
Privacy policy
We follow data minimisation: collect only what is needed to operate a feature, keep the service secure and improve content. This policy separates data stored by FindTuTu from data processed by Google, YouTube and other providers.
Effective and last updated: 26 August 2026
Data FindTuTu currently stores
- Anonymous first-party events such as impressions, opens, video opens, shares and deep reading. Our event store does not retain IP addresses, email addresses or user agents.
- Wish text, edition language, a one-way hash of an anonymous device identifier, time and workflow status.
- Video-report context, issue type, optional explanation and the same kind of hashed anonymous identifier.
- Administrative, publishing and diagnostic logs required for security and quality assurance.
Data on your device
Language, playback choices, prompt state, blind-box history and some drafts may be stored in localStorage, sessionStorage or an essential cookie. Clearing site data removes them; without an account they are not synced across devices.
Google Analytics, AdSense and YouTube
We load Google Analytics and Google AdSense. Google may process cookies, device identifiers, approximate location and interaction data under its own policies for measurement, security, ad delivery or personalisation. The YouTube player loads when you choose to play; YouTube/Google may then process playback and account data.
Google sign-in
Only after you choose to sign in, FindTuTu receives a stable Google account identifier, verified email, display name and avatar. We never receive your Google password or request unrelated Google data. Sign-in creates a secure session lasting about 30 days for membership, saves, notification choices and synced settings. You may sign out, revoke Google access or request account-data deletion at .
Use, retention and disclosure
We use data to provide features, prevent abuse, repair videos, improve recommendations, measure performance and meet legal obligations. We retain it only as long as needed for those purposes, security audits or law. We do not sell personal data; disclosure is limited to service providers, legal requirements, protection of rights or your consent.
International processing, security and choices
Cloud, Google and YouTube services may process data outside Hong Kong. We use access controls, hashing, secret management and least privilege, but no internet system is absolutely secure. You can block optional cookies, clear local data, stop submitting material and, once accounts launch, request access, correction or deletion.
Children and changes
FindTuTu is a general-audience service, not directed specifically to children under 13. Material changes will be dated and announced appropriately; a major new use of sign-in data will require any renewed consent that law or platform policy requires.