Clementine Kay Shao

A small privacy note

Sunday Posties

Your name, social profile, and mailing address are kept privately so Clementine can verify the recipient and mail your postie. They are not published or sold.

Wishes and introductions

Dandelion wishes and tiny introductions are saved so the site can display its shared little world. A wish is automatically labeled with the approximate city and country supplied by the website host; raw IP addresses are not attached to wishes. Wish details may be visible to people who have contributed a wish.

Visits

The site keeps the page visited, time, referring website, device category, approximate city/country supplied by the host, and a one-way hash of the IP address. Raw IP addresses are not stored. Visit records are automatically deleted after 30 days.

Clemi Tracker

An authenticated iPhone Shortcut sends a current coordinate for server-side city lookup. The precise point is discarded immediately; only the city, country, city-centroid coordinate, update time, and three-hour expiry are stored. Travel locations remain private drafts and appear on the password-protected map only after Clementine approves them. Exact dates, addresses, booking details, source messages, and companions are not stored or published. OpenStreetMap’s Nominatim service receives the coordinate only to identify its city; OpenFreeMap serves the map tiles and receives ordinary web request data such as an IP address.

Secrets records, sourcing, and corrections

Secrets publishes only owner-reviewed records with links to original or credible public sources, retrieval dates, and confidence labels. Automated checks are limited to a short list of official pricing pages and can create private draft alerts, but can never approve or publish them. The archive avoids private individuals, sensitive personal data, speculation, copied full pages, and humiliating rankings. Short quotations are attributed and linked to their original context. Citrus photographs are owner-authored; location and device metadata (including EXIF) must be removed before publication. Clementine may correct or withdraw a file while keeping its earlier approved revision private for accountability. Use the envelope on the home page to request a correction, removal, or source review.

To ask for your information to be corrected or deleted, email Clementine using the envelope on the home page.