// privacy
Privacy Policy
How FAQs.HK handles your personal data.
Updated 30 October 2026.
1. Who we are
- FAQs.HK is operated by DevLib. Where this policy says "we", it means DevLib.
- For anything about your personal data, write to support@geoclicks.com.
2. What we collect
- To sign you in we need your email address. If you sign in with Google, Google also gives us your name. We never ask for a password.
- What you post while signed in, such as suggested questions, replies and the subjects you follow, is stored with your account.
- When you write to us through the contact form, we keep your name, your email address, your message and the IP address it was sent from, so that we can answer you and stop abuse.
- Cloudflare checks the form for bots, as it does the sign-in form.
- We delete the message, and the name, address and IP address kept with it, 12 months after it arrives.
- If we answer you, we keep a copy of our reply with your message and delete it at the same time.
- You can add a profile picture to your account. It is optional. Before we store a picture we re-encode it, which removes the location, camera and other details a phone or camera writes into the file, and we keep only that cleaned copy and two small versions of it, on our own server or with Cloudflare, which delivers the site. The file you sent is deleted as soon as it has been processed.
- Your picture is public: it appears next to your name wherever you post. You can replace or remove it at any time on your account page, we may remove a picture that breaks our rules, and it is deleted when your account is deleted. We never fetch a picture of you from Google, Gravatar or any other service.
3. Signing in with Google
- Our pages load Google's sign-in script, so Google can tell that a browser signed in to a Google account has opened one of our pages, even if you never use the prompt. We learn nothing about you from it unless you click to sign in.
- Signing in with Google is optional. We ask Google only for your name, your email address and the identifier of your Google account, and for nothing else in your Google account.
- Your name becomes your display name. Your email address identifies your account and receives the emails you ask for.
- Google also sends a link to your profile picture; we do not store or show it.
- We do not share what Google gives us, do not sell it and do not use it for advertising. We keep it for as long as you have an account.
- To delete your account and everything stored with it, write to support@geoclicks.com. You can also remove FAQs.HK's access at any time in your Google account settings.
4. Sign-in security
- Every request for a sign-in code is logged for 90 days so we can stop abuse: the time, your IP address, its network and country, and a one-way fingerprint of your email address and browser.
- If emails to an address keep bouncing, or the recipient marks them as spam, we stop sending to that address.
5. Cookies and browser storage
- We set a session cookie that keeps you signed in, a security cookie that protects our forms, and a cookie that remembers the theme you chose (system, light or dark).
- If you are signed in, your theme choice is also saved with your account, so it follows you to your other devices.
- If you close Google's sign-in prompt, Google's script sets a cookie named g_state so that it does not keep asking.
- Google's sign-in script and Cloudflare's security check may also set cookies.
- The sections below cover the cookies that analytics and advertising partners set.
- So that we can show a page when you are offline, your browser keeps a copy of our offline page and of the files the site is built from: its stylesheet, its fonts and the small script that measures how quickly a page loaded and responded. These copies hold nothing about you and are replaced when the site is updated. If you install the site as an app from your browser, nothing more is stored about you.
6. Analytics
- We use Google Analytics to see which pages are read and how they are used. It is not loaded on the sign-in pages, and our own editors are never counted.
- Google receives: your IP address, the pages you open, what you do on them, how quickly each page loaded and responded in your browser, and details of your browser and device.
- Cookies: while analytics is on for you, cookies named _ga, lasting up to two years.
- If you are signed in: while analytics is on for you, we also send Google your account number: a number, never your name or your email address. It links your visits from different devices, and lets us look at one member's visits as well as at totals. We keep that detail for up to 14 months, in Google Analytics. It stops being sent when you sign out or decline.
- Google signals: when it is on for you, and you are signed in to a Google account and allow personalised ads there, Google adds your age group, gender and interests to our statistics and recognises you across your devices, using its own advertising cookies and identifiers together with the Google Analytics cookie. We see totals only, never one person.
- We have told Google not to use what our sites send to personalise advertising.
7. Your analytics choice
- In the European Economic Area, the United Kingdom or Switzerland: Google's consent message asks first, and what you choose there decides analytics too. Until you agree there, Google Analytics sets no cookie and Google signals plays no part. We do not send Google your account number in these countries.
- If you decline, or have not chosen yet: Google Analytics sets no cookie, your account number is not sent and Google signals plays no part. Google still receives the pages you open, what you do on them and how quickly they loaded and responded, with no cookie and no identifier.
- Elsewhere: analytics and Google signals are both on unless you change that. In Analytics choices, Accept all turns on analytics and Google signals, and Analytics only turns on analytics alone.
- To change it: in those countries, use Privacy and cookie settings in the footer, which opens Google's message again; elsewhere, use Analytics choices in the footer, at any time. Declining in Analytics choices removes the _ga cookies.
- A choice made in Analytics choices is remembered for 180 days in a cookie named analytics_consent. Google's message keeps your answer in your browser too, so it does not ask again on every page.
- While a browser tab stays open, the script keeps three short notes in that tab: that you need not be asked, that your account number was sent, and the last ten sign-ins or suggestions already passed on to Google.
8. Advertising
- We also use, or will use, advertising services from Google and other trusted partners.
- Where our pages show ads, Google Ad Manager chooses them, and Google AdSense fills any space Ad Manager has no other ad for.
- These include advertising served by Google and by other advertising networks, and tags from social media and remarketing services.
- These partners may set cookies or use similar identifiers in your browser, and receive your IP address, the pages you open and details of your browser and device.
- They may use this to show and measure advertising, including ads based on your earlier visits to this and other websites (remarketing), and to tell us in aggregate how the site is used.
- In the European Economic Area, the United Kingdom or Switzerland: Google's consent message asks whether Google and its advertising partners may store and read information on your device and use your personal data to choose and measure ads.
- If you do not agree: Google shows only limited ads, or none: limited ads do not use your personal data to personalise them, and may use cookies only to detect fraud.
- To change your answer: use Privacy and cookie settings in the footer. It opens Google's message again, where you can withdraw consent at any time.
- Each partner handles this information under its own privacy policy.
- What you give us to sign in (your name and email address) is never used for advertising and is not passed to advertisers.
9. Opting out
- Personalised advertising from Google: adssettings.google.com
- Many other networks: youronlinechoices.com or optout.aboutads.info
- Google Analytics altogether: Google's opt-out browser add-on at tools.google.com/dlpage/gaoptout
- Blocking these cookies does not stop you reading the site.
10. Who helps us run the site
- Cloudflare delivers the site, protects it from attack and checks the sign-in and contact forms for bots. It may set a security cookie in your browser.
- Amazon Web Services sends our email.
- Google handles sign-in when you choose it. Google provides our analytics.
- Google and the other partners described above provide, or will provide, advertising.
- Each processes only what that job needs. We do not sell the details of your account.
11. What is public
- Published answers, replies and your display name are visible to anyone.
- Your email address is never shown.
12. Your rights
- You can ask us to show, correct or delete your personal data. Write to support@geoclicks.com and we will reply.
13. Changes
- When this policy changes we will update this page and its date.