隐私说明

20.coffee 由 Flowgent 运营。 20.coffee is operated by Flowgent.

我们只记录匿名访问统计：事件类型（打开页面、看菜单、看品牌故事、从二维码进入、点 WhatsApp 订阅）、二维码来源（杯子 / 柜台 / 明信片 / 直接访问）、事件时间，以及一个随机生成的匿名会话编号。会话编号保存在浏览器的 sessionStorage 中，关闭标签页即清除。 We only record anonymous visit statistics: the type of event (opening the page, viewing the menu, viewing our story, arriving by QR code, tapping WhatsApp subscribe), the QR source (cup / counter / postcard / direct visit), the time of the event, and a randomly generated anonymous session ID. The session ID is stored in your browser's sessionStorage and is cleared when you close the tab.

我们不使用 cookie，不使用第三方分析或广告追踪，不收集姓名或精确位置。 We do not use cookies, third-party analytics or advertising trackers, and we do not collect your name or precise location.

为安全与排障，服务器日志会记录请求信息。其中的 IP 地址会先打码（去掉最后一段）再写入日志。日志由第三方日志服务 Papertrail 保存约 7 天后删除。 For security and troubleshooting, server logs record request information. IP addresses are masked (last segment removed) before they are written to the logs. Logs are kept by the third-party logging service Papertrail and deleted after about 7 days.

用于限流的完整 IP 地址只在内存中短暂使用。 The full IP address used for rate limiting is held only briefly in memory.

只有你主动给我们发 WhatsApp 消息，才会发生这一步。我们保存你的 WhatsApp 号码、WhatsApp 显示名称、订阅/退订动作与时间，以及你那条消息的前 100 个字符，作为你同意接收消息的记录。 This only happens when you message us on WhatsApp first. We keep your WhatsApp number, your WhatsApp display name, the subscribe or unsubscribe action and its time, and the first 100 characters of your message, as a record of your consent to receive messages.

用途：发送你订阅的新品与优惠消息。随时回复 STOP / 停止 / 退订 即可退订。 Purpose: sending you updates on the new products and offers you subscribed to. You can unsubscribe at any time by replying STOP / 停止 / 退订.

保留：作为同意记录保留。你可以要求我们删除，删除会一并删除上述全部记录。 Retention: kept as a record of your consent. You can ask us to delete it, and deletion removes all of the records above.

WhatsApp 消息经由 Meta（WhatsApp）传递，受 Meta 隐私政策约束。 WhatsApp messages are delivered by Meta (WhatsApp) and are subject to Meta's privacy policy.

我们不出售你的资料。只与提供服务所必需的服务商共享：DigitalOcean（网站与数据库托管，新加坡区域）、Meta（WhatsApp）、Papertrail（日志）。 We do not sell your data. We only share it with the service providers needed to run this service: DigitalOcean (website and database hosting, Singapore region), Meta (WhatsApp), and Papertrail (logs).

根据马来西亚《2010 年个人资料保护法》（PDPA），你可以查询和更正你的资料、撤回同意，并要求删除。 Under Malaysia's Personal Data Protection Act 2010 (PDPA), you can access and correct your personal data, withdraw your consent, and ask us to delete it.

退订 WhatsApp 消息：随时回复 STOP / 停止 / 退订。查询、更正或删除资料的请求请发邮件给我们。 To stop WhatsApp messages, reply STOP at any time. For access, correction or deletion requests, please email us.