1. Introduction
DIY Nav Site ("we", "our", "us") operates the website at nav.lo8ol.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our Service.
By using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree, please discontinue use immediately.
2. What Data We Collect
We collect the following types of data depending on how you interact with the Service:
| Data Type | Description | Source |
|---|---|---|
| Account Information | Name and email address | Clerk (authentication service) |
| User Preferences & Bookmarks | Saved links, categories, theme settings, search engine preferences, layout configuration | Stored in your browser's localStorage and optionally synced to Cloudflare KV |
| Usage Analytics | Page views, session duration, referrer, browser type, device type, approximate geographic region | Baidu Analytics (hm.baidu.com) |
| IP Address | Your public IP address | Cloudflare (CDN and security) — automatically collected on every request |
| Payment Data | Subscription plan selection and purchase confirmation | Lemon Squeezy (payment processor) — we never see your full payment card details |
3. How We Use Your Data
We use the collected data for the following purposes:
- Authentication & Account Management — To create and manage your account via Clerk, verify your email address, and enable passwordless sign-in.
- Service Personalization — To save your bookmarks, preferences, themes, and layout so they persist across sessions.
- Cloud Sync — If you have a paid account, your bookmarks are synced to Cloudflare KV so they are available across devices.
- Analytics & Improvement — To understand how the Service is used, diagnose technical issues, and improve features and usability.
- Security & Abuse Prevention — To detect and prevent unauthorized access, abuse, or malicious activity using Cloudflare's security features.
- Payment Processing — To process subscription payments and manage billing through Lemon Squeezy.
4. Data Storage
Your data is stored in the following locations depending on its nature:
- LocalStorage (Browser): Bookmarks, preferences, theme settings, and other user-generated data are stored in your browser's localStorage. This data stays on your device and is not transmitted to our servers unless you have cloud sync enabled.
- Cloudflare KV (Edge): If you are a registered user with cloud sync enabled, bookmarks and settings are stored in Cloudflare KV, a globally distributed key-value store, to sync across your devices.
- Clerk Servers: Your account credentials (name, email, hashed session tokens) are stored securely on Clerk's infrastructure. See Clerk's Privacy Policy.
- Lemon Squeezy Servers: Payment and subscription records are stored by Lemon Squeezy. We only retain basic subscription status (active/cancelled) and a transaction reference.
5. Third-Party Services
We rely on the following third-party services to operate the Service:
| Service | Purpose | Data Shared | Privacy Policy |
|---|---|---|---|
| Google AdSense | Displaying contextual and personalized advertisements on the Service | Approximate location, browser type, visited pages, and cookie identifiers (via Google advertising cookies) | google.com/privacy |
| Clerk | Authentication & user management | Email, name, session tokens | clerk.com/privacy |
| Lemon Squeezy | Payment processing & subscription billing | Email, subscription status, payment amount | lemonsqueezy.com/privacy |
| Cloudflare | CDN, edge compute (Workers), KV storage, DDoS protection | IP address, request metadata, synced bookmarks | cloudflare.com/privacypolicy |
| Baidu Analytics | Traffic analytics and usage statistics | Page views, session data, device info, anonymized IP | baidu.com (in Chinese) |
6. Cookies
We use the following types of cookies and similar tracking technologies:
- Clerk Session Cookies: Essential cookies required for authentication. They store a session token that keeps you logged in. These are strictly necessary and cannot be disabled without breaking sign-in functionality.
- Baidu Analytics Cookies: Used to distinguish unique visitors, track page views, and compile usage statistics. These cookies are set by the Baidu Analytics script (hm.baidu.com).
- Cloudflare Cookies (__cf_bm): Used to identify legitimate traffic and mitigate bot attacks. Essential for security.
- Google Advertising Cookies (e.g., __gads, NID, IDE, DSID): Set by Google and its partners to serve personalized or non-personalized ads, measure ad performance, and limit ad frequency. These cookies are set by Google AdSense when ads are displayed on our Service.
