Privacy policyPrivacy policy

We only collect personal data that you give us, or that is needed to deliver this website:

• Project brief (contact form) — your name, email address and message, plus anything you choose to add: company, phone number or WeChat ID, project type, budget range and preferred start. We also record the page language and when you sent it.
• AI assistant — the questions you type and the replies you receive. You don’t need an account, and we don’t ask for your name.
• Technical data — your IP address, browser type and the pages you request. Our hosting provider processes these to deliver and protect the site, and we use your IP address briefly to stop abuse of the form and the assistant.

Fields marked as required in the form (name, email and message) are needed so we can reply. Everything else is voluntary — leaving it out only makes our first reply less specific.

We use personal data only for the purposes it was collected for:

• to read and answer your enquiry, arrange calls and prepare proposals and quotes;
• to run and improve the AI assistant and this website;
• to keep the site secure and prevent spam and abuse;
• to meet our legal and regulatory obligations.

We don’t sell or rent personal data, and we don’t use it for advertising or profiling. We won’t use your personal data for direct marketing unless you have given us your consent, which you can withdraw at any time.

The assistant on this site is powered by SHUAI API, an AI API gateway operated by WEIN. When you send a message, the conversation goes to the gateway, which routes it to a large-language-model provider to generate the reply. These providers may be located outside Hong Kong (see Transfers outside Hong Kong).

Your conversation is kept in your browser’s session storage so it survives page changes, and it is cleared when you close the tab. This website doesn’t store chat transcripts; SHUAI API may keep request logs for a short period for operations, billing and abuse prevention (see How long we keep it).

Please don’t share sensitive personal data — such as identity card numbers, financial or health information — in the chat. The assistant can make mistakes; for anything binding, such as a quote, contact us directly.

We share personal data only with service providers that process it on our behalf, under contract and only for the purposes above:

• Cloudflare, Inc. — hosting, content delivery and security for wein.dev, and storing the project briefs sent through the form and forwarding them to our team by email;
• Our email and messaging providers — to deliver project briefs to our team’s inbox or team chat;
• AI model providers — through SHUAI API, to generate the assistant’s replies.

We may also disclose personal data where the law requires it, or to protect our rights, our users or the public. If WEIN is involved in a merger or acquisition, personal data may pass to the new owner under the same protections.

Our service providers run global infrastructure, so your personal data may be processed or stored outside Hong Kong — for example in the United States, Singapore, the European Union or mainland China — where data protection laws may differ from Hong Kong’s.

We choose providers with appropriate security and contractual safeguards, and we only transfer what is needed for the purposes in this policy.

We keep personal data only as long as we need it for the purposes it was collected for:

• Project briefs and related emails — up to 24 months after our last contact if no project follows; if we work together, for the length of the engagement plus any period the law requires (for example, accounting records).
• AI assistant — conversations stay in your browser and are cleared when you close the tab; SHUAI API request logs are kept for no more than 30 days.
• Abuse prevention — IP addresses used for rate limiting are held only in server memory, for at most one hour.
• Server and security logs — kept by our hosting provider for a limited period under its own policies.

We protect personal data with reasonable technical and organisational measures, including:

• encrypted connections (HTTPS/TLS) across the whole site;
• access limited to the team members who need it to reply to you;
• rate limits and spam protection on the form and the assistant;
• service providers chosen for their security practices.

No system is completely secure. If a data breach affects you, we will notify you — and the Privacy Commissioner for Personal Data where appropriate.

We don’t use advertising or cross-site tracking cookies. The site only stores what it needs to work and to remember your choices:

• NEXT_LOCALE (cookie) — remembers your language choice; it expires when you close your browser.
• wein:preloader (session storage) — plays the opening animation only once per visit.
• wein:chat:v1 and wein:chat-nudge (session storage) — keep your AI assistant conversation while you browse, and show the assistant hint only once.
• wein:contact-draft (session storage) — keeps an unsent project brief if you reload or leave the page; deleted once you send it or close the tab.
• wein:orbit:best (local storage) — remembers your best score in ORBIT, the mini game on our game development page; it stays until you clear your site data.

Cloudflare may also set strictly necessary cookies that protect the site from bots and attacks. You can block or delete cookies and site data in your browser settings — the site still works, it just won’t remember your language or your best score.

Under the PDPO you have the right to:

• ask whether we hold personal data about you and request a copy (a data access request);
• ask us to correct personal data that is inaccurate (a data correction request);
• withdraw your consent to direct marketing, or ask us to delete data we no longer need;
• ask about our policies and practices and the kinds of personal data we hold.

Send your request to hello@wein.dev. We will respond within 40 days, as the PDPO requires. We may need to verify your identity, and we may charge a fee that is not excessive for a data access request, as the law allows.

If you’re not satisfied with our response, you can complain to the Office of the Privacy Commissioner for Personal Data, Hong Kong(opens in a new window).

This website is meant for businesses and adults. If you are under 18, please ask a parent or guardian before sending us personal data. If you believe a child has given us personal data without consent, contact us and we will delete it.

This site links to other websites, such as our open-source projects on GitHub and our products. Their own privacy policies apply when you visit them, and we aren’t responsible for how they handle your data.

We may update this policy as our website and services change. We will publish the new version on this page and update the date at the top; if a change materially affects how we use your personal data, we will say so clearly here.

For privacy questions or requests, email hello@wein.dev with “Privacy” in the subject line. We are based in Hong Kong.

If the language versions of this policy differ, the English version prevails.