Privacy policy

Effective 13 October 2026. This is the privacy policy for the WeSame application at https://www.wesame.fun.

Who we are

WeSame is a community for the 16 personality types. You choose a personality, answer a concrete situation, and see how each personality type splits across the answers. After you log in, you can publish your own topics. The operator can be reached at wangweining1996@gmail.com.

Google user data we access

When you choose Continue with Google, WeSame asks Google for only these scopes: openid, email, and profile. From your Google account we access:

• your Google account identifier (the OpenID subject);
• your verified email address;
• your name, if Google provides one.

WeSame does not access Gmail, Google Drive, Google Contacts, Google Calendar, photos, files, or any other Google user data.

How we use Google user data

We use that Google account identifier, email address, and name only to provide and improve the WeSame features you asked for:

• to create your WeSame account or sign you in;
• to link Google to an existing WeSame account that uses the same email address;
• to show your name on topics you publish;
• to recognize a site administrator when that email address is configured as an administrator.

The Google access token is used once to read this profile during sign-in. We do not store the access token.

WeSame's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising. We do not sell it. We do not use it to determine credit-worthiness or for lending. We do not use it to train artificial intelligence or machine learning models.

How we share Google user data

We do not sell, rent, or transfer Google user data to third parties. We do not disclose it to advertisers, data brokers, or information resellers. We do not show your email address or Google account identifier on public pages. A topic you publish shows your display name.

Cloudflare delivers and protects the website. Cloudflare may process your IP address and the address of the page you requested in order to deliver the site. We do not give Cloudflare our database, and we do not permit Cloudflare to use Google user data for its own purposes. We disclose information if the law requires it.

How we protect it

Security procedures are in place to protect your data. The site is served over HTTPS. Email passwords are stored only as a hash, not as plain text. The sign-in cookie is HttpOnly. The database is not exposed to the public internet. The Google access token is not stored.

Other information we collect

• A guest id stored in your browser, so votes and comments stay with you before or without an account.
• The personality you select, your votes, your comments, and topics you publish.
• A session cookie named wesame.session after you log in. It is HttpOnly and lasts about 30 days.
• Server logs, which may include your IP address and the page you requested, used to operate and protect the site.

Pages load fonts from Google Fonts. When your browser requests a font, Google may receive your IP address.

You can browse, vote, and comment without an account. Publishing a topic requires you to log in, either with email and a password or with Google.

How long we keep it, and how to delete it

We keep account information, including the Google account identifier, email address, and name, for as long as the account exists, unless a longer period is required by law. When the account is deleted, we delete the email address, the name, and the Google account identifier.

You may request deletion by emailing wangweining1996@gmail.com from the address on the account. Votes and comments may remain without your name. Say in the email if you want those removed too.

Changes

If we change how WeSame accesses, uses, stores, or shares Google user data, we will update this page and the effective date above before using the data in the new way.

隐私政策

2026年10月13日生效。本政策适用于 https://www.wesame.fun 上的 WeSame。

使用 Google 登录时，我们只向 Google 请求 openid、email、profile。我们读取的 Google 用户数据只有：Google 账号标识、已验证的邮箱、姓名。我们不读取 Gmail、云端硬盘、通讯录、日历、照片或其他 Google 数据。访问令牌只在登录时使用一次，不保存。

这些数据只用于创建或登录 WeSame 账号、把 Google 绑到同一邮箱的已有账号、在你发表的话题上显示姓名，以及识别已被设为管理员的邮箱。我们不把 Google 用户数据用于广告，不出售，不用于信用评估或放贷，也不用于训练人工智能或机器学习模型。对从 Google API 收到的信息，我们遵守 Google API Services User Data Policy，包括 Limited Use 要求。

我们不向第三方出售、出租或转让 Google 用户数据，也不提供给广告商或数据经纪商。公开页面不展示邮箱和 Google 账号标识。Cloudflare 负责把网站送到你的浏览器，可能处理 IP 地址和所访问的网址；我们不把数据库交给 Cloudflare，也不允许它把 Google 用户数据用于自己的目的。法律要求时我们会依法披露。

网站使用 HTTPS。邮箱密码只保存散列，不保存明文。登录 cookie 为 HttpOnly。数据库不对公网开放。

账号存续期间，我们保留上述账号资料。你可以发邮件到 wangweining1996@gmail.com 要求删除账号，以及绑在上面的邮箱、姓名和 Google 账号标识。投票和留言可以在去掉名字后保留；如果希望一并删除，请在邮件里说明。