Private shop messages
Email-verified members can send product questions to the corresponding shop. We store participant account identifiers, product and shop identifiers, message text and timestamps, plus account-linked request identifiers and hashes to prevent duplicate sending and limit abuse. Only the customer and the corresponding shop account can read or reply through the website. For platform-owned products, designated Cat Rainbows administrators act as the shop. Other community shops cannot access those conversations. Email addresses, shipping addresses and payment details are not copied into messages or shown to the other participant. Never send passwords, verification codes or card details. Conversations remain available for follow-up if a product is unlisted or a shop is paused; suspension or an ownership change revokes access. No email notifications are sent. Deleting a participant account, product or shop removes related conversations; contact us for other deletion requests. Operational backups may retain earlier records for their normal retention period.
Product questions and comments
Product comments and replies are public, including your display name, text and posting/edit times. Your email address and order or delivery details are not shown in this discussion. Email sign-in is required to post; a purchase is not required and these comments are not labelled verified-purchase reviews. Please do not include contact details, addresses, order numbers or other sensitive information. You may edit or remove your own comments. Website administrators and the relevant community shop owner may remove comments for moderation. Removal hides a comment from the public page; underlying records may remain for moderation and abuse handling. We also store account-linked request identifiers and hashes to prevent duplicate writes and limit spam. Account deletion removes comments linked to that account; replies written by other people remain, without the removed comment's author label. Contact us for privacy requests.
Real platform purchases · Update 2026-10-20
Selected platform-owned listings now offer real PayPal checkout at /checkout. This update supersedes the older blanket description of /shop as simulated. Community-shop previews and older demo orders remain simulations. For real purchases, we store the buying account reference, contact email, immutable product/SKU/quantity/price/shipping/terms snapshot, payment references/status and fulfilment details. For physical orders we also store the recipient address and provide it to PayPal and use it for fulfilment. These records are private to the buyer and platform administrators, not community sellers. PayPal processes payment credentials; we do not store card numbers or PayPal passwords. Checkout does not send an order-confirmation email: keep the purchase reference and use My purchases. A minimal checkout draft may be saved in this tab's session storage for safe retries; it is not an advertising tracker. Real order and financial records are not subject to the 30-day demo expiry. Account deletion removes account access and anonymizes the ledger's account association, but does not automatically erase contact/fulfilment/transaction records needed for delivery, refunds, disputes or required recordkeeping. Contact us for a privacy or deletion review. A payment test explicitly labelled “no goods” requires no delivery address and includes no product or shipment.
Detailed privacy information
Limited beta · Updated 2026-10-19. Operator: Shenzhen Nanshan District Damo Fruit Store (an individually owned business; English rendering of the registered Chinese name), China. Contact for privacy, complaints and deletion: xiamoqiu123@gmail.com.
Community shops
Added 2026-10-19: verified members can create a shop. Active shop names and descriptions, approved listings and selected gallery images are public. Registration emails are not published. Drafts, unapproved listings and staged images are private to their owner and administrators. Editing an approved listing removes it from public display until it is reviewed again. Do not put private contact details in public descriptions.
Community-shop demo orders differ from the platform-owned examples described below: the authorized buyer/browser, corresponding shop owner and administrators can view the supplied order-contact email and delivery details. Other shop owners cannot access them. Fictitious test details are recommended: community checkout takes no payment, sends no order emails and provides no downloads or real shipments. Sellers cannot see a buyer's separate account email or administrator notes. Demo contacts still expire after 30 days. No seller payment credentials are collected. Account-deletion requests immediately hide owned shops and listings; background deletion removes their product media and shop records. Other buyers' order snapshots may remain until their usual expiry, without granting a replacement seller access.
Cloudflare Turnstile checks browser and network signals to reduce automated abuse before sending sign-in codes. Its verification token and IP address are submitted to Cloudflare for server-side validation. Cloudflare Turnstile
Information and purpose
We process your email for sign-in codes and account access; nickname, bio, avatar, posts, photos, videos and interactions to provide the community; reports to review abuse; session cookies and hashed IP identifiers to secure sign-in and limit abuse. Email verification is not marketing consent.
First-party visit statistics
We count rendered community pages, public albums and selected pages to understand readership. Cloudflare supplies approximate country and first-level region information from the network request. No browser geolocation permission is requested. The server processes the IP address transiently to create a secret-key HMAC identifier; this statistics feature does not store the raw IP, email, cookies, precise location, full URL, query parameters or referring link, and does not associate statistics with your account. HMAC identifiers are pseudonymous, not a guarantee of complete anonymity. They are kept for up to 30 calendar days for approximate unique-IP counts; deduplication gates are kept for up to about two hours. Aggregate page/date/region counts are retained for cumulative reporting, accessible only to administrators. No analytics cookies or persistent browser tracking ID are added. Requests with DNT or GPC signals are excluded, as are recognized bots and signed-in administrators; script blockers can also prevent recording. Shared IPs, VPNs and changing addresses affect estimates.
