Effective date: October 9, 2026
1. Who we are and what this policy covers
Yinwa Network is the common operating brand of www.xiaolu.pro, www.jioya.net and mofamao.net. This policy describes privacy practices relating to the Yinwa Network brand website, account authentication on participating WordPress sites, and the personal information handled in connection with those services. Platform-specific notices may provide additional information about a particular site feature.
For privacy questions and rights requests, contact [email protected]. Yinwa Network is a brand name; it should not be interpreted as a claim that we are a separately incorporated company.
2. Information received through Google Sign-In
Our participating websites use Nextend Social Login for WordPress to authenticate users with their Google Accounts. Depending on the information provided by Google and the site’s settings, the authentication process can receive:
- a Google account identifier used to associate a Google identity with the appropriate local website account;
- the Google account email address and any email verification status supplied in the sign-in response;
- basic profile information such as a display name, where it is provided and enabled; and
- technical authentication information (for example, authorization responses or tokens) needed to complete the sign-in and maintain the account connection.
We do not use Google Sign-In to request access to Gmail messages, Google Drive files, calendars, contacts or financial information. We do not intentionally save Google profile photographs as part of this login integration. Profile photo storage must be disabled in Nextend settings on each participating site for this statement to remain accurate.
Account information received from Google is not treated as permission to collect unrelated Google data. A Google Sign-In authentication does not give us the user’s Google password.
3. How we use information
- To register a local account, recognize a returning user, complete login and link the correct Google identity to the correct local account.
- To maintain site memberships and user-requested account functions.
- To detect spam, abuse, unauthorized access and security incidents.
- To respond to user inquiries, privacy requests, rights-holder reports and legal obligations.
- To operate, maintain and troubleshoot our websites and account systems.
We do not sell Google Sign-In identity data or use it for targeted advertising or unrelated profiling. If a website separately uses advertising, analytics, payments or other tools, its applicable site notice and consent controls should identify those practices; this Google Sign-In disclosure does not authorize any undisclosed secondary use of Google data.
4. Where and how data is stored
Local user records, including the identifiers and account fields necessary for sign-in, are stored in the relevant WordPress website database and its hosting or backup infrastructure. Each of the three platforms maintains its own account records. Personal data needed by the plugin can include a provider-to-account link and, depending on enabled Nextend settings, authentication token metadata. We restrict its use to legitimate authentication, account support and security tasks.
The Yinwa Network informational website itself is a static site: it has no account registration form and does not itself execute Google Sign-In. Its pages do not intentionally set tracking or advertising cookies, and it contains no third-party analytics scripts. Website hosting and network providers may nevertheless create standard connection and security logs.
6. Retention and deletion
Account identifiers and other account information are generally retained for as long as the local website account remains active and are deleted or de-identified when no longer reasonably required for the account, security, operational, dispute-resolution or legal purposes for which they were collected. Security logs and backup copies may continue to exist for limited periods consistent with operational backup rotation and applicable obligations, after which they are removed or overwritten.
To request access to, correction of, or deletion of information associated with a specific website account, email [email protected] with the relevant domain and account email. We may verify account ownership before acting and may retain records where the law permits or requires. Disconnecting an app in Google Account settings stops further Google authorization but does not by itself delete the associated WordPress account; request local account deletion separately.
7. Other information, cookies and security
When you use the content websites, those sites may process registration details, posts or submissions that you provide, normal web server logs (such as IP address, browser type and access time), and cookies needed for sessions, login, preferences or security. Nextend Social Login can also set cookies needed to complete the authentication process. Additional services used on an individual website should be described by that site’s own notices.
We use reasonable technical and organizational measures to limit unauthorized access. No internet-based service can guarantee absolute security.
8. Your choices and privacy rights
Subject to applicable law, you may have the right to request access to, correction of, export of, restriction of, or deletion of your personal data, and to object to certain processing. Send your request to [email protected]; include the website concerned and sufficient information for us to locate the account without sending a password. You can also manage Google third-party connections in your own Google Account settings.
9. Adults only and data concerning minors
Our adult-oriented services are not directed to children. Individuals must be at least 18 years old, or the legal age of adulthood in their jurisdiction if higher, to access adult-oriented materials. We do not knowingly solicit personal data from minors for those services. Reports concerning minors, exploitation, or non-consensual intimate material receive priority review; contact [email protected].
10. Changes and contact
We may update this policy to reflect changes in website functionality, data practices or applicable requirements. The effective date shown above will be updated when material revisions are published. The current version is available here, and relevant platform-specific disclosures may also apply.
Privacy, account and copyright contact: [email protected].