Privacy Notice

1. Operator and scope

This website and Motorcycle Memory are operated by 熙摩实业（上海）有限公司 under the public identity Pattern Provenance (“we”, “us”). This notice covers visits to the company website, messages sent to our support address, and the account, purchase, entitlement and download functions currently available in Motorcycle Memory.

2. Information we receive

Information you choose to provide

When you contact us, we receive your email address, message, attachments and any product or order reference you choose to include. When you create a Motorcycle Memory account, we process the email address and authentication identifier needed to operate it.

Service and transaction records

The museum may process session state, reading or visit state, purchased edition, entitlement, download and support records. Paddle handles payment methods, checkout, tax and receipts; we do not store full payment-card numbers.

Basic technical records

Cloudflare may process standard delivery and security records such as IP address, request time, requested URL, browser information and errors when hosting and protecting the service.

3. Purposes and legal bases

We process account identifiers, sessions and saved visit state to provide the service and purchased access on the legal basis of contract necessity. We process checkout, entitlement, refund and dispute records to perform the purchase contract and meet legal obligations. We process delivery, security and error records for our legitimate interests in protecting, diagnosing and improving the service. We process support messages to answer your request and, where applicable, perform a contract or comply with law. Account creation and the disclosed cross-border identity flow rely on the explicit choices recorded at registration. We do not sell personal information or use it for behavioural advertising.

4. Service providers and cross-border transfers

Cloudflare hosts, protects and delivers the website and global service data. Google Firebase provides email-password and Google identity authentication. Where enabled, choosing Microsoft sign-in also uses Microsoft to authenticate your identity through Firebase; we use only the basic identity information needed for sign-in, not access to your mailbox, files or calendar. Paddle acts as merchant of record for checkout, tax, receipts and refunds. Our email provider processes messages sent to the public support address. These providers may process information outside your country, including where their contracted infrastructure and support operations are located. We use provider contracts and other applicable safeguards; account registration separately asks for consent to the disclosed cross-border processing where that consent is required.

5. Analytics, cookies and local storage

Cloudflare Web Analytics measures page views, visits and performance using a privacy-first beacon and does not track an individual across Cloudflare customers. For internal operations, our Worker also stores daily aggregate counts using only a bounded page group, referring host category, two-letter country code, coarse device class and server-error count. These aggregates do not contain an IP address, raw user agent, full referrer URL, account identifier, cookie or payment identifier. We do not enable Google Analytics or Firebase Analytics on this website. Authentication uses Firebase browser storage to keep the signed-in state; the museum uses a strictly necessary, secure session cookie and may use local browser storage for interface preferences. A purchase you start is kept in session storage for up to one hour so sign-in can continue to the selected checkout; it is not proof of payment. These service functions are not used for advertising.

6. Retention and security

Active account and entitlement records are kept while the account or purchased access remains active. Session records expire or are revoked. First-party aggregate traffic and daily operations briefs are retained for no more than 13 months; Cloudflare service analytics follows its configured retention. Support messages are kept for the time needed to resolve and document the request. Order, tax, refund, fraud and dispute records may be retained for the statutory or limitation period that applies. Deleted-account data is removed or de-identified unless security, payment, dispute or legal obligations require continued retention. Access is limited according to operational need, and we use reasonable technical and organisational safeguards; no online system can guarantee absolute security.

7. Choices, rights and complaints

Depending on your location and applicable law, you may ask to access, correct, delete or obtain a copy of personal information, and may ask us to restrict or stop certain processing or withdraw consent. Withdrawal does not affect earlier lawful processing and may prevent us from operating an account that depends on the withdrawn processing. Send a request from the relevant account email where possible. We may verify the request before acting. You may also lodge a complaint with the data-protection or consumer authority that applies where you live. Required transaction, security or dispute records may continue to be retained where permitted or required.

8. Children and automated decisions

The account and paid publication are not directed to children below the age at which they can independently consent to online services in their location. A parent or guardian should contact us if a child supplied information without valid permission. We do not make decisions producing legal or similarly significant effects through solely automated processing.

9. App-specific privacy

Qipao Archive (旗袍檔案) has its own app privacy policy and support page. Its current device-local app has no user accounts and does not upload personal app data to developer servers. The Chinese Porcelain Archive privacy notice covers the current local Porcelain Atlas preview; a connected release will require an updated notice. These app notices do not apply to the museum’s accounts or purchases.

10. Contact

Privacy questions and requests may be sent to support@patternprovenance.com. Name the relevant website or product and do not send passwords or full payment-card details.