MY MOMENTS

My Moments Privacy Policy

For the My Moments website and Chrome extension

Version 1.1 | Effective date: 6 November 2026 | Last updated: 7 November 2026

1. Who is responsible for your data

My Moments is operated by an individual developer ("we", "us" or "our"). For the purposes of this policy, we are the data controller of the relevant personal data. Questions, requests or complaints can be sent to mymomentsrecord@gmail.com.

For the purposes of this policy, "we" means the operator responsible for determining the purposes and means of processing personal data for My Moments.

2. Scope of this policy

This policy applies to the My Moments website and Chrome extension. Third-party websites and the Chrome Web Store have their own privacy policies and are not governed by this policy.

This policy describes our current data practices. If the law of another jurisdiction gives you additional rights, we will handle them under applicable law.

3. What data we collect

We process the following categories of data:

• Account data: email address, password hash, private display name, system-generated member_code, interface language, and account creation/update times. Passwords are handled by Better Auth using a one-way hash; we do not store or see plaintext passwords.

The Service currently offers email + password sign-in only; no third-party social login is enabled. If we add one, we will update this policy before collecting the related data.

• Login and session data: login session, bearer token in the extension, and technical data needed to keep you signed in.
• Diary content: emotions, body sensations, events, desires, dates, times and intensity values you enter. Diary data on the website and Chrome extension is stored primarily in your browser's localStorage and chrome.storage.local, separated by account. When you sign in with cloud sync available, an AES-256-GCM encrypted snapshot is synced to our server. The server stores only ciphertext, a nonce and an update time, and cannot read diary content. The sync key is derived from your login password on your device and held in the browser's sessionStorage and/or a local IndexedDB key store; it is not sent to the server.

If you forget your login password or the sync key is cleared, the synced ciphertext may be impossible to unlock; we cannot recover it for you.

• Extension settings: full site URL, interface language, reminder switch and times, and the My Moments site permission you choose to grant.
• Exports: CSV or Excel files downloaded in Settings are packaged as an AES-256 encrypted ZIP on your device. The extraction password is your login password; we never receive or store that password. If you change your login password, older exports remain protected by the password used when they were created.
• Technical and security data: our website server and platform providers may log IP address, browser type, time, request path, errors and security events to provide, protect and troubleshoot the Service.
• Communications: questions, feedback or support messages you email to us.

We do not use advertising trackers, behavioural profiling or sell data.

3.1 Voluntariness of data

Apart from information required to create and maintain an account (such as your email address, password and account identifiers), providing personal data is voluntary.

You may choose whether to provide a private display name, language preference and self-observation records. Not providing optional data will not affect the basic functions of the Service.

If you do not provide the information required to create an account and verify your identity, we may be unable to provide registration, sign-in and related account services.

4. How we use data

• create and manage accounts, authenticate logins and maintain sessions;
• store, display, import and export your records on your device;
• synchronise records between the website and Chrome extension when you request it;
• provide daily reminders, interface language and settings;
• respond to enquiries, provide support and handle deletion requests;
• protect the Service, prevent abuse, debug and maintain operations;
• comply with legal, regulatory or law-enforcement requirements, and establish, exercise or defend legal rights.

Our legal bases (where applicable) include performance of our contract with you, your consent, our legitimate interests (such as service security and improvement), and legal obligations. You may withdraw consent at any time, without affecting processing before withdrawal.

5. Cookies and local storage

The website uses a necessary login session cookie so you remain signed in after reloading. We do not use advertising or cross-site tracking cookies.

We use Cloudflare Web Analytics to understand aggregate website usage. It does not use advertising or cross-site tracking cookies and is not used to identify individual users. Cloudflare may process technical information such as the page visited, referring page, browser and device type, approximate country and performance data. We use this information only for aggregate statistics, security and service improvement.

The website uses localStorage for interface language, account-scoped records and temporary state. The Chrome extension uses chrome.storage.sync for settings and chrome.storage.local for login tokens and records. You can clear this data in your browser or extension settings.

5.1 Session cookie settings

The login session cookie uses Secure, HttpOnly and SameSite=Lax settings. It is used only to keep you signed in, not for advertising or cross-site tracking. IP address and User-Agent may appear in login records or server logs and are retained only for a reasonable period.

6. Sharing and third parties

We do not sell, rent or trade your personal data. We share only what is necessary in the following circumstances:

• website hosting, database, authentication and technical service providers that operate the Service;
• the Chrome Web Store and browser providers, for distributing and operating the extension;
• professional advisers, auditors, insurers, or law-enforcement authorities where required by law;
• a merger, acquisition or transfer of assets, subject to the recipient continuing to comply with this policy.

Third-party providers may be located outside Hong Kong. We take reasonable steps to require them to protect your data in accordance with applicable law and contracts.

