Skip to main content
YC.Lin

Privacy Policy

Effective:

This Privacy Policy explains how tkflyc.com and its subdomains (the "Site") handle data. The Site is the personal portfolio and related tools of YC Lin (林郁宸), operated by the owner.

1. The public portfolio (www.tkflyc.com)

  • The public pages are static content. There are no visitor accounts and no collection of visitors' personal data.
  • No analytics, advertising, or tracking cookies of any kind (no Google Analytics, ad pixels, etc.).
  • A single functional cookie may be used only to remember your language preference; it contains no personally identifying information and is not used for tracking.
  • Contact is via the email and social links provided; clicking them sends mail or navigates from your own device — the Site does not store your message.

2. Servers and infrastructure

The Site is self-hosted on a personal device and exposed through the third-party tunnel service ngrok. As with any website, basic technical connection metadata (such as IP address, browser User-Agent, and timestamp) is transiently processed by the infrastructure to deliver the response and prevent abuse (e.g., rate limiting). It is not used to build profiles, sold, or used for marketing.

3. The blog's "tech news"

The blog's tech-news section aggregates headlines and links from third-party sources. Clicking through takes you to the original source, which has its own privacy policy outside the scope of this one.

4. Private admin tools and Google Sign-In (OAuth)

The Site has private administrative tools for the owner's use only, gated by Google Sign-In (OAuth) for access control.

  • Through Google Sign-In we obtain your Google account's basic profile and email address, used solely to verify that you are the authorized owner.
  • If the signed-in email is not on the allow-list (the owner), access is denied and nothing is stored.
  • We do not store, log, share, sell, or transfer this Google user data, and we do not use it for any purpose other than authentication/authorization.
  • The Site's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data retention and security

  • The Site retains no personal data from visitors; blog content is authored by the owner.
  • All public traffic is encrypted with HTTPS/TLS; admin tools have additional access controls (Google Sign-In + an application-layer password).

6. Children's privacy

The Site is not directed at children under 13 and does not knowingly collect their personal data.

7. Changes to this policy

This policy may be updated from time to time; the "Effective date" at the top will be updated when it changes.

8. Contact us

Questions about this policy? Email moerasermax@gmail.com.