California Privacy Notice (CCPA / CPRA)
This notice supplements our Privacy Policy for California residents. It describes the categories of personal information we collected, the purposes, whether we disclosed them, and your rights under the California Consumer Privacy Act as amended by the California Privacy Rights Act.
1. Notice at collection — categories
| Category (Cal. Civ. Code § 1798.140) | Examples in our service | Sources | Business/commercial purpose | Disclosed for a business purpose to |
|---|---|---|---|---|
| Identifiers | Email address, account ID, IP address in logs | You; your browser | Account creation, service delivery, security, support | Hosting, email, CDN/security, Merchant of Record |
| Customer records (§ 1798.80(e)) | Billing contact details held for a purchase | You; Creem / PayPal | Order fulfilment, invoicing, tax, refunds | Merchant of Record, PayPal (one-time only) |
| Commercial information | Products purchased, subscription status, transaction history | You; our ledger | Entitlement management, accounting, fraud prevention | Merchant of Record, hosting |
| Internet or network activity | Pages viewed, word lookups, reading progress, consent choice, request logs | Your device; our service | Deliver and improve the reading experience, prevent abuse | Hosting, CDN/security |
| Approximate geolocation | Country/region inferred from IP for tax, language and fraud checks | Your IP address | Pricing/tax, localisation, security | Merchant of Record, CDN |
| Audio / visual information | None collected from you (narration audio is generated from our text) | — | — | — |
| Inferences / profiles | Reading-level guidance used to recommend texts; not used for advertising | Your activity | Content recommendations | Not disclosed |
| Sensitive personal information | Account log-in credentials (password stored only as a hash) | You | Authentication and account security only | Hosting |
We retain these categories only as long as described in the Privacy Policy. We do not collect precise geolocation, biometric identifiers, or information about your race, religion, health or union membership.
2. Sale and sharing
We do not sell personal information, and we do not share it for cross-context behavioural advertising. We have not done so in the preceding 12 months, and we do not knowingly sell or share the personal information of consumers under 16. We honour the Global Privacy Control (GPC) signal as an opt-out; because we do not sell or share, no further action is required, but you may still submit a request below.
We do not use or disclose sensitive personal information to infer characteristics about you; it is used only to provide and secure the service, which is a permitted purpose under the CPRA.
3. Your rights
Subject to verification and exceptions, you may request: know/access (categories, specific pieces, sources, purposes and recipients), deletion, correction, opt-out of sale/sharing, limitation of use of sensitive personal information, and freedom from discrimination for exercising a right. We will not deny service, charge a different price or provide a lower quality of service because you exercised a right.
4. How to submit a request
- Email [email protected] with the subject “California Privacy Request”, or use our contact page.
- We will verify your identity in proportion to the request (for example by confirming control of the account email). An authorised agent may submit a request with your written permission and proof of authorisation.
- We confirm receipt within 10 business days and respond within 45 calendar days, with one permitted 45-day extension and notice. Deletion requests are also passed to service providers where required.
5. Other California disclosures
Automatic-renewal disclosures (price, interval, cancellation and reminders) are in the Subscription & Auto-Renewal Terms. Children’s data practices are in the Children’s Privacy Notice. Do-not-track signals other than GPC are described in the Cookie Policy.
6. Contact
[email protected] · Contact & Imprint · Privacy Policy.
MandarinMiles is operated by David Chen, an individual based in mainland China.