Skip to content

Privacy & cookies

How we handle information on the Society’s website and event services.

Last updated: 22 September 2026

Information you share

The International Zheng He Society collects the contact and professional details you provide through guest forms and correspondence, such as your name, title, organisation, country or region, email, optional telephone number and programme interests. Invitation services also record replies and attendance arrangements.

We use these details to coordinate events, contact you, manage invitations and attendance, maintain event records, and protect our forms from misuse. Submitting an interest form does not confirm attendance; formal invitations and attendance arrangements are handled separately.

Access, service providers and retention

Access is limited to authorised Society staff and service providers supporting the website, database, authentication and email delivery. These services currently include Vercel, Supabase and Microsoft 365. We retain information only while it is needed for the stated purposes or applicable record-keeping requirements.

Cookies used by our application

Cookies are small values stored by your browser. Our application uses the following first-party cookies for staff sign-in and private invitation verification. They are not required to browse public information or submit the public guest information form. Language selection is stored in the page URL, not a cookie.

These authentication cookies are inaccessible to page scripts (HttpOnly), sent over HTTPS on the live site (Secure), and restricted to same-site requests (SameSite=Strict). A session may end sooner; renewed cookies receive a new expiry. Signing out clears the relevant sign-in cookies.

An older workspace version stored sidebar_state for up to seven days. It is no longer created or used and is removed when the workspace sidebar loads; otherwise it expires naturally. The sidebar now uses temporary page memory only.

You can clear or block cookies in your browser settings. Blocking authentication cookies prevents staff sign-in and verified private invitation access. It does not prevent access to public information or the public guest form.

Analytics and technical records

With your permission, we use Vercel Web Analytics to understand how often our public information pages are visited and which content is useful. Analytics is off until you select “Accept analytics”. You may reject it, or withdraw permission at any time through “Analytics preferences” in the footer. Public browsing and registration remain available regardless of your choice. We also respect the browser’s Do Not Track and Global Privacy Control signals.

Measurement is limited to the home, about, events, public forum information, contact and privacy pages on our production website. Guest forms, management pages, private invitations and APIs are excluded. We do not collect form contents, guest identifiers or custom events. Page URLs sent to analytics contain no query strings or fragments; visits with unknown parameters, fragments or potentially private referrers are discarded. We do not use advertising trackers or session replay.

Vercel processes page-view timestamps, public page paths, permitted referral origins, approximate location and browser/device information for aggregate reports. Requests reach Vercel with technical network information; Vercel describes using a request-derived visitor hash that is discarded after 24 hours, rather than tracking cookies. This is not a claim that no personal data is processed. The current Hobby dashboard provides 30 days of viewable history; this reporting window is not a guarantee that all provider records are deleted after 30 days.

Your analytics choice is stored only in this browser under society-analytics-choice-v1 in local storage, with a 180-day validity period. It contains the choice, notice version and expiry, not a user identifier. Expired choices are removed when the controls next load. Clearing browser storage resets the choice. If the preference cannot be saved, analytics stays off. No analytics cookie is added, and consent for analytics is separate from the guest form’s data-use agreement.

Vercel Web Analytics privacy information

Security and operational records are separate from audience analytics. Our systems use request identifiers, rate-limit counters and security audit records to protect the service and investigate faults. The application hashes network and browser identifiers used for registration abuse checks. Hosting, database and email providers may also process technical logs; security protections may use their own cookies when triggered.

Questions and your choices

To request access or correction, ask a privacy question, or withdraw consent, contact the Secretariat at secretariat@zhenghesociety.com. Please identify the relevant event or submission reference where available. We may need to verify your identity before acting on a request. Withdrawing consent may affect our ability to coordinate your participation; we will explain the consequences.

External links lead to services with their own privacy practices. We will update this page when the website’s data use or cookies change.