Privacy Policy

Operator and scope

This policy applies to the public site at jolvex.xyz and its paths. The site is operated by Jolvex; for general and privacy matters, email info@jolvex.xyz.

The Jolvex Admin Portal lives at admin.jolvex.xyz and is reserved for invited administrators; the handling of admin accounts and work data is governed by internal policy and is outside the visitor scope of this public policy.

Data we collect

The public site offers no account sign-up and asks visitors for no personal data. When you browse the site, the server records limited technical logs (such as IP address, time, requested page and response status) for security and troubleshooting.

We run no advertising or cross-site tracking. Measurement is exactly two things: Cloudflare Web Analytics (aggregate performance data only, no cookies) and Google Analytics 4 (consent-gated: it loads only after you allow analytics cookies and is delivered server-side through Cloudflare Zaraz, so your browser never contacts a Google origin; advertising purposes are permanently denied). Your language and theme preferences are stored only in your own browser, never sent to our servers or tied to an account. See the Cookie Policy for details.

Cookies and browser storage

The only cookie the public site sets is the measurement consent preference jolvex_analytics_consent_v1 (granted or denied, 180 days); it records only whether you allow analytics cookies. Google Analytics 4 loads only after you allow it (forwarded through Cloudflare Zaraz; the current configuration sets no analytics cookies); marketing cookies are never used. The theme preference is kept in browser-local storage (localStorage) and you can clear it any time in your browser settings.

Sign-in to the admin console admin.jolvex.xyz is handled by Cloudflare Access (Zero Trust): Cloudflare sets a CF_Authorization cookie on that subdomain only. The application itself sets no session cookie, and nothing is shared with the public domain.

How we use data

Technical logs are used only to keep the site secure and available, to prevent abuse and to diagnose errors. We sell no data and never use public-site visitor data for personalisation or cross-site tracking.

Our handling follows the data collection principles of Hong Kong's Personal Data (Privacy) Ordinance (Cap. 486), using data only for purposes directly related to operating the site.

Retention

Security and troubleshooting logs are kept for a bounded period and then deleted or de-identified. The measurement consent cookie lasts 180 days and then expires automatically; other browser preferences stay until you clear them.

Administrator data is retained and deleted under internal access-management policy, subject to audit records.

Your rights

Under the Personal Data (Privacy) Ordinance you may ask to access and correct personal data we hold about you. The public site in principle holds no identifiable visitor data; if you have a question about data handling, email info@jolvex.xyz.