This Privacy Policy applies to the CrystalLab website (crystal-lab.org, hereinafter referred to as "this Website"). This policy explains what information we and the third-party service providers integrated into this Website may collect when you visit, how that information is used, and what rights you have. By accessing this Website, you consent to the data processing practices described in this policy.

1. What Data We Collect

The CrystalLab website itself has no registration system and does not proactively collect users' personal identifying information such as names, email addresses, phone numbers or ID numbers. The following scenarios involve data collection:

Data Type	Collected By	Scenario	Contains Personal Identifiers?
Visit logs (IP address, page paths, dwell time, device type)	Google Analytics	When a user visits any page	Anonymised
Ad interaction data (impressions, clicks, interest labels)	Google AdSense	When a page contains ad slots	Linked to Google account
AI conversation content	Dify AI Platform	When using the AI assistant	Entered by user
Font loading requests (IP address)	Google Fonts / Cloudflare CDN	When a page loads	Transient
Submission content (text, images, attribution and source information)	CrystalLab	Voluntarily submitted by users via the Submissions page, Tencent questionnaire, QQ or email	Voluntarily provided

2. Google Analytics (ID: G-LR1SNSS33D)

This Website uses Google Analytics 4 (GA4) to understand how the website is used, helping us continuously improve content quality and user experience. GA4 collects the following types of anonymised data through cookies:

• Page view records (URLs and titles visited);
• Traffic sources (search engines, direct visits, social media, etc.);
• User device information (operating system, browser type, screen resolution);
• Session duration and page interaction behaviour;
• Approximate geographic location (country/region level).

To opt out of Google Analytics tracking, you can install the Google Analytics Opt-out Browser Add-on, or disable the relevant cookies in your browser.

3. Google AdSense & Advertising (Client: ca-pub-9337526323324673)

This Website displays advertisements through Google AdSense, which is the primary means of sustaining this Website's free operation. Regarding the processing of advertising data, please be aware of the following:

Personalised ads: Google may use cookies and similar technologies to show you personalised advertisements based on your past browsing behaviour on this and other websites. This means that advertising content may relate to your recent searches or browsing activity.

Non-personalised ads: If you have opted out of personalised ads in your Google ad settings, Google will serve ads based on page content only (rather than your behavioural data).

How to manage ad preferences:

• Visit Google Ads Settings to manage personalised ad preferences;
• Visit AdChoices or Your Online Choices to opt out of interest-based advertising;
• Clear or block cookies through your browser settings (this may affect ad display and some website functions).

Data processing by Google AdSense is subject to the Google Privacy Policy.

4. Dify AI Assistant Data Processing

The AI assistant feature of this Website is powered by the Dify (udify.app) platform. When you use the AI assistant to converse, the following data will be sent to Dify's servers for processing:

• The conversation text you enter;
• Conversation context and interaction history (within a single session);
• Basic device and browser information (automatically collected by the Dify SDK).

Data processing by the Dify platform is subject to its Privacy Policy. If you do not wish your data to be sent to Dify, please do not use this Website's AI assistant feature.

5. Fonts & CDN Services

To ensure the visual quality of the website, font and icon resources are loaded from the following CDN services:

• Google Fonts: When loading the "Noto Sans SC" and "Playfair Display" fonts, your browser sends requests to Google's font servers, which include your IP address. Google may use this data for font usage statistics.
• Cloudflare CDN (cdnjs.cloudflare.com): When loading the Font Awesome icon library, your browser establishes a connection with Cloudflare CDN servers.

The IP address data contained in the above CDN requests is typically recorded in server logs on a temporary basis only and is not used to track individual user behaviour.

6. Use of Cookies

Cookies are small text files stored in your browser. This Website and the third-party services integrated into it use the following types of cookies:

Managing cookies: You can refuse or delete cookies through your browser settings. Please note that declining analytics cookies will not affect your normal browsing experience; declining advertising cookies will cause ads not to display properly or to become non-personalised; declining functional cookies may affect some website functions (such as announcement pop-up settings).

