1. Who the data controller is

This site is operated independently by me (writing under the pen name Frost Kim). It is not a company, not a foundation, not an anonymous team — it's one person plus a long-form content plan. The person who handles reader data is the person whose signature is at the bottom of these emails.

Email: privacy@wechibi.com.

2. What I collect

The cleanest thing is to tell you up front. This site receives the following:

  • Access logs. The VPS (Caddy) logs each request's IP address, URL, HTTP status code, User-Agent, and Referer. This is standard access-log data any web server keeps; it's used to spot malicious crawlers, debug failures, and count total daily traffic. Logs roll daily on the server and are overwritten automatically after 30 days.
  • Google Analytics 4 data. This site uses Google Analytics 4 (measurement ID: G-PZEDWR568V) with anonymize_ip: true enabled, which means Google truncates your IP before storage. GA4 collects page views, time on page, bounce rate, device type, and traffic source as aggregated metrics. It cannot identify you personally.
  • The site's cookies. The only cookies I set are GA4's own functional cookies (_ga and _ga_*), used to recognize "this is the same browser" across visits. Default lifetime: 13 months. The site has no ad cookies, no remarketing cookies, no cross-site tracking cookies.
  • Whatever you write to me. When you email corrections@wechibi.com or privacy@wechibi.com, the body, attachments, and your email address land in my mail client. They are used only to reply to you.

3. What I do not collect

This section matters more than the last one:

  • No account credentials. The site has no registration flow, no login page, no user system. Any page asking you to "log in to Hodler's Handbook with a password" is phishing.
  • No private keys, seed phrases, or wallet credentials of any kind. The site's tools (seed phrase checker, risk exposure calculator) run entirely in your browser and do not upload any input to any server. Closing the page destroys the in-memory data.
  • No email list, no newsletter, no promotional emails. There's no subscribe form on this site, so you cannot leave your email and find it on a list. Unless you write to me first.
  • No ad slots, no ad SDKs, no affiliate ad networks. So there are no third-party ad cookies riding alongside GA4.
  • No fingerprinting. The site uses no canvas fingerprinting, no audio fingerprinting, no font probing or other de-anonymization methods.

4. Who I share data with

Three sharing channels, named up front:

  • Google LLC. GA4 data flows to Google's servers (their handling is covered in the Google Privacy Policy). I only read aggregated reports in the GA4 dashboard; I do not export raw data.
  • Cloudflare. This site uses Cloudflare for authoritative DNS only (Cloudflare proxy is not enabled). When your browser resolves wechibi.com to an IP, Cloudflare's DNS servers handle that query, but Cloudflare cannot see your subsequent HTTP request content (traffic does not flow through CF).
  • VPS provider. The site is hosted on an Aliyun Tokyo node. The provider may see encrypted HTTPS traffic at the system level (they can see volume, not content). The site does not voluntarily provide any user data to the provider.

The site does not share data with any of the following: ad networks, data brokers, user profiling services, remarketing platforms, cryptocurrency exchanges (except the referral relationship — see next section), or regulators (unless required by valid legal process in the applicable jurisdiction).

5. The Binance referral link and your data

When you click any /go/binance.html link on this site, your browser is sent to accounts.binance.com with the parameter ref=BN16188. From that moment:

  • You are no longer on the wechibi.com domain; you are on Binance's pages and subject to Binance's privacy policy (see binance.com Privacy Notice).
  • Binance uses ref=BN16188 to identify "this user was referred by Frost Kim". I see only one aggregate number: the total count of users who signed up under this referral code and completed their first trade, plus total commissions. I cannot see your Binance account, email, phone number, trade history, or any identifying information.
  • The site does not sell "which readers visited /go/binance.html" to anyone — and cannot, because it does not log "which IP clicked /go/binance.html" with that kind of referrer correlation.

If you would rather no one knew you came from Hodler's Handbook, just type binance.com directly into the address bar.

6. Your rights

  • Disable cookies. Disable third-party cookies or GA4 cookies in your browser settings; this site's GA4 measurement will stop working, and content browsing is unaffected. There is no "accept cookies to read" interstitial.
  • Disable GA4 tracking. Install Google's official GA Opt-out Browser Add-on; once installed, GA4 on this site will not send any data to Google.
  • Data access and deletion requests. If you believe this site has collected data that identifies you in a specific visit (in practice this is only possible through email correspondence), email privacy@wechibi.com with a deletion request. Include reasonable identifying information (such as a prior email subject line). I will respond and delete within 30 days.
  • EU readers (GDPR) and California readers (CCPA). If your jurisdiction grants you additional rights (access, portability, objection to automated decisioning, etc.), the same email address handles the request. EU and California reader requests get the same treatment.

7. How long data is kept

  • Caddy access logs: roll daily and overwrite after 30 days.
  • GA4 data: the dashboard is set to the maximum 14-month retention for event-level user data (older data is aggregated and de-identified automatically).
  • Email correspondence: kept in my mail client and not actively deleted, but you can request deletion.

8. Minors

This site's content concerns crypto assets and may not be suitable for minors in your jurisdiction. The site does not actively offer services to minors or deliberately collect minors' data. If you are the guardian of a minor who has left information through the site's email channels, you may request its deletion.

9. Policy updates

When a substantive change happens to this page (adding new data collection beyond GA4, switching hosting provider, adding a new third-party sharing recipient), I will:

  • Log a record on the Corrections page with date, change summary, and effective date.
  • Update the "Last updated" date at the top of this page.
  • For material changes (such as adding an ad SDK — which is not on the roadmap), post a banner at the top of the home page for at least 30 days.

The version you are reading is dated 22 May 2026.

10. Contact

Privacy and data requests: privacy@wechibi.com

Corrections and citation issues: corrections@wechibi.com or the Corrections page

Security reports: see /.well-known/security.txt (RFC 9116 standard disclosure policy)