From 2026-10-21, the same pseudonymous IP identifier may also be associated with approximate country and first-level region for regional unique-IP estimates, retained for up to 30 calendar days. Only aggregate counts are shown to administrators; historical regional unique counts cannot be reconstructed.
Visibility
Your email is not included in public author profiles. Avatars, nicknames and bios are public profile information. Published posts are visible to visitors with site access; drafts and private posts are owner-only. Site operators can access data as necessary to administer the service. Do not upload highly sensitive information.
Providers and locations
Cloudflare provides hosting, D1 database, R2 image storage and image processing. Mux processes and serves videos. Verification emails are sent through Resend, which receives the recipient address and verification message for delivery. The sending domain uses Resend's US East region. A NetEase 163 mailbox is retained as a disabled backup transport; it is not used for automatic retries. Processing may occur outside your country, including operator access from China. Provider processing agreements and applicable international-transfer safeguards must be verified before a public launch. Cloudflare、Mux
Saved shop details
If you choose to save a contact email or delivery addresses in your shop account, these details are stored privately with your account in Cloudflare D1. They are not included in public profiles or product pages. You can edit or remove saved addresses and clear the optional contact email. Changes do not rewrite existing order records or automatically replace the delivery address chosen in PayPal or your wallet. These saved preferences are removed when account deletion completes.
Retention and deletion
Account content is kept until you remove it or delete your account. Trash remains until permanently cleared. Account deletion immediately revokes sessions and hides posts, then background jobs remove R2/Mux media and database records. Provider failures can delay cleanup; failed jobs retry. Login challenges expire after 10 minutes and are cleaned after expiry plus one day; sessions expire after seven days. Provider backups, existing signed video links, screenshots or copies made by others may not disappear immediately. Our thumbnail cache lasts up to one day internally, but every request still requires a current permission check.
Your choices
You can edit your profile, control post visibility, report content and request account deletion through the profile dialog. Where applicable, you may request access, correction, portability, restriction or object to processing, and complain to your local data-protection authority.
Processing grounds and requests
Account access and hosting are necessary to provide the service you request. Abuse prevention and report review serve the legitimate interests of operating a safe community, subject to applicable law and your rights. We do not sell your personal data or use registration as consent to advertising. Contact us to request a copy, correction or deletion of your data.
Independent backups
Manual database and image snapshots exist on the operator's computer, and an isolated recovery-test database exists in Cloudflare. These copies may contain email addresses and private content; they are used for recovery testing, not marketing, and are not automatically updated by account deletion. No automated backup expiry or independent video backup is currently provided. Contact us about access or deletion of backup data. Restorations must reapply subsequent deletions before serving data.
Administrator download tool
The optional public-link download tool is restricted to the site administrator. Only after explicit confirmation, it sends the submitted share link to the enabled resolver: either the public Xiaohongshu mobile page or the fixed external resolver api.mu-jie.cc. Links may contain share/access parameters. Production currently uses the external resolver; direct public-page parsing is not enabled there. When direct parsing is enabled, a data-format or transport failure may fall back once to api.mu-jie.cc; explicit login or security requirements stop that request without fallback. Neither route receives your Cat Rainbows email, login cookie or verification code; the tool does not read browser cookies. Media is streamed through Cloudflare to your browser, not stored in R2 or sent to Mux. Temporary titles, public author names and media URLs expire after 15 minutes and are cleared by the two-minute cleanup schedule. Minimal administrator ID, time and usage counters are retained for abuse and quota checks for up to about two days. Source/provider records follow their own practices; we cannot delete them on their behalf. Optional use does not affect community access.
Optional payments
The separate payment page offers one-time, user-selected USD subscription support, not automatic renewal or paid membership. It connects to PayPal only when you choose to continue to checkout. PayPal receives the order amount, currency, description and a random order reference; it processes payment and any payer details under its own privacy statement. We do not collect card numbers, security codes or wallet credentials. Our private ledger stores the linked site account ID, amount, currency, transaction references, environment, status and timestamps; PayPal payer names, addresses and email addresses are not copied into it. Only you can view your own orders through the website; administrators can review the minimal ledger. Account deletion removes the account association, but does not automatically delete transaction records needed for reconciliation, refunds or applicable record-keeping. Transaction records currently have no automatic expiry; contact the operator for related requests.
