Scope
Phone Wave is operated by Xiamen Maimaimai Culture Media Co., Ltd. (厦门市买买买文化传媒有限公司). This policy covers the Phone Wave websites (the China site, www.cc8.cc, and the international site, cc8.cc) and the mobile app; “we” means that company.
The two sites run independently, each with its own database. Accounts, works and credits are not shared between them.
What we collect
| Category | What | Why |
|---|---|---|
| Account | Email address, password (we keep only a hash and cannot read it), the display name and bio you choose | Sign-up and sign-in; crediting you on your works |
| Sign-up record | The invite code you used and the invitation relationship recorded from it (who invited you); when you registered and last signed in; if you ticked agreement to this policy, when you agreed and which version | Invite-only sign-up, abuse prevention, and proof of which version you agreed to |
| Guest identity | A random identity created the first time you open the home page or use a feature that needs one, and one cookie in your browser that points to it | Lets guests browse and create a first world; works move to your account when you register |
| What you submit | Premise text, the descriptions you write when opening a new path, uploaded images, comments, reports, follows and blocks | Generating and showing your world (an uploaded image becomes the starting point of the first scene); handling reports and blocks |
| Generated results | Pictures, clips, narration and interactive hotspots made by models, including new paths other players open in your world | Showing the story to you and to other players |
| Usage records | Which scenes were viewed, whether a clip was watched to the end, share-page opens and link copies, tied to your account or guest identity | Understanding how works are read; improving the product |
| Orders and credits | Order number, product, amount and currency, payment status, and every change to your credit balance | Completing purchases, counting credits, reconciliation and refunds |
| Age declaration | Whether you declared that you are 16 or older | Deciding whether you can view content marked as age-restricted |
| Session and network | When your session expires and when it was last active. IP addresses are used in server memory for rate limiting and are not written to the database; the sign-up limiter stores only a hashed value. The server reads the browser identifier (User-Agent) to tell whether the page is open inside WeChat, but does not store it. Our hosting providers’ access logs may record IP addresses, handled under their own rules | Sign-in security; preventing abuse of the API |
| WeChat Pay | When you pay inside WeChat, the user identifier WeChat returns after authorisation is kept in a signed cookie, not in the database | Starting a WeChat payment |
How we use it
- To run the service: generate and show your world, remember your choices, let you continue on another device.
- Account security and abuse prevention: sign-in checks, rate limits, invite-code checks, restricting accounts that break the rules.
- Content safety: reviewing submitted text and images (the review feature is switched on per site), handling reports and takedowns.
- Purchases: creating orders, granting and spending credits, reconciliation.
- Improving the product: looking at how works and features are read and used.
The websites do not include third-party advertising or behavioural analytics scripts.
Where it is stored
- China site (www.cc8.cc): the database runs on Alibaba Cloud servers in mainland China; images and clips are kept in Alibaba Cloud object storage.
- International site (cc8.cc): an overseas cloud database service (Turso); images and clips in Vercel’s object storage; the site is hosted by Vercel.
Data residency: by our arrangement, data of users in mainland China is stored only on the China site and is not stored on the international site. The two sites do not synchronise accounts or works.
Third-party services
We use the services below to run Phone Wave. The list follows what the code actually calls; the final version will name each provider and where it operates.
| Category | Service | What it can see |
|---|---|---|
| Model generation (text, pictures, clips, object detection, sound) | Third-party model services, called through an aggregation interface or directly; some providers may be outside mainland China | Your premise text, the descriptions you write when opening a path, existing pictures, and images you upload |
| Content safety review (when switched on) | Alibaba Cloud Content Security: the China site uses its mainland-China region, the international site its overseas region | Images and text sent for review |
| Object storage | China site: Alibaba Cloud object storage; international site: Vercel Blob | Image and clip files |
| Database and hosting | China site: Alibaba Cloud; international site: Turso (database), Vercel (hosting) | All data on the site |
| Payments | WeChat Pay (including WeChat web authorisation) | Order number, product name, amount; the user identifier when paying inside WeChat |
Retention and account deletion
While your account exists we keep the information listed above. When you ask to delete the account it enters a 15-day cooling-off period during which signing in again cancels the request; the request is confirmed with your account password.
When the cooling-off period ends we delete:
- the worlds you created, and their images and clips held in our storage;
- your comments, follows, blocks, interaction and share records, and invitation cards nobody has claimed yet;
- unused credits (they are voided);
- your email address: it is replaced by a value from which the address cannot be recovered, kept for 30 days only so that we can say “the account for this address was deleted”, then cleared.
Paths you opened inside other people’s worlds stay, but your credit on them is removed.
These records are not deleted with the account, because reconciliation, dispute handling, cost accounting and content review need them. They no longer point to your email address or display name:
- report records and content-review records;
- orders and the credit ledger;
- reading and usage statistics, which keep only an anonymised account number;
- invitation records: which invitation card a person signed up with, kept only with an anonymised account number;
- model-call records, kept for cost accounting: they hold the prompt sent to the model and what came back, and are not linked to an account;
- when you agreed to this policy, and which version.
A guest who never registered can delete their guest data at any time; the same things are cleared as for an account deletion.
In-product deletion will be added over the coming releases; until then you can send a deletion request to the address below.
Your rights and contact
You can ask us to give you access to your data, correct it, delete it, or withdraw your consent. We handle requests after verifying who you are. Contact: zhaiwenshe@gmail.com.
The operating entity is Xiamen Maimaimai Culture Media Co., Ltd. (厦门市买买买文化传媒有限公司). Its address will be listed in the final version.
Age-restricted content
Some stories are marked as age-restricted. To view them you first declare that you are 16 or older; the declaration is kept on your account (or guest identity).
Changes to this policy
We may update this policy. When we do, the version number on this page changes.