Privacy & data statement

No accounts, no login

There is no sign-up, login or profile. The question you type is used only to produce that one answer; the server keeps no user profile and builds no cross-session history.

What is stored in your browser

A single key, qu_lang_v2, in localStorage, which remembers your language choice — delete it and the default (English) returns. No cookies, no third-party analytics or ad scripts.

Where the data comes from

Everything is public: World Bank Open Data (CC BY 4.0) plus public releases from China NBS and China Customs. Neither the repository nor the database holds any internal, restricted or personal data; every row carries its source in the note field, visible on the dashboard.

What the AI layer sends out

Cloud interpretation is off by default. When enabled, your question and the locally retrieved statistics are sent to the selected provider (infinisynapse, or any OpenAI-compatible endpoint); the prompt requires it to use only the given figures and never invent any. Keys are read from environment variables only and are never committed. With it off, everything stays local.

Hosting and storage

The hosted build runs on Vercel (stateless functions). SQLite lives in /tmp and is rebuilt on cold start; the optional KV snapshot stores only the indicator rows, to speed up restores. There is no user table and no long-term retention of files you upload.

Third-party dependencies

No external CDN resources are loaded: fonts use the system stack, charts are inline SVG (no chart library), styles and scripts are same-origin, and every response carries a CSP limited to 'self'.

Your choices

Clear site data to remove the language preference. If you would rather a question never left your machine, leave “AI cloud interpretation” unchecked — local statistics keep working. Questions about data caliber belong in an issue; security reports go through SECURITY.md.

Changes to this page

This page ships with the code; see CHANGELOG.md for the history.