Privacy

Privacy Policy

Read how China Travel Pulse handles checker data, email enquiries, cookies, analytics and privacy choices.

Last updated: 21 July 2026

Introduction

This policy explains what China Travel Pulse may receive when you browse the site, use the entry or Customs checker, or contact us. It describes the current application behavior; it does not invent services that are not enabled in this codebase.

Customs Item Checker data

The Customs checker processes item choices and answers in the current browser flow. It stores privacy-minimized aggregate search records, including a keyed hash for unknown terms rather than the raw unknown search text. Voluntary error reports store the selected report type and bounded technical context; do not enter names, passport numbers or other identifying information.

Information we collect

The site may process the information you actively submit in a checker session, plus limited technical information needed to serve and protect the site. The Contact page opens your own email application; it does not collect or submit a contact form to this website. We do not ask for passport numbers, names, birth dates or uploaded identity documents in the entry checker.

China Entry Checker data

Checker answers are stored in an expiring anonymous query session so the question flow can continue and results can be recomputed. The application stores a hashed opaque query token rather than the token itself, and it does not create public shared-result links. The default session expiry is 168 hours (7 days), configurable with ELIGIBILITY_QUERY_TTL_HOURS.

Contact information

The Contact page publishes Sunny’s email address and uses a mailto: link. Any email you choose to send is handled by your email provider and mailbox, not stored or delivered by this website.

Server logs

Application errors and selected operational events are written to the application log. The application also keeps rate-limit counters using a keyed hash of the remote address and user agent; it does not intentionally store the raw values in that table.

Analytics

The public site uses Google Analytics 4 through Google Tag, configured with measurement ID G-8Y9ZNE9KE1, to understand aggregate page usage and improve the service. Google may process information about your visit, including technical identifiers and browsing interactions, under its own privacy terms. The entry checker also has privacy-minimized first-party operational event tracking; it does not intentionally send passport numbers, names, birth dates or full answer sets to analytics.

Cookies and local storage

The application uses an HttpOnly, SameSite session cookie for CSRF tokens, anonymous checker state and other short-lived server-side session state. No browser local-storage requirement was found in the current public flow. The cookie is marked Secure when the request is served over HTTPS.

How information is used

Information is used to provide the requested page or checker flow, explain a pre-check result, protect state-changing forms and detect abuse. It is not used to make an official immigration decision.

Data retention

Anonymous checker sessions, privacy-minimized Customs search aggregates and feedback, rate-limit counters, and operational logs are kept only for the time needed to provide the service, protect it and investigate operational issues. The operator must set and document the production retention schedule before public launch.

Security

The site uses prepared database statements for data values, secure session defaults, CSRF checks, server-side validation, output escaping, security headers and bounded request rates. No security measure can eliminate every risk.

User privacy choices and requests

You may use the Contact page to ask about your information, request correction or deletion where applicable, or ask a general privacy question. Identity verification and response procedures must be set by the operator before launch.

Children’s privacy

The service is general travel information and is not directed at children. Do not include another person’s personal information in an email unless you have a proper reason and permission.

Policy changes

We may update this policy when the service or applicable requirements change. The last-updated date at the top of this page indicates when this version was reviewed.

Contact

For privacy questions, email the address published on the Contact page.