6.1 Service providers and cross-border processing

We use Cloudflare Pages and Cloudflare Web Analytics for website hosting, content delivery and aggregate usage statistics, Neon/PostgreSQL for the account database, and the Chrome Web Store to distribute the extension. Encrypted sync snapshots are also stored in Neon/PostgreSQL as ciphertext only. These providers may process account data, technical logs or service-operation data, but should not access plaintext diary content on your device.

Because we use third-party cloud services, your account data and technical data may be stored or processed outside Hong Kong. We take reasonable steps under applicable law and our contracts with providers to protect that data.

We do not sell, rent or trade your personal data.

7. International transfers

Our service providers may process account and technical data in other jurisdictions. Where a cross-border transfer is involved, we take reasonable safeguards required by applicable law. Diary content primarily remains on your device.

8. Retention

We retain account data until you ask us to delete your account, or until the account is deleted for legal, security or service-termination reasons. Technical and security logs are kept only for a reasonable period.

Diary data on the website and extension remains on your device until you clear it in Settings, clear browser data, remove the extension or delete your account; deleting your account does not automatically clear local records.

We may retain limited backups and records for legal, security or recovery purposes; deleted data may remain in backups for a reasonable period.

8.1 Account deletion and backups

After you request deletion of your account, we will delete or anonymise account data and any encrypted sync snapshot on our server within a reasonable period, except where retention is required or permitted by law.

For technical backups, security and recovery purposes, deleted data may remain in backups for a limited period. We restrict its use and handle it under our retention procedures.

Expired sessions are invalidated by the system, and server logs are kept only for a reasonable period.

9. Security

We use reasonable technical and organisational measures, including HTTPS transmission, password hashing, access controls and provider security measures. No internet transmission or electronic storage is completely secure; you must protect your device, browser, password and exported files.

9.1 Limits of local storage

Local storage is not encrypted storage. Browser localStorage and chrome.storage.local do not provide application-level end-to-end encryption.

The cloud sync snapshot is stored as ciphertext on the server. The sync key is held in your browser (sessionStorage and/or IndexedDB); after signing out or clearing site data, you must sign in again to derive the key.

If someone obtains access to your device, a malicious extension or XSS attack compromises your browser, or you remain signed in on a shared device, records may be read.

We recommend that you use a personal device protected by a password or other authentication, avoid recording highly private content on shared or public devices, back up regularly, and never share exported files or ZIP passwords with others.

9.2 Data security incidents

If we become aware of a security incident involving personal data held by the Service, we will take reasonable steps to investigate, contain and address it according to its nature and potential impact, and will notify affected persons or regulators where required by applicable law.

10. Your rights

Depending on applicable law, you have the right to:

• access the personal data we hold about you;
• request correction of inaccurate data;
• request deletion of account data or restriction of processing;
• object to certain processing or withdraw consent;
• export your records in CSV or Excel (portability);
• complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong (PCPD).

To exercise your rights, email mymomentsrecord@gmail.com. We may need to verify your identity. Please note that deleting your account does not automatically delete local records on your device, extension storage or exported files; you must clear those yourself.

10.1 Access and correction timeline

We will generally respond to a valid data access request within 40 days. If we cannot respond within that period, we will notify you of the reason and expected arrangement as required by applicable law. We may ask for reasonable identity verification and may charge a reasonable fee where permitted by law.

11. Children

The Service is not intended for children under 13. Users under 18 should use it with the consent and guidance of a parent or guardian. If we learn that we have collected personal data from a child under 13 without consent, we will take reasonable steps to delete it.

12. Sensitive data and mental health

Your diary may contain sensitive data about health, mental health, emotions or physical condition. You provide this data voluntarily and consent to our processing it on your device under this policy. We do not use it for diagnosis, advertising or sale.

The Service is not a medical or emergency service. If you are in immediate danger, call 999 or go to an emergency department.

13. Chrome extension permissions

The Chrome extension uses the following permissions:

The extension does not read, modify or upload the content of the page you are viewing. On sites that block embedded pages (such as WhatsApp Web), the extension may open a separate small window with the same recording interface.

The extension does not continuously monitor or collect your browsing content, browsing history or keyboard input.

14. Third-party links

The Service may link to third-party websites or resources (such as support helplines, the Chrome Web Store or Google). We do not control those sites and are not responsible for their content, privacy or security. Read their privacy policies before providing data.

15. Changes to this policy

We may update this policy from time to time. The updated version will be published on this page with an effective date. If the changes are material, we will notify you in a reasonable manner.

If there is any discrepancy or ambiguity between the Chinese and English versions, the English version prevails.

15.1 Material changes and consent

If an update involves a material change to the purposes of collection, use or disclosure of personal data, we will provide notice before implementing the change and obtain any consent required by applicable law. Continued use alone will not constitute consent to a material new use.

16. Contact us

If you have any questions about this policy, personal data or deletion requests, email mymomentsrecord@gmail.com.

End of document