You can control cookie preferences through your browser settings. Blocking essential cookies may prevent the Service from functioning properly.
6.1 Google AdSense and Advertising
We use Google AdSense to display advertisements on the Service. Google and its partners may use cookies, web beacons, and similar technologies to collect data about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.
Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our Service and/or other sites on the Internet.
Opt-out of personalized advertising: You may opt out of personalized advertising by visiting Google Ads Settings. You can also opt out of third-party vendors' use of cookies for personalized advertising by visiting About Ads or Your Online Choices (EU).
Please note that even if you opt out of personalized advertising, you may still see non-personalized ads on the Service.
7. Your Rights
Depending on your jurisdiction, you may have the following rights regarding your data:
- Right to Access: Request a copy of the personal data we hold about you.
- Right to Deletion: Request that we delete your personal data. You can delete your account at any time from the account settings page, which will remove your synced data from Cloudflare KV.
- Right to Rectification: Correct any inaccurate personal data.
- Right to Data Portability: Request your data in a commonly used format (JSON).
- Right to Opt-Out: You may opt out of Baidu Analytics by disabling JavaScript or using a browser extension that blocks analytics scripts. Opting out does not affect core Service functionality.
- Right to Withdraw Consent: Withdraw consent for data processing at any time by contacting us.
To exercise any of these rights, please contact us at the email address below. We will respond within 30 days.
8. Data Retention
We retain your data as follows:
- Account data: Retained until you delete your account. You can delete your account at any time from the account page.
- Analytics data: Retained by Baidu Analytics according to their data retention policy. Anonymized aggregate data may be retained indefinitely for statistical purposes.
- Backup copies: May be retained for up to 90 days after deletion.
- localStorage data: Controlled entirely by you. You can clear it at any time via browser settings. We do not access your localStorage unless you enable cloud sync.
9. Data Security
We implement appropriate technical and organizational measures to protect your data, including:
- Encryption in transit via TLS/HTTPS (enforced by Cloudflare).
- Encryption at rest for data stored in Cloudflare KV.
- Secure authentication handled by Clerk (no passwords stored on our servers).
- Payment data never touches our servers — processed entirely by Lemon Squeezy (PCI Level 1 compliant).
- DDoS protection and Web Application Firewall (WAF) via Cloudflare.
No method of transmission over the Internet is 100% secure. We cannot guarantee absolute security, but we follow industry best practices to protect your data.
10. GDPR Compliance (EU Users)
If you are a resident of the European Economic Area (EEA), you have the following additional rights under the General Data Protection Regulation (GDPR):
- Lawful Basis: We process your data based on your consent (for analytics) and on contractual necessity (for account creation and service delivery).
- Data Controller: DIY Nav Site is the data controller. Contact details are provided in section 12.
- International Transfers: Your data may be transferred to and processed in countries outside the EEA (including the United States, where our hosting providers and third-party services are located). We ensure appropriate safeguards are in place through Standard Contractual Clauses (SCCs) where required.
- Data Protection Officer: You may contact us directly with GDPR-related inquiries at the email below.
- Complaints: You have the right to lodge a complaint with your local data protection authority.
11. CCPA Compliance (California Users)
If you are a resident of California, USA, the California Consumer Privacy Act (CCPA) provides you with the following additional rights:
- Right to Know: You can request details about the categories and specific pieces of personal information we have collected about you in the past 12 months.
- Right to Delete: You can request deletion of personal information we have collected from you.
- Right to Opt-Out of Sale: We do not sell your personal information. We do not and will not sell personal information of minors under 16 without authorization.
- Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.
- Verification: We may need to verify your identity before processing your request. We will use the email address associated with your account for verification.
To exercise your CCPA rights, please contact us at the email below.
12. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please contact us:
- Email: privacy@nav.lo8ol.com
- Service: nav.lo8ol.com
We will make every effort to address your concerns promptly. You can also reach us via the feedback form available on the Service.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date at the top. Material changes will be communicated via email (if you have an account) or through a notice on the Service.
We encourage you to review this Privacy Policy periodically for any changes.