Privacy Policy

CyberBeadArt  |  Last Updated: September 30, 2026  |  Effective: September 30, 2026

1. Who We Are

CyberBeadArt is a bead art creation tool operated by developer Longxin Peng (hereinafter referred to as "we" or "us").

Contact email: splongxl@gmail.com

2. Information We Collect

We only collect the minimum information necessary to provide our services:

2.1 Information You Provide

• Apple ID Login: When you use "Sign in with Apple", we receive your user identifier, display name, and email address (if you choose to share) provided by Apple.
• Email address or phone number: When you choose email or SMS verification, we process the address or number you provide for sign-in verification and account management.
• Nickname: You may set a display name for the community.
• User-Created Content: Bead art images and descriptions you upload to the community.

2.2 Information We Automatically Collect

• Photos/Camera: Accessed only when you actively select a photo or take one, used to create bead art patterns. We do not access your photo library in the background.
• Local Storage: Project data (bead patterns, progress) is stored locally on your device.
• App Preferences: Settings such as theme and language are saved locally on your device (UserDefaults).

2.3 Information We Do NOT Collect

• We do not collect device identifiers (IDFA/IDFV)
• We do not access precise device location
• We do not collect contacts, messages, or call logs
• We do not use third-party advertising or ad-tracking SDKs; self-hosted analytics is described in Section 2.4 and the website's Cloudflare Web Analytics in Section 2.5
• We do not track your activity across other apps

2.4 Self-Hosted Usage Analytics

We use self-hosted analytics to understand creation and community workflows, such as starting a project, completing edits, viewing artwork, rating, downloading, signing in and encountering an operation failure. Events help identify interrupted workflows and improve the experience. They may include an event name and time, feature choices, count or duration ranges, app version, OS version and platform. They do not contain artwork text, image content, email addresses or phone numbers.

Signed-in events may be associated with your user ID for this service. The server accepts them only after the account record confirms acceptance of terms version 1.1 or later, which includes the analytics explanation. iOS also follows its local Usage Analytics switch, which is on by default. Self-hosted Web analytics is off by default and requires you to enable it for the current account and browser after accepting the terms. Events generated before enabling it are not replayed.

On iOS, when the local analytics setting is enabled while signed out, events use only a session identifier generated in memory, without a user ID. It expires when the app process ends, is not written to device storage, and is not used to identify a device across apps or launches.

You can turn self-hosted analytics off under Profile → Usage Analytics in iOS or on the Web profile page. This stops future self-hosted event reporting from that client and clears unsent events without affecting core features. Switches are managed separately on each device or browser. Turning analytics off does not automatically delete events already received; deletion options are described in Section 7.

2.5 Cloudflare Web Analytics on the Website

The website uses Cloudflare Web Analytics. Cloudflare automatically injects its analytics script into web pages to measure website visits and browser performance. The current configuration enables this service while excluding visitors from the EU. It operates independently of the self-hosted analytics controls in Section 2.4. Turning off self-hosted analytics does not turn off Cloudflare Web Analytics on the website.

2.6 Daily Aggregate Statistics (Operator's Internal Dashboard)

Each day we generate aggregate statistics from records our servers already hold, to understand overall usage trends. They contain only counts and irreversible account hashes: the number of accounts registered that day and in total, the number of artworks published that day and in total, the number of self-hosted analytics events and sessions received under your settings in Section 2.4, and the set of signed-in accounts active that day.

Active accounts include only signed-in users whose server-side account record confirms acceptance of terms version 1.1 or later; signed-out sessions are counted only as sessions and never as active accounts. Account identifiers are converted with a salted, irreversible hash (SHA-256) before leaving our servers and are used only to count distinct active people on the dashboard (for example weekly and monthly actives); the key used for hashing stays on our servers and is never given to the dashboard. The statistics contain no names, nicknames, email addresses, phone numbers or other contact details, and no artwork images, titles, descriptions, comments or other content.

These statistics are stored in the operator's own internal dashboard, hosted on Cloudflare and accessible only after the operator signs in. They are not sold or provided to any third party.

3. How We Use Your Information

• Provide core bead art creation features (photo pixelation, bead placement, ironing, export)
• Enable user login and authentication
• Display your artwork and nickname in the community
• Save your creation progress and app settings
• Analyze feature usage and identify workflow problems according to the settings in Section 2.4
• Produce the daily aggregate statistics described in Section 2.6 to understand overall usage trends

4. Data Storage and Security

Your project data is stored in the local file system on your device.

Login credentials are securely stored via iOS Keychain with system-level encryption.

Community-related data is stored and transmitted through Tencent CloudBase services using HTTPS encrypted communication.

5. Information Sharing

We will not sell, rent, or trade your personal information to any third party.

Exceptions include:

• Artworks you upload to the community will be visible to other users (this is inherent to the community feature)
• When required by laws, regulations, or government authorities
• When necessary to protect user safety and public interest

6. Third-Party Services

• Apple Sign-In: Subject to Apple's Privacy Policy
• Tencent CloudBase: Used for community data storage, subject to Tencent Cloud Privacy Policy
• Cloudflare: Provides website delivery, security protection, the Web Analytics service described in Section 2.5, and hosting for the operator's internal dashboard described in Section 2.6.

7. Your Rights

You have the right to:

• Access and view your personal information
• Modify your nickname and profile
• Delete your community uploads
• Delete your account in the iOS app under Profile → Delete Account: review the warning, verify your identity again and submit deletion. The server deletes account details and associated analytics events; the account identity in published artwork, comments and feedback is anonymized. Daily aggregates generated afterwards no longer include the account; counts and account hashes already generated for earlier days remain on the dashboard and contain nothing that directly identifies you.
• Turn self-hosted usage analytics off. You may also contact us at the address below about self-hosted analytics data already received or its deletion. Independent anonymous events have no account identifier and cannot be located solely by an account.
• Revoke photo/camera permissions (via system Settings)

8. Children's Privacy

Our product is primarily intended for adult users. If you are under 14 years of age, please use this app under the supervision and guidance of a guardian, and ask your guardian to read this Privacy Policy on your behalf.

9. Policy Updates

We may revise this Privacy Policy from time to time. Updated versions will be published on this page, and we will notify you within the App for significant changes.

10. Contact Us

If you have any questions or suggestions regarding this Privacy Policy, please contact us at:

Email: splongxl@gmail.com