Privacy and cookies

What we collect, why we collect it, and the choices you have.

Who operates this site

STARS HUG THE MOON® is operated by HE, XIYAO, a sole trader trading as Stars Hug The Moon and Xing Xing Bao Yue Qiu, ABN 84 408 875 113. Contact contact@xxbyq.com for general, subscription or privacy enquiries, and abuse@xxbyq.com for abuse reports.

Email subscriptions

When you subscribe, we process your email address, email language, request and confirmation times, consent wording version and subscription status. We use these to verify your address, welcome you and send the organisation updates, product news, community contributions and important announcements you requested. Messages are written and deliberately sent by us; publishing a web page does not automatically send an email. We do not use advertising tracking or email-open tracking by default.

Unsubscribe and information requests

Every newsletter or announcement includes an unsubscribe link and requires no login. Unsubscribing stops messages not yet submitted for sending; messages already handed to the email provider may still arrive. Contact us to request access, correction or deletion. We may verify your identity and retain limited suppression and consent records to prevent unwanted messages or resolve disputes, explaining any reason deletion cannot be immediate.

Cookies and local storage

The xxbyq_consent cookie remembers your storage choice for 180 days. Only with preference consent does xxbyq_language remember your language (up to 365 days) and xxbyq-reading-v1 store reading settings locally. When consent expires or is withdrawn, the site clears those preferences. You can still change language, text size and motion on the current page without saving them. Subscription forms use necessary short-lived security credentials. The separate CMS uses its own login and form-protection cookies. This site currently has no advertising or analytics tracking cookies. The subscription API sets the necessary __Host-newsletter-csrf cookie only when opening its form or preparing a submission, for up to one hour, with Secure, HttpOnly and SameSite=Strict protection.

Cookie settings

Processing services and security

Our infrastructure uses Alibaba Cloud and Tencent Cloud, including hosting in Hong Kong; we do not promise Australia-only storage. Microsoft Azure translates public website text, which must not include subscriber addresses or private material. Confirmation messages and updates currently use Microsoft 365 through separate contact and info sender configurations. Subscription requests pass through Cloudflare and the hosting services above. We will update this notice when processing services change. Email providers handle addresses and message content needed for delivery. Operational logs and rate-limit records support troubleshooting, abuse prevention and security, not advertising profiles.

Retention and updates

Active subscription details are retained while we provide the service. Expired unconfirmed requests, mail jobs and operational records are handled under the administrative retention rules. Suppression records are limited to what is needed to prevent unwanted messages and document our handling. Subscriber information is excluded from public pages, search indexes and website-content exports. We will update this notice when purposes or providers materially change; a new use may require fresh consent.

Reading and display

Adjust your reading experience. Settings are saved in this browser only if you allow preferences.

Text size
Read our accessibility statement

Search this site

Search this published language. External product accounts and private information are not included.

Products and page directory