MiniShomiWorld Privacy Policy
This is an English translation for your convenience. The Chinese version is the binding text: if the two differ, the Chinese version prevails.
Last updated: 27 September 2026 (new: thank-you comments use your public name and linked social account; adding an e-mail address and Yeyu's weekly letter; linking a TikTok account)
1. Who collects your data
Pain Point Technologies Co., Ltd. (痛點科技股份有限公司) (business ID 62152635; address: 5F-3, No. 45-1, Chang'an West Road, Taipei; phone: +886 2-2556-6810; "we") collects, processes and uses your personal data under Taiwan's Personal Data Protection Act.
2. What we collect
| Category | What | From |
|---|---|---|
| Account | The e-mail you sign in with; with Google or LINE sign-in, the name and user ID that service provides. Members who sign in with LINE can also add an e-mail address (confirmed with a 6-digit code; the code is kept only in a form that can't be reversed, for 10 minutes); after that they can also sign in with a code sent to that e-mail | LINE, Google or e-mail code sign-in; what you enter in account settings |
| Member details | Public name, age statement (18 or over, or under 18 with a legal guardian's consent) and when you made it, the version of the terms you accepted and when, e-mail notification settings, plan (free / Companion), when you joined, and where you first came to the website from (e.g. instagram, google — the name only) | You, or generated by the system |
| Magic ledger | The time, amount and reason of every magic credit, use and return | Generated by the system |
| Submissions | Title, story direction, language, anonymous or named choice, automatic review result | You |
| Payments | The payment service's customer ID, order and subscription IDs, amounts, status. Not your full card number | Payment services (Recur / PAYUNi) |
| Social accounts | The Instagram / Threads / TikTok account you linked with the follow spell (account name and the account ID the platform provides); when you send the spell in a message to our official TikTok account, we only read the spell and your account name in it to link the account, and reply once in the same conversation; we don't keep the message; points records created by your comments under MiniShomi's official posts (post ID, comment ID, time); when you tag a friend, only a code computed from the platform and their account that can't be reversed, used to avoid counting the same friend twice — not your friend's account name. If you comment on an official Instagram post without a linked account, or on an official Facebook post, we may send you one invitation by private message on that platform (at most one a day per person); the sending record keeps only a code of the account that can't be reversed, not the account name or the comment. You can reply to ask us to stop, and we add you to a do-not-message list. Members who linked Instagram get a message from Yeyu when a comment earns magic (one per comment, at most 10 a day) saying how much magic they got and how much they have; this can be turned off in "My cottage › Social magic" | You; comment notifications from our official accounts |
| Technical data | The sign-in session cookie; the bot check result before an e-mail code is sent (Cloudflare Turnstile); IP addresses held in memory for rate limiting (never written to the database, cleared when the program restarts); server error logs | Your browser |
| Statistics | Daily visits per source (e.g. Instagram, search, typed in) and per page, and totals of page views and time on page (only daily totals per page and a spread over time ranges; individual visits are not recorded); story reads (once per reader per day). No IP addresses or data that identifies you. If your browser has Global Privacy Control turned on, we don't record your page views or time on page | Your browser |
We don't collect your national ID number, postal address or phone number.
3. Purposes
To provide member services and sign-in, record and settle magic, process payments and refunds, review submissions and hand them to the story system for adaptation, prevent abuse and fraud, support you, and keep transaction records as the law requires. Specified purposes (under Taiwan's classification): 090 consumer and customer management and services; 148 online shopping and other e-commerce services; 181 other contractual, quasi-contractual or legal relationships.
