This policy explains what personal information MILKYVERSE 奶門宇宙 (“MILKYVERSE”, “we”) collects through milkyverse.org, how we use it, who we share it with, and the choices you have. MILKYVERSE is an independent community of TikTok players. We are not affiliated with, sponsored or endorsed by TikTok.
1. Information we collect
Your account
Your nickname (shown publicly), email address and password. Passwords are kept only in scrambled (hashed) form by our sign-in service, and we can’t read them. We also keep when you signed up and last signed in, and a record that you confirmed you are 18 or older and accepted the member rules.
Star Card
Your TikTok handle and, if you add it, your family.
Activity
Your weekly votes (streamer, stars and time, including changes made in the first 10 minutes), comments, “helpful” marks, streamers you suggest, reports you send and streamers you follow.
Messages
Messages between you and the MILKYVERSE team, and any pictures you attach. Before a picture is uploaded, your browser shrinks it and saves it again, which removes hidden photo data such as the place where it was taken.
Security
To stop mass sign-ups, we keep a one-way scrambled code of the network you signed up from for 2 days (not your IP address itself). Cloudflare Turnstile checks that a real person is signing up or signing in.
Page views
We count visits without cookies. For each page view we record the page, the name of the website that sent you (if any), the type of device (phone, tablet or computer), whether you are signed in, and a visitor code that changes every day and can’t be traced back to you. We don’t keep IP addresses for this count.
2. How we use it
- to create and run your account, sign you in and send account emails (confirmation and password reset);
- to show the streamer directory, votes, ratings and comments;
- to run the weekly voting rewards, including finding the top voters and contacting them;
- to send you messages about your account, rewards and the rules, and to read your replies;
- to keep the community fair and safe: one account per person, stopping fake accounts and vote manipulation, and handling reports;
- to understand, in total numbers, how the site is used, and to improve it.
We don’t sell personal information, we don’t show ads, and we don’t use advertising trackers.
3. What other people can see
- Public: your nickname, your comments, and the stars from your latest vote shown next to your comments. Votes are linked to your account and are not secret: vote records can be read through the site’s public data, and totals are shown on the site.
- Not public: your email address, your Star Card details, your messages, the streamers you suggested and your reports.
- MILKYVERSE staff: admins can see the information above to run the site. Supervisors (主管) can see your nickname, a partly hidden email address, your Star Card, comments, and messages with members; they can’t see admins’ or other Supervisors’ messages. Every staff action is recorded in an activity log.
4. Service providers
We use these services to run the site. They handle information on our behalf, only as needed to provide their service:
- Supabase: database, sign-in and file storage (servers in Singapore)
- Netlify: website hosting
- Cloudflare: the Turnstile security check
- Resend: account emails sent from help@milkyverse.org
- TikTok: streamer previews and clips load from TikTok when you open or play them, and TikTok’s own privacy policy applies to that content
- Google Fonts: the site’s fonts load from Google’s servers
Your information may be handled outside your country, including in Singapore and the United States. We may also disclose information when the law requires it, or to protect the safety of members and others.
5. Cookies and browser storage
We don’t use advertising or tracking cookies. The site uses your browser’s local storage to keep you signed in and to remember your language, your nickname for the page header, a Star Card you started, and (for staff) the last admin tab you opened. Cloudflare and TikTok may use their own cookies when you use their features.
6. How long we keep it
- Account, Star Card, votes and comments: while your account exists.
- Message text: while your account exists. Pictures in messages: 30 days, then deleted automatically.
- Network codes used for sign-up limits: 2 days.
- Page-view counts: about 400 days.
- When you ask us to delete your account, we delete your personal information within 30 days, except what we must keep to meet legal obligations or to protect the community (for example, a record that an account was suspended).
7. Your rights and choices
- You can change your nickname and Star Card on the member page.
- You can ask us for a copy of your information, ask us to correct it or stop using it, or ask us to delete your account. Email help@milkyverse.org from the email address on your account. We reply within 30 days.
- If you are in Taiwan, the Personal Data Protection Act gives you the right to ask about and review your data, get a copy, have it supplemented or corrected, ask us to stop collecting, processing or using it, and ask us to delete it. Members elsewhere can use the rights their local laws give them, and we respond to those requests too.
8. Age limit
MILKYVERSE is only for people aged 18 and older. We don’t knowingly collect information from anyone under 18. If we learn that an account belongs to someone under 18, we close it and delete its information.
9. Security
We limit access to the staff who need it, protect the database with access rules, and never keep passwords in readable form. No service can be completely secure; if something happens that affects your information, we will tell you as the law requires.
10. Changes to this policy
We may update this policy. We will post the new version here with its date, and tell members about important changes on the site or by message.
11. Contact us
Questions about this policy or your information: help@milkyverse.org.