7. Purposes of Data Use

The data collected and used directly by this Website (primarily user submissions) is used only for the following purposes:

• Displaying users' submitted crystal works or tutorials to enrich the website's content;
• Verifying the source and attribution of submitted content to ensure that attribution accurately reflects ownership;
• Responding to suggestions and feedback submitted by users;
• Handling compliance matters such as copyright complaints, and retaining records of submitters' statements in the event of ownership disputes.

Submission channel note: Submissions may be made through this Website's Submissions page, Tencent questionnaire, QQ or email. Content submitted through the Tencent questionnaire is first received and stored by the Tencent questionnaire platform (Tencent), whose data processing is subject to the Tencent questionnaire service agreement and privacy policy; content submitted through QQ or email is transmitted via the respective communication platforms. This Website uses only the final received submission content for the purposes described in this section.

Data collected through third-party services (Google Analytics, AdSense, Dify) is used by those third-party service providers in accordance with their own privacy policies, as described in the respective sections above.

8. Data Sharing & Disclosure

CrystalLab does not sell, rent or disclose user data to any third party for commercial purposes, except in the following circumstances:

• Technical service providers: As described above, this Website has technical integrations with Google (Analytics, AdSense, Fonts) and the Dify platform, and data is automatically transmitted to these providers; submission content submitted through Tencent questionnaire or QQ is also processed via Tencent's platforms. This does not constitute a "sale of data", and the aforementioned providers are each bound by their own independent privacy policies.
• Legal requirements: Where disclosure of specific information is required by laws, regulations or valid orders of judicial or administrative authorities, this Website will cooperate in accordance with the law.
• Protection of rights: Where necessary, this Website may disclose relevant information to protect the lawful rights and interests of CrystalLab or other users, including in response to fraud, copyright infringement and similar conduct.

9. Data Retention

This Website itself does not store users' personal data, and therefore no data retention issue arises at the level of this Website itself. The data retention policies of the third-party services are as follows:

• Google Analytics: Data retention period can be set to 2 months or 14 months, depending on the actual settings of this Website's GA4 account;
• Google AdSense: Advertising cookies typically remain valid for 13 months;
• Dify AI Platform: For the specific data retention policy, please refer to the Dify Privacy Policy;
• User submission content: Retained on this Website for the long term unless the user requests deletion. To request deletion, please notify us through the contact information provided.

10. Your Rights

Under applicable privacy laws (such as the GDPR for users in Europe, the PIPL for users in mainland China, and the Personal Data Protection Act 2010 (PDPA) of Malaysia for users in Malaysia), you have the following rights in relation to your personal data:

To exercise any of the above rights (primarily in respect of submission content held directly by this Website), please contact us using the contact information at the end of this page. For data held by Google or Dify, please contact the respective service providers directly.

11. Privacy of Minors

This Website does not collect personal information from minors under the age of 16. If you are a minor, please obtain the consent of your parent or guardian before using this Website (especially the AI assistant feature). If we discover that we have inadvertently collected personal data of a minor, we will take immediate steps to delete the relevant data. If a guardian becomes aware of such a situation, please contact us promptly.

12. Data Security

This Website adopts the following measures to safeguard data security:

• HTTPS encryption is enabled across the entire website to prevent data interception in transit;
• This Website does not store user passwords or sensitive financial information;
• The website is hosted on secure and reliable server infrastructure.

Although we have taken reasonable security measures, the nature of the internet means that no data transmission can be guaranteed to be 100% secure. This Website assumes no responsibility for data breaches caused by force majeure or security incidents beyond reasonable control.

13. Changes to This Policy

This Privacy Policy may be revised in response to service adjustments, changes to third-party services or updates to applicable laws and regulations. The updated policy will be published on this page with the latest effective date indicated. You are advised to visit this page regularly. Continued use of this Website constitutes acceptance of the updated policy. For material changes, this Website will notify users via an announcement on the homepage.

14. Contact Us

Identity of the data controller: The operator of this Website and the controller of user data is the CrystalLab operations team (crystal-lab.org).

If you have any questions or comments about this Privacy Policy, or need to exercise your data rights (such as deleting submissions or correcting information), please contact us through the Submissions & Suggestions page. We will respond within a reasonable time (usually within 7 business days).

For requests concerning data held by Google services, please visit the Google Account Center; for requests concerning Dify AI data, please visit Dify's official channels.

Effective date: June 2026  |  Last updated: September 2026