Bird AlbumHow we handle your data
Everything on Bird Album works without an account. You only need to sign in if you want your saved birds to sync across devices. We keep the minimum needed to make that work. We don't sell data, show ads, or send marketing email.
Without an account
- Saved birds, language and country choices stay in your own browser (localStorage, plus a cookie
ba_langthat remembers your language). They are never sent to us. - Visit statistics come from Cloudflare Web Analytics. It uses no cookies and doesn't identify individuals. We only see page views, rough country of origin, browser type and loading speed.
- Hosting: the site is hosted by Cloudflare. To keep it secure and running, Cloudflare processes request information such as your IP address, under Cloudflare's privacy policy. Operational logs used to fix errors (requested address, time, error details) are kept for at most 7 days.
What we store when you sign in
- Your email address: to identify your account and send sign-in codes.
- If you sign in with Google, the name and profile picture URL Google provides: we only request basic profile information (email, name, picture). We never read your contacts, email or any other Google data.
- The birds you save, and when you saved them: to sync them. This is the only purpose of an account.
- Your sign-in session: a random token kept in an HttpOnly cookie in your browser, valid for 90 days, so you stay signed in.
We deliberately do not store: the IP address or browser details of your session, Google access or refresh tokens, or passwords (the site has no passwords).
Two kinds of temporary data:
- Email sign-in codes: stored only as an encrypted hash, expire after 10 minutes, and expired ones are cleared daily.
- Abuse-prevention counters: to stop anyone using our site to send spam or guess codes, we count requests per IP address and limit their rate. These counters are kept for at most 1 day.
What we use it for
Only for signing in, syncing saved birds and sending sign-in codes. Never for advertising or profiling, and we never sell or rent it to anyone.
Where it is stored and who processes it
- Data is stored in Cloudflare's D1 database (primary region: Asia-Pacific). Sign-in emails are sent through Cloudflare Email Service. If you sign in with Google, the sign-in passes through Google.
- If you are in mainland China, your account data is stored outside mainland China. By creating an account you agree to this. If you don't, you can still use everything on the site without signing in.
You can always
- Download: on the My birds page, choose "Download my data" to get everything we store about you as a JSON file.
- Delete: on the My birds page, choose "Delete account". Your account, sessions and saved birds are deleted from the database immediately. The database's point-in-time recovery keeps up to 30 days of history (Cloudflare does not let us turn this off); after 30 days it is gone for good.
- Sign out: your saved birds stay in this device's browser.
- For any other question or request, write to hello@birdalbum.com. We reply within 15 working days.
Cookies
There are only two: the sign-in cookie (essential, only present when you are signed in) and the language cookie ba_lang (remembers your language). There are no advertising or tracking cookies, so there is no cookie banner.
Children
The site's content is suitable for all ages, and everything works without an account. If you are under 14, please don't create an account. If you find that a child has signed up, write to us and we will delete the account.
Changes
When anything changes we update this page and the effective date above. Significant changes (such as collecting a new kind of data) will be announced on the site.