4. Who processes your data
| Who | Why | Data sent |
|---|---|---|
| Supabase (database and sign-in) | Stores member and ledger data | The data in section 2 |
| Railway (website hosting) | Runs the website | Data in the course of requests |
| Google, LINE | Sign-in | Sign-in flow data |
| Resend | Sends sign-in codes, codes for adding an e-mail, notification e-mails and, if you agreed, Yeyu's weekly letter | |
| Cloudflare | Domain, bot check | Browser data needed for the bot check |
| Recur / PAYUNi (payments) | Payments, subscriptions, refunds | E-mail, order data |
| OpenAI | Automatic review of whether a submission meets the safety rules | The submission's title and text (no e-mail or member ID) |
| MiniShomiWorld story system | Adapts funded submissions and used items into stories, publishes them, adds a thank-you line at the end of the caption and leaves a comment in which the story's lead character thanks you | Submission title and text, language, funding numbers, anonymous or the display name you chose; with "Thank-you comments" set to "Tag me", also the Instagram / Threads account name you linked and confirmed with the follow spell, used only to @-tag you in the caption thank-you and the thank-you comment on the same platform; no e-mail or member ID |
Some providers' servers are outside Taiwan (for example in the United States and Japan); we transfer data internationally in line with article 21 of the Personal Data Protection Act.
5. How long we keep it
- Account and member details: until you delete your account.
- Magic ledger and payment records: for the periods required by the Business Entity Accounting Act and tax law (at least 5 years); after account deletion they are kept under a member ID that can't identify you.
- Submissions already sent to the story system: kept under section 7 of the terms of service; the author's name is removed after account deletion.
- Social comments: comments of linked members are kept until they delete their account; comments and account names of non-members are cleared automatically after 30 days, leaving only the processing record. Points records are kept with the magic ledger.
- Error logs: 30 days.
6. Your rights
Under article 3 of the Personal Data Protection Act you can ask to look up, read or get a copy of your personal data, add to or correct it, or have us stop collecting, processing or using it, or delete it.
- You can view and change your public name, e-mail notification settings and magic records directly in "My account".
- Yeyu's weekly letter (new stories and events) is a separate option and off by default. You can tick it when adding an e-mail, or switch it on or off any time in "Account settings › Notifications". Notification e-mails (story progress, payments) follow your usual e-mail notification setting.
- You can change "Thank-you comments" (Tag me / Name only / Anonymous) in "Account settings"; the default is "Tag me": when your story or item becomes a post, the thank-you in the caption and the thank-you comment show your public name and @-tag the Instagram / Threads account you linked; with "Anonymous", neither shows you. You can also choose anonymous for a single story or item. We can help delete comments that were already posted.
- Deleting your account: ask in "My account"; it happens after 7 days to change your mind. We then remove your name, e-mail, social account names, LINE / Google sign-in identities and all sessions; ledger and transaction records are kept, as the law requires, in a form that can't identify you.
- Other requests: write to support@minishomi.com. We reply within 15 days and may extend this by 15 days, telling you why.
You don't have to give us your data, but without it you can't sign in or use member features.
7. Cookies
We only use the cookie needed for signing in; no advertising or third-party tracking cookies. The bot check before an e-mail code is sent is provided by Cloudflare Turnstile and used only to prevent abuse.
The website also keeps two small items in your browser's storage (not cookies): a random code so a story counts your read only once a day, and the name of where you first came to the website from (e.g. instagram), attached to your account when you sign up so we know which channels bring members. Neither is shared with third parties, and you can clear them in your browser at any time.
8. Security
All data is encrypted in transit; the database keeps each member's data apart with row-level permissions; admin features are limited to named administrators; payments and the story system are verified by signatures; the ledger can only be added to, never changed.
9. Children
People of any age can use the Service; under-18s need the consent of a parent or legal guardian before using it or buying anything, and state this the first time they sign in (terms of service, section 2). We don't knowingly collect extra personal data about children.
10. Changes to this policy
Changes are announced on the website; for major changes we also notify you.
11. Contact us
Pain Point Technologies Co., Ltd. (痛點科技股份有限公司)
Address: 5F-3, No. 45-1, Chang'an West Road, Taipei, Taiwan
Phone: +886 2-2556-6810
Privacy contact: support@minishomi.com