Privacy Policy

1. Information We Collect

ONGO (the "Service") can be used without registration. We collect minimal information.

Automatically Collected Information

• Browser fingerprint (hashed, non-identifiable)
• IP address
• Browser type and version
• Operating system information
• Device type (desktop/mobile/tablet)
• Pages visited and access time
• Cookie data

Information You Provide

• Newsletter subscription: email address
• Board/Story posts: nickname, password (hashed)
• Name Art feature: Chinese character name

2. How We Use Your Information

• Track learning progress and XP/level (fingerprint-based)
• Maintain streak (consecutive learning) records
• Analyze and improve service usage
• Send newsletters
• Display advertisements and measure performance
• Prevent misuse

3. Cookies

This Service uses the following types of cookies:

• Essential Cookies: Session management, language preferences, fingerprint storage
• Analytics Cookies: Visitor statistics and service improvement
• Advertising Cookies: Personalized ads through Google AdSense

You may reject cookies through your browser settings, but some features may be limited.

4. Third-Party Advertising (Google AdSense)

This Service displays ads through Google AdSense. Google and third-party ad providers may use cookies to serve relevant ads based on your browsing history.

• Google uses the DART cookie to serve ads based on visits to this site and other sites.
• You can opt out of personalized ads at Google Ads Settings.
• Alternatively, visit aboutads.info to opt out of third-party cookies.

For more information, see Google Advertising Policies.

5. Data Retention

• Visitor logs: automatically deleted after 90 days
• Newsletter emails: retained until unsubscription
• Board/Story data: retained until deletion request
• Learning progress: retained while service is active

6. Third-Party Disclosure

We do not share your personal information with third parties except:

• When required by law
• Essential external services for operation (Google AdSense, Gmail API)

7. Your Rights

• Unsubscribe from newsletter: via email link or direct request
• Delete posts: using your password
• Reject cookies: through browser settings
• Contact us: support@ongo.blog

8. Security Measures

• Password hashing (bcrypt)
• SQL Injection prevention (Prepared Statements)
• XSS prevention (output escaping)
• CSRF token validation
• HTTPS encrypted communication
• Secure session settings (HttpOnly, Secure, SameSite)

9. Contact

For inquiries about personal data processing, please contact us:

• Service: ONGO
• Email: support@ongo.blog
• Website: https://ongo.blog

10. Changes to This Policy

This policy may be updated as laws or service policies change. Any changes will be announced on this page.