About
Privacy policy
How we handle personal data, cookies and your privacy rights under GDPR, UK GDPR, CCPA/CPRA and other laws.
This policy explains how the operator of China Population Atlas handles personal data. Contact details are on the About page. For visitors in the EEA, the UK or Switzerland, the site operator is the data controller for the processing described here.
Data we collect
- Server logs: IP address, user agent, requested URL and timestamp, used for security, abuse prevention and troubleshooting; retained for up to 30 days.
- Aggregate page views: first-party counts of region/page views. No reader account is required; IP addresses used for rate limiting are hashed.
- Newsletter: email address and language preference, only if you choose to subscribe.
- Admin accounts: username, password hash, email and session cookie, only for authorised administrators.
- Browser storage: language, currency, colour theme and consent choices are stored locally in your browser to remember your preferences.
Cookies and consent
Necessary cookies and local storage are used to operate the site and remember your choices. Advertising technologies are loaded only if you accept non-essential cookies (or where the operator has configured a certified consent management platform). You can reject non-essential cookies without losing access to the site. We honour the Global Privacy Control signal where required. See our Cookie Policy for details.
Purposes and legal bases
We process data to operate and secure the site (legitimate interests), to provide aggregate usage statistics (legitimate interests or consent where required), to send requested updates (consent), to serve advertising where enabled (consent), and to comply with legal obligations. Where consent is the basis, you may withdraw it at any time.
Sharing, processors and international transfers
We use hosting, email delivery and, when enabled, Google AdSense as service providers. These providers may process data outside your country, including in the United States, under appropriate safeguards such as Standard Contractual Clauses or the UK International Data Transfer Addendum. We do not sell personal data or share it for cross-context behavioural advertising unless you consent. We may disclose data if required by law or to protect rights and security.
Retention
Server logs are kept for up to 30 days. Aggregate view statistics are kept for up to 24 months. Newsletter records are kept until you unsubscribe or ask for deletion. Admin records are kept while the account is active and for a reasonable period afterwards. Consent records are refreshed periodically.
Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or object to processing, and withdraw consent. California and other US state residents may request to know, delete, correct or opt out of sale/sharing; we do not sell personal data. You may use an authorised agent and will not be discriminated against for exercising rights. Contact us through the details on the About page. You may also complain to your local supervisory authority.
Children
The site is a general-audience statistics reference and is not directed to children under 13 (or under 16 in the EEA where applicable). Do not submit personal data if you are below the applicable age.
Automated decisions and AI
We do not use automated decision-making or profiling that produces legal or similarly significant effects, and we do not use personal data to train AI models.
Changes and contact
We may update this policy to reflect legal or operational changes. The current version is always published here. For privacy requests, use the contact details on the About page.