Digital photograph purchases
Added 2026-10-19: the separate USD 1 digital photograph requires the existing email sign-in. Its private payment record is linked to that account and an immutable product/file/license snapshot, including a random purchase request reference, format, dimensions and version. No delivery address is requested and no order or download email is sent. PayPal processes the real payment as described above; card and wallet credentials are not copied to our database. The browser may keep a per-account checkout reference in session storage to retry the same purchase safely; it is not a sign-in token or advertising identifier. The original JPEG is stored privately in Cloudflare R2; our server checks account ownership and completed-payment status before each download. Site administrators can see the minimal financial ledger. Real payment and purchase snapshots are separate from 30-day demo orders and currently have no automatic expiry, for reconciliation, refund review and record-keeping. Account deletion removes the account association and download access but does not automatically erase or refund the financial record. Contact the operator for related access, correction or deletion requests.
Internal account notes
Site administrators may keep short operational notes linked to an account for support and account administration. Notes are stored separately from public profiles, are accessible only through administrator-authorized interfaces, and are not shown to members, shop owners or public visitors. Notes may be edited or cleared; they are removed with the corresponding account during account cleanup. Save receipts contain a payload digest and revision, not another copy of the note. The administrative audit records the actor, account reference and time without copying note text. No note content is sent to PayPal or included in browser persistent storage. Administrators should avoid unnecessary sensitive personal information in notes. Contact the operator for relevant access, correction or deletion requests.
Requests
Email the contact above for privacy requests. Proportionate identity verification may be required before disclosing account data. Responses will follow applicable statutory deadlines.
Advertising and cookies
As of this update, Google AdSense advertising is not enabled on Cat Rainbows. This preparation notice does not activate advertising, Google advertising cookies or a consent platform. The first-party visit statistics described above are separate from advertising measurement.
If Google advertising is enabled later, Google and other enabled third-party advertising partners may use cookies to select and measure ads based on visits to this and other websites. Google's advertising cookies can allow Google and its partners to personalize ads across sites. Advertising requests may involve IP addresses, browser/device information and page context under those providers' policies and the applicable consent or opt-out choices. This is different from our first-party statistics, which do not add analytics cookies.
You can review how Google uses data on partner sites, manage Google's personalized advertising through My Ad Center, and review participating companies' choices at YourAdChoices. These external settings do not replace any consent controls needed on this site and do not necessarily stop all ads or cookies.
Before activating advertising, we need to update this notice for the partners and processing actually enabled and configure the consent and privacy controls required for the locations we serve. Email registration and verification are not consent to personalized advertising. If you have questions about this planned change, contact us.
Limited beta
This beta is limited to 100 accounts. Provider backups and international-transfer arrangements require case-specific review; this notice is not a certification of legal compliance.
Shop demo
No registration is required to try the demo checkout. When you submit an order, we collect the contact email, recipient name, street address, city, state/region, postal code where required, and country that you enter. We do not ask for a phone number, card or PayPal details. Only submit your own information or information you are authorized to provide; fictitious test details are welcome because no goods will be shipped. The email is an unverified contact field, not proof of identity, an account registration or an order-lookup password. We do not send demo order emails. An essential first-party HttpOnly browser cookie protects guest order access; only a digest is stored with the order. Clearing this cookie, changing browser or its expiry removes guest access. A signed-in account may instead own its new orders; entering an account's email never grants access to its orders. New contact-enabled demo orders and their history are automatically removed after 30 days; the older fictitious-recipient examples are unchanged. Our server also stores an account ID when applicable, example product and amounts, status, timestamps and a secret-key-protected IP digest for abuse limits, not a raw IP. Contact details are stored privately in our Cloudflare-hosted database and shown only to the authorized customer/browser and website administrators. Administrators can search the supplied contact email, view addresses, manage simulated status and keep internal notes; notes are not shown to customers. Do not put additional sensitive personal data in notes. Deleting a linked account removes its owned demo orders. None of these records are real PayPal transactions, sales revenue or shipments; contact details are not sent to payment or shipping providers.
Administrator shipment tracking
A separate administrator-only tracking test can save authorized tracking numbers, carriers, status, limited event descriptions and timestamps in our Cloudflare database. Saving a draft does not contact a carrier or tracking provider. Only after an explicit subscription confirmation does our server send the tracking number and carrier to 17TRACK; it does not request or submit customer names, phone numbers or shipping addresses. 17TRACK may process shipment information under its privacy policy. Returned event text may include carrier-provided location details. Records are private to the administrator who created them, not public community content. Deleting the linked account removes local tracking records; it does not automatically delete records retained by 17TRACK. Contact us about correction or deletion requests. API credentials stay on the server and are never included in browser responses.