policy describes data handling on demin. Supabase provides email registration, verification, password sign-in and password reset. Online payment, automatic delivery, product-account email retrieval and subscription fulfillment are not yet available. Third-party processes described in product information do not mean this website collects that account information or establish that a third party automatically destroys it.
The website is publicly hosted on Cloudflare Pages and uses Cloudflare DNS and HTTPS. Public access involves the infrastructure processing described in Section 4. Supabase processes authentication and associated logs. Historical browser records and billing details you choose to save remain in this browser.
2. Data currently processed and why
Browsing and interface actions
Your browser requests the on-site files needed to display pages. Product selections, quantities, filters and interface inputs support current-page interactions. The published application has no integrated advertising tracking, additional third-party traffic analytics or analytics SDK; infrastructure processing is described in Section 4.
Real sign-in and authentication
Email registration, verification, password sign-in and password reset use Supabase. Email and password authentication requests are sent directly over HTTPS to this site's Supabase project. Supabase processes account emails, password authentication, verification status, sessions and related authentication and security logs, which may include IP addresses, timestamps and request information. The project region is Sydney, Australia; actual infrastructure processing depends on the provider's configuration. See the Supabase Privacy Policy. This application does not write entered passwords to application logs or order records or forward them to the reference website.
The browser retains authentication sessions for page refresh and same-origin synchronization. Password recovery uses separate session storage; open the reset link in the browser that requested it. Email confirmation remains enabled. Verification and reset messages may be affected by delivery-service or mailbox restrictions. An accepted request does not prove delivery. Google sign-in is unavailable.
Product selections and historical browser records
Session storage retains selected products and quantities to restore them after sign-in. Historical browser records may contain product names and identifiers, quantities, unit prices, currencies, totals, references, times and status. Those records remain unchanged, are not assigned to new accounts or treated as business orders, and are not uploaded to a cloud order backend. The current purchase action does not create additional records.
Historical browser records do not establish payment or fulfillment and do not synchronize across devices. Someone with direct access to the browser’s site storage may read them. Avoid saving sensitive information on shared devices. Do not put payment-card details, third-party passwords, verification codes or 2FA secrets in forms.
Invoice drafts and exported files
If you use the Invoice draft tool, the name, email address, tax identifier, address and invoice contents you enter are used for in-browser calculations and printing. Corresponding billing details are saved in the current browser only if you select the option to remember them. Exported or printed PDFs are handled by your browser and device. Clearing website data does not delete downloaded files. A draft does not establish official invoicing or payment.
Support and copying
“Copy WeChat ID”, “Copy WhatsApp account” and “Copy email address” request permission to write the public support identifier to your clipboard. This feature does not read clipboard contents. If you open Telegram or independently contact the store using WeChat or WhatsApp, the relevant platform and the store receive the messages, identifiers and attachments you choose to send. Their respective data practices apply.
For support, provide only what is necessary, such as an order reference, time of the problem and a redacted screenshot. Do not send passwords, verification codes, 2FA secrets or session keys. The store should not request unrelated personal information for an ordinary support issue.
3. Browser storage, retention and deletion
The website uses browser storage for Supabase authentication sessions, historical browser records and billing information you choose to remember. Session storage holds pending product selections and password-reset state. The application does not actively set identity or advertising-tracking cookies. Browser storage and cookies are different mechanisms.
Browser storage generally persists until you clear the site data or the browser removes it. No mechanism automatically destroys all data when a task finishes. Session storage follows browser management and restoration rules; closing a window does not guarantee permanent deletion. Signing out clears the browser authentication session, but does not delete the Supabase account, authentication records, historical browser records, remembered billing details or downloaded files.
To remove stored records, clear site data for the relevant address in browser settings. This removes the authentication session, historical browser records and remembered billing information for that address. Record anything you want to retain first. Each address has separate storage. Delete unwanted exported files separately.
The store cannot remotely remove records that exist only in your browser on another device. For Supabase account and authentication information, or information already sent to support, you may contact the store to request access, correction or deletion. The scope depends on what is actually held, verification of the request and records that must legally be retained. This policy does not invent a fixed deletion deadline.
4. Servers, hosting and network records
This website publicly serves its pages and static resources through Cloudflare Pages and uses Cloudflare DNS and HTTPS transport. When a browser requests pages and resources, Cloudflare, as an infrastructure provider, processes the IP address, URL, request time and browser-related request information needed to deliver content, operate the network and provide security protection.
The published application and deployment package do not configure additional custom access logs, analytics SDKs, CAPTCHA or payment services. This does not exclude Cloudflare infrastructure metrics, network error reporting or security records. Supabase processes authentication and associated logs; historical browser records and billing details remain in the browser.
Cloudflare may process requests across its global network. Its specific data processing and retention are governed by its public privacy policy and the actual configuration. This policy does not promise an unverified fixed retention period or guarantee that logs are never written to storage.
The hosting service supplies pages and static resources; the browser sends authentication requests directly to Supabase. Devices, browsers and public infrastructure may retain network or error information.
5. Third-party websites and sensitive information
Product instructions may link to subscription services, email services, browser extensions, 2FA conversion tools or a provider's subscription-management page. These are independently operated. Once you open one, its operator may receive your IP address, browser information and anything you choose to submit, subject to its actual practices and policies. Merely displaying a link does not automatically submit historical browser records or account information to that site.
Passwords, 2FA seeds and session keys may allow another person to access an account. Do not enter working credentials into an untrusted page or extension. Statements in product instructions that information is used only for temporary verification or destroyed when a task finishes were supplied by the processing provider; demin has not verified that provider's backend. They are not a guarantee by demin that third parties retain no data.
The website has no online-payment data flow, does not collect full bank-card details and has no integrated payment provider. Before introducing payment, account delivery or another feature requiring personal information, necessary fields, purposes, recipients, retention rules and choices must be explained. This policy is not blanket authorization for future collection.
6. Security, choices and changes
Avoid saving personal billing information on shared devices. Sign out and clear site data when appropriate. Do not place passwords or account credentials in orders, historical browser records or invoice drafts. No protection guarantees absolute security. If something appears wrong, stop submitting sensitive information and contact support.
Depending on applicable law, you may have rights to information, access and a copy, rectification, erasure, restriction, portability, objection and withdrawal of consent, as well as a right to complain to the competent data protection authority. Explain your request through the contact channels below. Requests must be handled subject to the conditions and deadlines of applicable law. Withdrawing consent does not affect processing lawfully carried out beforehand. Manage browser-only records as explained in Section 3; the store does not claim it can retrieve data it does not hold or remotely delete browser records. Marketing messages, the sale of data for advertising and advertising tracking are not currently integrated. Before adding those uses, they must be disclosed and legally required choices and opt-out methods provided.
This policy will be revised, with an updated version date, as actual features change. New purposes, recipients or processing practices must be explained before implementation, and any legally required authorization obtained. Reading this policy does not replace a necessary choice or consent.
7. Contact
Support and privacy contact email: [email protected].
For privacy or data questions, contact Telegram @demin18, WhatsApp @yingladin or WeChat deminnb. Specify the website address and type of data involved. Use redacted information initially; do not include passwords, verification codes, 2FA secrets or session keys in messages.
For services, product-specific warranties and refunds, see the Terms of Service.