Privacy Policy

Effective: as of 09/11/2025, in force
Last updated: 09/11/2025

In short

I respect your privacy. Whether it'd be your contact details, location information or even photos, you're entrusting me with your personal information. That's why I'm committed to keeping your information private to the best of my abilities. Here's how I do it:

• I only collect what's necessary. For example, I'll never ask you for your date of birth or passport if I don't need to verify your age. I try to collect as little telemetry data as possible to both keep my services efficient and to reduce the amount of information I collect about you. Similarly, I only keep what I need, permanently deleting any information that I'll no longer need to maintain my services to you.
• I'll never share your information unwarranted with 3rd parties, law enforcement or other bodies or organisations of authority except where required by law, such as in the interest of national security. I'll never sell your data to advertising companies, data brokers or other 3rd parties that have an interest in your data. I try to process all your information with myself. Where that is not possible is outlined in this privacy policy.
• I secure your data to the best of my ability, adhering to the latest security policies and recommendations. If my services or a 3rd party application that I use is breached, I contain the breach and investigate what data is lost and/or stolen. In this scenario, I'll let you know as soon as I have information.

Again, in legalese

I, Jianao "James" Chen ("I", "My") offer various services ("Applications", "Services"), which include, but are not limited to, the Photos platform, my portfolio site and Operation Won.

Intentions and Contact

This privacy policy is intended to outline what data I collect, how I collect that data, who I share it with and your rights to your data. If you have any questions regarding this privacy policy, please contact me at james@jchen.au.

Collecting: What and How

I may collect your data. Where I do, I only collect the data that I absolutely need to provide the best possible experience for you. This includes, but is not limited to:

• One form of contact (e.g mobile number, email)
• Information you voluntarily provide to use my application(s)
• Information deemed essential for functionality reasons

I also collect information when you voluntarily opt into optional telemetry data collection. This information varies from service to service, but typically includes:

• Your IP address, which may be used to trace your ISP and their ASN
• Geolocation, for apps where location is important (such as Operation Won)
• Amount of data transmitted
• Type(s) of data transmitted
• Your profile information
• Bank and other payment information

No matter what type of data, I always collect it in good faith. If you have any questions regarding what I use your data for specifically, feel free to contact me.

My services are not directed to children under 13 years of age. I do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided me with personal information, please contact me at james@jchen.au. If I become aware that I have collected personal information from a child under 13 without parental consent, I will take steps to delete that information as quickly as possible.

Using: Why and When

I will only use your information for the reason I collected it for. For example, I will never use your payment information for reasons other than processing a payment. Following are the scenarios in which I process your information:

• To provide and maintain my services. In some cases, my services would not function without some information from you, such as your photo in the Photos platform. I require this information to provide you with the best possible experience.
• To process transactions. Occasionally, I may have to process financial transactions. Should this happen at any time, either myself or a 3rd party provider will process your transaction with your information securely.
• To communicate with you. I may have to contact you regarding topics that may concern you, such as changes to the service, the terms of service or privacy policy.
• To meet my legal and safety obligations. I have legal responsibilities to disclose and share information with law enforcement agencies. I am required by law to comply. Should law enforcement have a legitimate interest in public safety, I may also disclose information on a case-by-case basis.

The optional telemetry data I collect helps me understand how my applications are being used, identify bugs, fix crashes, and make performance enhancements. This data is aggregated and anonymised wherever possible to protect your identity.

I may also use cookies and other tracking technologies. The purpose of these technologies is to do one of the following:

• Remember your preferences and settings
• Authenticate your sessions
• Analyse your usage of my services, where your consent is provided

There are cookies (functional/essential cookies) that you cannot disable. These are required to keep my service in working condition. Optional/Analytical cookies are optional and require your consent. They help me analyse user behaviour and improve my services.

I retain your personal information and data only as long as necessary to provide or facilitate my services to you or to conduct further research and analysis, where your explicit consent is provided. Your account data is deleted within 90 days of account closure or upon request. You may request deletion at any time by contacting me at james@jchen.au.

Sharing: Who and Where

I will never sell, trade, disclose or otherwise transfer your personal data with anyone unless I am required to do so by law.

I do my best to ensure that your data isn't shared unnecessarily. However, your information may be stored with partners that provide their services to me. These partners may include, but are not limited to:

• Amazon Web Services Australia Pty Ltd (cloud infrastructure and hosting)
• Cloudflare Australia Pty Ltd (content delivery network and security)
• Oracle Consolidation Australia Pty Ltd (cloud infrastructure)
• Google Australia Pty Ltd (cloud services and analytics)
• Hetzner Online GmbH (server hosting)
• New Relic Australia Pty Ltd (performance monitoring and analytics)
• Instatus, Inc (status page and uptime monitoring)

Securing Your Data

I do my best to secure your data. Where possible, I:

• Encrypt your data when in transit, preventing people from intercepting your data and reading it
• Encrypt your data when at rest for long periods of time
• Implement access control
• Inform you of a breach should one occur, as per your rights.

In the event of a data breach, I will:

• Respond, contain and investigate the breach
• Notify you, within 72 hours, of the breach
• Provide information on who was affected and the data affected
• Explain what I am doing in response to the breach
• Provide steps on how you can manage your personal information

Your Rights

You have certain rights to your data under the Australian Privacy Act 1988. If you are overseas, you are guaranteed the rights that apply in your country or the Australian Privacy Act.

You have the right(s) to:

• Access: Request a copy of the personal information I hold about you.
• Correction: Request correction of inaccurate or incomplete information.
• Deletion: Request deletion of your personal information (subject to legal retention requirements).
• Opt-Out: Opt out of optional telemetry data collection at any time through your account settings or by contacting me.
• Object/Restrict: Object to or restrict certain processing of your information.
• Data Portability: Receive your data in a structured, commonly used format (where technically feasible).
• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) or your local data protection authority.

To exercise your rights, please contact me at james@jchen.au. I will comply with your request within a reasonable time period. No fees apply to such requests unless they are manifestly unfounded, excessive, or repetitive.

Changes to this Policy

This privacy policy may be updated to more accurately reflect my practises, services or legal requirements. When changes are made, I will:

• Update the timestamp at the top of this page
• Contact you via email of any changes
• Seek your renewed consent, where required by law