Privacy Policy

We collect as little as we can: you can browse the website without giving us any personal information, and a ParticleJump account needs only an email address. Below we explain what we handle, why, who else handles it, how long we keep it, and what you can do.

1. Who we are

This policy is issued by 质点跳跃智能科技有限公司 (“ParticleJump”, “we”) and covers the website particlejump.ai and the account service account.particlejump.ai (the “ParticleJump account”). Products we launch later on particlejump.ai subdomains use the same account. If a product needs information beyond what this policy covers, it will say so in the product and ask for your consent where required.

For any question about your personal information, write to team@particlejump.ai.

2. What we handle

When you browse the website

• No forms: the website does not ask you to sign in and does not collect anything you type.
• Visit statistics: we count page views with Cloudflare Web Analytics. It uses no cookies and does not follow you across other websites; we only see totals.
• Your preferences: the language you choose and whether you pause animations are kept only in your own browser’s local storage (named pj-language and pj-motion) and are never sent to us.
• Request information: to deliver pages to your browser and fend off attacks, our host Cloudflare processes technical information about each visit, such as IP address, browser type, the page requested and the time.

When you use a ParticleJump account

• Email address (required): used to send you sign-in codes, to identify your account, and to email you if you turn on notifications. The first time you sign in with an address, we create an account for it.
• Sign-in codes: six digits, valid for 5 minutes, with at most 3 wrong tries. Codes are stored encrypted and deleted once used or expired.
• Sign-in records: when you sign in, we keep a record of the session (which account, when it started, when it expires), and your browser keeps the matching sign-in cookie (see section 4). Sign-in records do not include your IP address or device details.
• Record of your consent to this policy: the version you agreed to, the page language at the time and when you agreed, so that we can show you consented.
• Notification preferences: whether you want “Product updates” and “Build log” emails. Both are off by default; you receive them only if you turn them on.
• Abuse-prevention records: to stop anyone from sending codes in bulk or guessing codes, we briefly record the IP address a request comes from, the feature requested and how many times; so that one address gets at most one code a minute, we also record a digest of the email address (not the address itself).

What we do not collect

We do not collect passwords, phone numbers, identity documents, precise location, contacts or payment details. We use no advertising or cross-site tracking tools, and we never sell or rent your personal information.

3. Why we handle it

• To sign you in and run your account: your email address, sign-in codes and sign-in records. The account service cannot work without them.
• To keep the service safe: abuse-prevention records. Without them, someone could use your address to send mail in bulk or guess codes.
• To send the notifications you chose: product updates or build logs, only after you turn the matching switch on. Every notification email tells you how to turn it off.
• To show you consented: the consent record.

We do not make automated decisions about you or build profiles from your information, and we do not use it for purposes this policy does not describe. If we ever need to, we will ask for your consent first.

4. Cookies and browser storage

The ParticleJump account uses one cookie:

• Name: __Secure-pj.session_token
• Purpose: keeps you signed in, across particlejump.ai and its subdomains (including future products), so you do not have to sign in again.
• Lifetime: expires after 7 days without use, and immediately when you sign out or delete your account.
• Protection: sent over HTTPS only and unreadable by page scripts.

This cookie is strictly necessary: without it you cannot sign in. We use no advertising, analytics or cross-site tracking cookies. The language and animation preferences the website keeps in your browser are described in section 2.

5. Where your information is kept and who handles it

We do not run our own servers. The following providers handle your information on our behalf, all of them outside China:

• Cloudflare, Inc. (United States, 101 Townsend St., San Francisco, CA 94107; privacy questions: privacyquestions@cloudflare.com)
  • Role: hosts the website and the account service, stores the account database, and provides visit statistics.
  • Information: all account information listed in section 2, and request information.
  • Account database location: Cloudflare data centers in the Asia-Pacific region.
• Resend (Plus Five Five, Inc., United States; contact support@resend.com; privacy policy)
  • Role: sends sign-in codes and the notification emails you turned on.
  • Information: your email address, the email content (including codes) and delivery records.
• Google LLC (United States, 1600 Amphitheatre Parkway, Mountain View, CA 94043; privacy policy)
  • Role: we use Google Workspace to send and receive mail at team@particlejump.ai.
  • Information: your email address and message when you write to us.

Using a ParticleJump account therefore means your personal information is stored outside China. When you tick the consent box on the sign-in page, you separately confirm this. For information these providers handle, you can exercise your rights with us as described in section 7, and we take care of it.

Apart from the above, we do not share your personal information with anyone unless the law requires it or you have given separate consent in advance. If a merger, division or similar change requires transferring your personal information, we will tell you the recipient’s name and contact details and require the recipient to keep to this policy.

6. How long we keep it

• Email address, notification preferences, consent record: until you delete your account; deleted immediately when you do.
• Sign-in records: deleted immediately when you sign out or delete your account; expired records are cleared every hour.
• Sign-in codes: deleted as soon as they are used; unused codes expire after 5 minutes and are deleted within the following hour.
• Abuse-prevention records: IP records with no new request for an hour are deleted at the next hourly clean-up, so they are kept for about two hours at most; email digests expire after a minute and are deleted at the next hourly clean-up at the latest.
• Database history: so that data can be restored after a failure, Cloudflare automatically keeps recent past versions of the account database (currently 7 days, at most 30 days); this cannot be turned off. Deleted information disappears from this history once that period has passed. We use the history only to recover from failures, and after a recovery we delete again any information you had deleted.
• Providers’ own records: such as email delivery logs and Cloudflare’s network logs, kept under each provider’s privacy policy.

7. Your rights

At any time you can:

• View: see your email address and notification preferences on your account settings page after signing in.
• Change notification preferences: turn the switches on or off on the settings page; changes take effect immediately.
• Delete your account: choose “Delete account” on the settings page and confirm. To guard against mistakes by others, you need to sign in again if your last sign-in was more than a day ago. Deletion immediately removes your email address, sign-in records, notification preferences and consent record, and cannot be undone; database history, abuse-prevention records and the providers’ own records disappear within the periods in section 6.
• Other requests: to get a copy of your personal information, correct your email address, learn how we handle it, or object to how we handle it, write to team@particlejump.ai from your account’s address. Once we confirm it is you, we will reply within 15 working days.

Account data can only be stored outside China, so if you withdraw your consent to this policy or to storage outside China, we can no longer provide your account and you can delete it. Withdrawing consent does not affect handling that took place before.

If you believe we have infringed your rights, please contact us first. You also have the right to complain to the data protection authority where you live.

8. Children

ParticleJump is meant for adults. Children under 14 should not create an account. If we learn that we collected personal information from a child under 14 without a guardian’s consent, we will delete it promptly.

9. How we protect your information

• All connections are encrypted with HTTPS.
• There are no passwords: you sign in with one-time codes, stored encrypted in the database.
• Codes expire quickly and allow few tries; one address can request a code only once every 60 seconds.
• Page scripts cannot read the sign-in cookie, and requests that change account settings must come from our own pages.
• We collect only what is needed and delete it as early as section 6 describes.

If a personal information security incident happens, we will inform you and the relevant authorities as the law requires.

10. Changes to this policy

When we change this policy, we update the date at the top of this page. If a change affects your rights or how we handle your information, we will ask you to confirm again the next time you open your account settings; if you do not agree, you can delete your account.

11. Contact us

For any question about this policy or your personal information, write to team@particlejump.ai.