Privacy Policy

Last updated: July 28, 2026

This policy covers the Shanghai First 24H website, its free resources, the USD 9.99 Offline Fallback Kit, support, checkout, and delivery.

The kit is a fixed download and does not require personal trip details. Payment takes place on Dodo, then we personally email a private download link within 24 hours. Free resources require no login or email address.

Information This Website Uses

This repository does not embed an analytics token or tracking script. Its security policy is compatible with dashboard-managed Cloudflare Web Analytics. If Web Analytics is enabled in Cloudflare, it may report aggregate page-view and performance measurements without analytics cookies, local storage, or a visitor profile created by us. Dashboard activation and successful beacon receipt must be verified separately; this policy does not claim that either has occurred.

When enabled, Cloudflare Web Analytics is used only for aggregate page and performance baselines. It is not our source of truth for UTM attribution, checkout events, orders, delivery, refunds, or customer identity.

If the current page URL contains one valid value for utm_source, utm_medium, utm_campaign, or utm_content, the site appends only those bounded campaign labels to Dodo checkout links in your browser. It does not save them to cookies or local storage, and it does not send hotel, itinerary, booking, device, or payment details. A completed Dodo payment record remains the source of truth for a sale.

Cloudflare hosts the static site and may process basic technical information needed to serve pages, protect the service, and prevent abuse under its own policy. See the Cloudflare Privacy Policy.

Information We Do Not Ask You To Send

The public website has no itinerary form and does not ask for flight, hotel, route, party, budget, food, or preference details. The included hotel-card and preflight tools run locally on your device.

Do not send sensitive information. Email and support messages must not include passport, identity, or visa documents or numbers; booking confirmations, references, room numbers, or private itinerary accounts; card or bank details, payment credentials, PINs, passwords, or one-time codes; private payment-app pages or QR codes; eSIM activation codes or device and SIM identifiers; medical records or diagnoses; login credentials; precise location history; or unredacted private screenshots.

Checkout And Email Delivery

Payment takes place on a Dodo Payments checkout, not on this website. Dodo receives the information needed to process the order, such as your checkout email, payment details, and transaction record. Under the current public manual-delivery model, we use the checkout email to send a private download link within 24 hours after successful payment. Automatic Digital Files access is not promised unless it is verified and the public delivery policy is updated. The included preflight and arrival wizard runs on your device, makes no network request, and does not save the trip facts entered into it.

Dodo handles checkout, payment, tax, fraud checks, invoices, refunds, and disputes under the terms and privacy notice shown through its service. We may receive the checkout email, order number, and payment status needed to send your kit, provide support, keep order records, or handle a refund.

Support Messages

If you email us, we receive your email address and the content you choose to send. For order help, use the email used at checkout and include only the minimum information needed to identify the order and explain the issue.

Do not send any of the sensitive information listed above.

Earlier Form Records

Earlier versions of this website included an optional research survey and legacy product forms. Those records are kept only for the limited period disclosed when they were collected, or as needed for a transaction, dispute, security, or legal obligation, and are then deleted or reduced to non-identifying aggregate findings.

Retention

Static website: We do not create our own visitor profile or funnel-event record. The hosting provider may keep limited security and service logs under its own policy.
Earlier form records: If a trip-specific record was collected through an earlier form, working records under our control are deleted seven days after the expected arrival date. A declined or withdrawn record may be deleted earlier.
Delivery and support email: Deleted when the delivery or support request is resolved or within six months, whichever comes first.
Minimal legal and accounting records: Dodo and, where applicable, we may retain the minimum order, payment, tax, refund, dispute, security, and anti-fraud records required for legal or accounting purposes after personalized trip data is deleted.
Accidental sensitive information: Removed from working records when discovered where reasonably possible.

Your Choices

You can ask for access, correction, or deletion of information we control by emailing zihaoxie1217@gmail.com. Some transaction or legal records may still need to be retained.

International Use

The product is intended for English-speaking travelers and may be accessed globally. Information may be processed in countries where Cloudflare, Dodo, and our email and payment services operate.

Contact

Privacy questions can be sent to zihaoxie1217@gmail.com.