66
LEGAL

Privacy Policy

Last updated: August 31, 2026

66 ("we", "us" or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store and share your personal information when you use the website at https://www.cihyiyttth.site (the "Service"), and the rights available to you. By using the Service you agree to this Policy.

1. Data Controller

The data controller for this Service is the individual operator of 66. Our legal name and mailing address are available on request.

2. Personal Information We Collect

2.1 Information you provide directly

  • Account information: email address, display name, avatar and password (stored as a salted hash). If you sign in through a third-party provider such as GitHub, we receive the basic profile information (name, email, avatar) that provider shares with us.
  • Payment information: transaction amount, currency, payment status, order reference and the email used at checkout. Full card numbers are never stored by us — card data is processed by our payment processor (see Section 5).
  • User content: comments, guestbook messages and profile details you choose to publish.
  • Communications: emails and support requests you send us.

2.2 Information collected automatically

  • Device & network: IP address, browser type, operating system and time zone.
  • Log data: request timestamps, error logs and basic performance metrics kept by our server.
  • Preferences: your theme and language choice, stored locally in your browser.

3. How We Use Your Information

  • Service delivery and maintenance — contract performance
  • Billing, order fulfilment and payment processing — contract performance
  • Customer support and refund handling — contract performance / legitimate interests
  • Service notifications (billing, security, policy changes) — legitimate interests
  • Security, abuse and fraud prevention — legitimate interests
  • Legal and tax compliance — legal obligation

We may aggregate or anonymize data for statistical purposes; such data cannot be linked to any individual. We do not use your data for marketing or profiling.

4. Cookies & Tracking Technologies

  • Strictly necessary: session cookies that keep you signed in and protect forms from abuse. These cannot be disabled.
  • Functional: theme and language preferences stored in your browser's local storage. You can clear them at any time via your browser settings.

We do not currently use analytics or advertising cookies, and we do not embed third-party tracking pixels.

5. Sharing & Disclosure

We do not sell your personal information, including as defined under laws such as the CCPA. We share information only in the following circumstances:

  • Service providers: our hosting provider (cloud server) and our payment processor. Payment card data is processed exclusively by our PCI-DSS certified payment processor and Merchant of Record, Waffo Pancake, and is not stored on our servers. Waffo Pancake receives the order amount, currency, order reference and the email you enter at checkout in order to process payment, issue receipts and handle tax.
  • Third-party login providers: if you sign in with GitHub, the provider processes your authentication under its own privacy policy.
  • Legal requirements: where required by law, court order or a lawful regulatory request.
  • Business transfers: in the event the Site is transferred to a new operator, with advance notice and continued protection.
  • With your consent: for any other purpose, with your explicit prior consent.

6. Data Security

  • Encryption in transit: all traffic is served over TLS / HTTPS.
  • Secure storage: passwords are hashed; access to the database is restricted to the operator.
  • Least-privilege access and regular dependency and security updates.

In the event of a security incident affecting your rights, we will notify you and, where required, the relevant authorities within 72 hours of discovery. Please keep your credentials secure and do not share them.

7. Data Retention

  • Account information: while your account is active, and 90 days after deletion, then deleted or anonymized.
  • Transaction records: 7 years, to meet tax and accounting obligations, then archived or deleted.
  • Support correspondence: 2 years, then securely deleted.
  • Server and security logs: 6 months, then securely deleted.
  • Published comments and messages: until you delete them or your account is deleted.

8. Your Data Rights

Depending on where you live, you may have the right to be informed, to access, rectify or erase your data, to restrict or object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email support@cihyiyttth.site; we respond within 30 calendar days. You may also lodge a complaint with your local data protection authority.

9. Marketing & Opt-Out

We do not send marketing communications. The only emails you will receive from us or our payment processor are essential service notices, such as payment receipts, security alerts and policy changes.

10. International Data Transfers

Our server is located in the People's Republic of China (mainland). Our payment processor, Waffo Pancake, may process payment-related data in other regions in accordance with its own privacy policy and PCI-DSS obligations. Where personal data is transferred across borders we rely on contractual safeguards with our providers and transfer only the minimum data needed to deliver the Service.

11. Children's Privacy

The Service is intended for users aged 18 and above. We do not knowingly collect information from anyone under 18. If you believe a child has provided us with personal information, contact us and we will promptly delete it.

12. Third-Party Links & Services

The Site may link to third-party websites and services. This Policy applies only to data we collect directly. We are not responsible for third-party privacy practices and encourage you to review their policies before use.

13. Policy Changes

For material changes we will provide at least 15 days' advance notice via a notice on the Site or your registered email, and update the "Last updated" date at the top of this page. Continued use after the effective date constitutes acceptance.

14. Contact Us

This Policy is provided for general information and does not constitute legal advice.