Privacy Policy

1. Scope and operator

This policy applies to the Sheng Qian Zhi website. The site is operated by an individual under the public brand “省钱志”. Contact us at shengqianzhi.my@gmail.com.

2. Data we handle

Emails you send us; the nickname and score you choose to submit to the game leaderboard; the name, email and text you enter when leaving a comment (“Letters from readers”); and technical logs needed to run the site. Page view counts are aggregated per page per day and contain no personal data. Reader polls have ended and we no longer collect new voting data (data left from before is described in section 5).

3. How data is generated

Data is generated only when you email us, submit a game score, leave a comment, or browse the site normally. We do not provide a contact form, email subscription or reader accounts; prices on “大马物价” (Malaysia Prices) are entered by our own editors, not submitted by readers, and the comparison tool on that page calculates only in your browser.

4. How we use data

To reply to messages and handle corrections; to show the public leaderboard and prevent score abuse; to publish and moderate comments; to count which pages are read so we know what to update first; and to protect and operate the website.

5. Discontinued reader polls

Our former reader polls required signing in with a Google account; they have now ended and Google sign-in is no longer offered. The data left from before is limited to an irreversible digest of your account ID (HMAC-SHA256 with a site key), your first name, an anonymous device marker, and voting records with the two-letter country code at the time of voting; we never requested or stored your email address, profile photo or IP address.

This voter data is no longer used for any purpose and is kept only until the administrator deletes it or you ask us to; once deleted, the votes become anonymous counts not linked to any account.

6. Cookies and browser storage

We no longer set the reader-poll cookies (sqz_device, sqz_voter, sqz_oauth); any set earlier expire on their original schedule, and you can delete them in your browser at any time.

sessionStorage notes which pages have already been counted in this tab (cleared when the tab closes). LocalStorage keeps tool inputs, game records, and sound and reading preferences on your device only; they are not sent to us. If you choose to remember your comment details, WordPress stores your name and email in browser cookies. You can clear these through your browser at any time.

7. Third-party services

Fonts: the site may load fonts from Google Fonts and jsDelivr, so your browser sends them requests (including your IP and browser details); the administrator can switch to system fonts only. Exchange rates: if the travel budget calculator cannot get rates from our site, your browser may fetch public rates directly from jsDelivr or currency-api.pages.dev; the amounts you enter are not sent. Fuel prices on “大马物价” (Malaysia Prices) are checked against the government’s open data at data.gov.my by our server; that check carries none of your data. We do not use website analytics, advertising trackers, or social media SDKs.

8. Service providers and cross-border processing

Email providers, Google, WordPress, web servers, Hostinger hosting and CDN services may process email or necessary technical data through their own infrastructure. We do not make promises about server location that we cannot verify.

9. Retention

Contact emails are normally kept for no longer than 24 months. Voter data left from before the polls ended is kept until the administrator deletes it or you ask us to, after which the votes become anonymous counts. Game scores are kept for up to 365 days; when you submit a score, the server makes a keyed digest of your IP to limit how often requests can be made, and it is deleted automatically within an hour. Comments are kept until deleted, and WordPress also records the commenter’s IP and browser details to prevent spam. Page view counts are kept for about 400 days. Cookies expire as described above. Technical logs follow hosting security and operations practices.

10. Security

Minimal collection, keyed digests for account IDs and device markers, HTTPS, signed session cookies, a sign-in flow protected by state and PKCE, access control and software updates. No internet service can guarantee absolute security.

11. Brand, conglomerate and founder information

Brand, conglomerate and founder pages compile business-related information from public sources (official websites, annual reports, official press releases and reputable media), such as founders’ names, founding stories and public statements, with sources cited. We do not collect private contact details, home addresses or family matters. The people concerned, or their representatives, may contact us to correct or remove information.

12. Your rights

Reader polls have ended, and the “Delete my sign-in data” button has been removed with them. To delete your old voter data, or for other access, correction or deletion requests such as emails or comments, please contact us by email; we normally reply within 21 days.

13. Children

This site is not directed to children under 13, and we do not knowingly collect their personal data.

14. Policy updates

We will update this page and its last-updated date when our operating model, third-party services, or data handling changes.

15. Contact and professional review

Email shengqianzhi.my@gmail.com with questions about this policy.

This policy follows the principles of Malaysia’s Personal Data Protection Act 2010 (PDPA) to describe our general data practices, and is not legal advice. If our operations or data processing change materially, we will reassess it and seek advice from a professional familiar with Malaysian data protection requirements when needed.