Privacy Policy

This policy explains how Cnname (www.cnname.top, “we”) handles personal data when you visit the site, create an account, complete the naming questionnaire, buy a package or contact support.

We keep data collection to what the Service actually needs. We do not sell personal data, we do not run advertising trackers, and we do not share your data with data brokers.

• •Account data: your email address, a salted password hash (we never store the password itself), interface language and the date the account was created.
• •Questionnaire data: your English name, gender, selected personality traits, cultural preference, and — if you provide them — birth date, birth hour and minute.
• •Generated content: the Chinese names, pinyin, meanings, scores, element analysis and the files created from them (certificate, name card, seals).
• •Order data: what you bought, the amount, order status, timestamps and the payment reference returned by Dodo Payments. We never receive or store your card number, CVC or bank credentials.
• •Support messages: whatever you write to us by email.
• •Technical data: IP address, browser type and request timestamps in server logs, used for security and troubleshooting.

• •To generate your names and deliver the files you paid for (performance of our contract with you).
• •To create and secure your account, and to send transactional email such as verification codes, order confirmations and download links.
• •To keep the Service secure: detecting abuse, fraud and attacks (our legitimate interest).
• •To answer support requests and resolve disputes.
• •To meet legal, tax and accounting obligations.
• •To understand at an aggregate level which parts of the Service are used, so we can improve them. We do this from server logs and aggregate counts, not personal profiles.

Where the GDPR or UK GDPR applies, we rely on: performance of a contract (account, generation, delivery), our legitimate interests (security, service improvement, dispute resolution), consent (optional birth details, and any marketing email you explicitly opt into), and legal obligation (tax and accounting records).

You may withdraw consent at any time; withdrawal does not affect processing that already happened.

We do not use advertising cookies, cross-site trackers or third-party analytics scripts. Because we only set cookies that are strictly necessary, no consent banner is required for them.

• •cnm_session — a signed, http-only cookie that keeps you logged in. Required for the Service; removed when you sign out.
• •cnm_admin — a signed, http-only cookie used only by staff accounts for the admin area.
• •language — a value stored in your browser’s localStorage so the site opens in your chosen language. It stays on your device and is not sent to us as a profile.

We share data only with providers that help us run the Service, and only what each of them needs:

• •Vercel — website hosting and delivery (server logs).
• •Neon — managed PostgreSQL database where accounts, orders, names and generated files are stored.
• •Our AI name-generation model turns your questionnaire answers into name candidates. We send the naming inputs (English name, gender, personality, cultural preference, birth details); we do not send your email address or password.
• •Resend — transactional email delivery (verification codes, order emails, download links).
• •Dodo Payments — payment processing as Merchant of Record. Dodo Payments receives your payment details, email and order amount, and handles tax and invoicing.
• •Authorities — where we are legally required to disclose information, or where disclosure is necessary to investigate fraud or protect the rights and safety of users.

We do not sell personal data and we do not share it for advertising.

We operate from China and use providers whose servers are mainly in the United States and the European Union. Your data may therefore be processed outside your country. Where required, transfers rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, and we choose providers that publish their own transfer safeguards.

• •Account, questionnaire, name and file data: kept while your account exists, so you can log in and download again.
• •After you ask us to delete your account: removed within 30 days, except where we must keep specific records by law.
• •Payment and tax records: retained by Dodo Payments as Merchant of Record for the period required by applicable tax law; we keep only the minimal order record needed to honour refunds and support requests.
• •Server logs: kept for a short period for security and troubleshooting, then deleted or aggregated.

Depending on where you live, you may have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent. To exercise any of these, email support@cnname.top from the address on your account.

We respond within 30 days. Deleting your account removes your names and files, so please download anything you want to keep first. If you believe we handled your data unlawfully, you may complain to your local data-protection authority.

Traffic is encrypted with TLS. Passwords are stored as salted scrypt hashes and session cookies are http-only and signed. Access to the database and admin tools is restricted to the operator. No system is perfectly secure, so please use a unique password and tell us at once if you notice unusual activity.

The Service is not intended for children under 16. We do not knowingly collect data from children; if you believe a child has created an account, contact us and we will delete it.

We will update this page when our practices change and revise the date at the top. If a change materially affects how we use your data, we will announce it on the site or by email before it applies.

Privacy questions or requests: support@cnname.top. Please write from your account email so we can verify the request.