Overview›Privacy policy

Privacy policy

How this site handles information about you, and how you can control it.
Effective: 1 January 2026 · Last revised: 近期
Applies to: every page of the site (library index, category browsing, entry reading, writing and publishing, downloads and caching, your profile, the admin console).
Contents
    In one sentenceWe collect only the information needed to keep this library running: your account,<br>the content you post and take part in, and a small amount of on-device data used to remember your sign-in state and reading preferences.<br>This site carries no third-party advertising, no third-party analytics and no social plug-ins, and it will never sell or supply your information to anyone.<br>You can choose "Essential only" in the cookie notice, so that the site writes no offline content to your device.

    1. What we collect

    The site collects only three kinds of information, all of them to keep the library running; none of it is used for advertising or user profiling.

    1.1 Account information

    • Email address: used as your sign-in credential and required at registration.
    • Password: kept on the server only as a bcrypt hash. Nobody can recover your original password from it, administrators included.
    • Display name, avatar, biography and title: optional, entered by you in your profile or on the admin side, and shown publicly on your profile page and in entry bylines.
    • Registration time, account role (ordinary user / administrator) and ban status: used to decide permissions and to handle site moderation.

    1.2 Content you create and take part in

    • The titles, summaries, tags, bodies, attachments and background music of series, middle chapters, entries and the smallest units.
    • Revision history: every save of a body leaves a snapshot recording the editor, the revision number, the edit summary and the time. This is a necessary mechanism of a wiki-style site, used for tracing and reverting, so it is not deleted on its own.
    • Comments and replies: content, author, position in the thread and time.
    • Upvote / downvote records: they record that an account has voted on an entry, to prevent repeat voting; only the aggregate score is shown publicly, never "who voted what".

    1.3 Usage records

    • View counts: cumulative counters at entry level; they are only added to the entry and never record "which entries an account has read".
    • Download records: who requested an entry’s export file and when, used for de-duplication and quota control.
    • Session records: a random session identifier (connect.sid), the sign-in state and an expiry time, kept in the server’s session store and expiring after 30 days.

    1.4 Information we do not collect

    The device fingerprint is the single exception (see the next section): it is used only to prevent abuse, never for advertising profiles, and never across sites. Beyond that, the site does not collect your precise location, address book or browsing history, and it includes no third-party tracking; server logs are read by hand only when troubleshooting and are not used to analyse individual behaviour.

    1.5 Device fingerprint (used only to prevent abuse)

    Opening a fresh account after being banned is the most common and the hardest form of abuse on this site. To block it, the sign-in page computes a device fingerprint inside your own browser: several browser and screen characteristics (browser identifier, platform, language, screen size and colour depth, time zone, CPU thread count, memory tier, touch points, and the rendering characteristics of Canvas 2D and WebGL) are joined into one string, mixed with a random number that exists only on your own machine, and put through a one-way hash to give a 16-character hexadecimal identifier.

    • It is a pseudonymised hash: nobody can work back from it to the original characteristics above, and the site never compares it with any external data;
    • It has exactly one use: at sign-in and registration it decides whether this device has been banned by site moderation, and tells you the reason if it has; browsing any page of the site is unaffected (anonymous reading of the library is a hard floor — we will not stop people reading the material just because a device is banned);
    • It plays no part in advertising, profiling or recommendation ranking, and it is not used across sites: because of the on-device random salt, the value computed by the same browser on different sites cannot be matched up;
    • In the admin area, moderators can see "this identifier, the ban reason, the expiry time and the display names of accounts that have signed in on this device"; they cannot see your password, nor what you have read;
    • If you believe a device has been banned by mistake (a school computer room, an internet café or a shared tablet at home, for example), leave a message on the discussion page or contact an administrator to appeal; we will check it by hand and lift the ban.

    2. Cookies and local storage

    A cookie is a small piece of text that the browser stores on your device. The site uses cookies only to remember who you are and how you would like pages to look; they are all first-party data written by the site itself, with no third-party cookies at all. Everything is enabled by default (including caching entries you have read on your device), so you do not have to make a choice before opening a page; if you would rather not keep that offline content, change it to "Essential only" under "Cookies and local storage" in your profile.

    NameWhereCategoryPurposeRetention
    connect.sidCookieEssentialThe sign-in session identifier. Without it the signed-in state cannot be kept.30 days
    nzep_userCookieEssentialAn on-device snapshot of "currently signed in", so that the top bar does not flash back to "signed out" when you change page and shows the right state while offline.180 days
    nzep_siteCookieEssentialCaches the site’s appearance settings (site name, brand image, announcement, footer text), so that every page opens with the right look.180 days
    nzep_introCookieEssentialRemembers that you have already seen the opening animation, so that it does not replay.30 days
    nzep_consentCookieEssentialRemembers whether you chose "Accept all" or "Essential only" in the cookie notice.180 days
    nzep:doc-langlocalStorage on your deviceEssentialRemembers which reading language (Chinese or English) you chose for the privacy policy or the site notices, so that the next visit opens in the same one.Until you clear it
    nzep_vidCookieEssentialA random identifier used to count daily visitors (it contains no account or device information).1 day
    nzep:session, nzep:settings, nzep:sitelocalStorage on your deviceEssentialSession snapshot, interface and reading preferences (font size, the automatic-caching switch and so on).Until you clear it
    nzep:dfp:saltlocalStorage on your deviceEssentialThe random salt used for the device fingerprint. Generated only on your device and used only in computing the fingerprint here (it keeps the identifier for one browser stable while making it impossible to match with other sites).Until you clear it
    nzep:cache:*localStorage on your devicePreferenceCaches the bodies, tags and list data of entries you have read, so that they appear at once when reopened and can be read offline.Until you clear it
    Page shell cacheBrowser Cache StoragePreferenceStores the page shell, styles and scripts through the site’s offline component, to speed up page changes and support offline reading.Replaced automatically when the site updates
    Short-video pre-cacheBrowser disk cachePreferenceAfter you arrive, the first few seconds of the most recent short videos are fetched in advance (8 MB by default, each video at most once every 6 hours), so that clips start at once and swiping is smooth. Nothing is pre-fetched when "Essential only" is chosen, when the browser’s data-saver mode is on, or on a 2G/3G connection.Video files are cached long-term by file name and can be cleared in your browser settings

    When you choose "Essential only", the site stops writing the data marked Preference in the table above (offline content cache, page pre-fetching and short-video pre-caching), while the essential data for signing in and appearance is kept — otherwise the site could not work. You can change back at any time under "Cookies and local storage" in your profile; clearing this site’s data in your browser settings also withdraws every choice, and after clearing it the site behaves as on a first visit, so you will need to sign in again.

    About the human checkBefore signing in or registering, you complete a simple addition or subtraction question set by the site on the page itself (the digits are drawn in a distorted form and you can swap the question at any time); once passed, the check is valid for 5 minutes. The check runs entirely inside the site and uses neither Cloudflare nor any third-party verification service, so your network information is not handed to a third party.

    3. How we use this information

    • Providing the account and sign-in service, and deciding which content you can see and change;
    • Displaying entries, author bylines, update times and revision history, so that content can be traced;
    • Counting views and aggregating scores, for sorting and recommendations;
    • Controlling the download queue and the export quota, to stop content being scraped in bulk;
    • Handling reports, bans and fault investigation, and maintaining order and safety on the site.

    4. What we will not do

    • We do not sell, rent out or exchange your personal information;
    • We do not include third-party advertising, analytics, comment or social plug-ins;
    • We do not read your behaviour on other websites and do not track you across sites;
    • We do not display your email address publicly (unless you have written it into your display name, biography or a body yourself);
    • We do not disclose your information to third parties other than where the law requires it.

    5. Retention and security

    • Retention: account information is kept until the account is deleted; bodies and revision history are kept with the entry; download records are kept until you clear them or the account is deleted; session records expire after 30 days.
    • Passwords: stored with a one-way bcrypt hash and impossible to reverse.
    • Transmission: the session cookie is set with HttpOnly and SameSite=Lax, so page scripts cannot read it and cross-site requests do not carry it automatically.
    • Access control: admin endpoints are open only to administrator accounts; uploaded content and private directories are not exposed through a static directory.
    • But please understand: no website is absolutely reliable in security. Use a separate password for this site and do not reuse the password from another important service.

    6. Your rights

    RightHow to do it
    Access and correctionChange your display name, avatar, biography and password in your profile; your own entries can be edited at any time in the writing studio.
    ExportExport an entry as TXT text under Downloads and cache and save it locally at any time.
    Deleting contentYou can delete content you created in the writing studio; deleting it also removes the comments, ratings and revision history beneath it, and cannot be undone.
    Clearing on-device dataThe downloads page offers "Clear on-device cache"; clearing this site’s data in your browser settings removes all cookies and local storage.
    Withdrawing consentChange to "Essential only" under "Cookies and local storage" in your profile, or simply clear this site’s cookies in your browser.
    Deleting your accountContact an administrator through the site’s discussion page; once the account is deleted its information is removed, while content already published and cited by others may remain in the form of an "anonymous author".

    7. Minors

    The site is a library for general readers, is not designed for children, and does not actively collect the personal information of minors. If you are a minor, please use the site with the knowledge and consent of a guardian, and avoid putting contact details or other personal information into biographies, comments or bodies.

    8. Changes to this policy

    When the site’s features change, this policy is updated to match and the last revised date is shown at the top of this page. Significant changes to what is collected or to how it is used are announced in the site-wide announcement bar. Continuing to use the site means that you accept the updated policy.

    9. Contact us

    If you have a question about this policy or wish to exercise the rights above, leave a message on the site’s discussion page or contact an administrator you know on the site. We will reply within a reasonable time.

    This page is an explanatory document written by the site itself to tell readers how their data is handled; where it conflicts with mandatory local law, the law prevails.