Privacy Policy

Last updated: August 28, 2026

Huashuo (Xrecord, "we", "our", or "us") operates the website at huashuo.ashooter.com. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Canvas Data: Your drawings and canvas content are stored locally in your browser's IndexedDB. We do not upload or store your canvas data on our servers.

Camera and Microphone: When you choose to record, your browser may request access to your camera and microphone. These media streams are processed locally for video recording and are never transmitted to our servers.

AI Requests: When you explicitly request AI canvas generation, the text you submit, selected language and layout settings, and generated output are sent to our server and configured AI model provider to complete the request and diagnose failures. This does not upload your entire saved Canvas unless you include that content in the request.

Account and Entitlement Data: We store your account email, password hash, sessions, VIP entitlement type and expiry, and AI usage records needed to provide the service.

Payment Information: China-region payments are processed by Alipay; supported international payments may be processed by Creem (creem.io). We do not store full payment credentials. We receive order identifiers, payment status, amounts, payer identifiers supplied by the provider, and timestamps needed to verify payment and grant access.

Activation Codes: We store legacy activation codes and their claim status so previously issued permanent access can still be honored.

2. How We Use Your Information

To provide and maintain the service
To process VIP purchases and maintain paid access periods
To provide AI generation, enforce usage limits, prevent abuse, and diagnose failures
To honor and track legacy activation-code claims

3. Data Storage and Security

Your saved Canvas remains in your browser's local storage. Server-side account, payment, entitlement, AI request, and usage records are stored in a secured PostgreSQL database. We use HTTPS for browser communications.

4. Third-Party Services

Alipay - China-region payment processing.
Creem (creem.io) - Payment processing. See Creem's Privacy Policy.
Configured AI provider - Processes content you submit for AI generation.
Sentry - Error monitoring to improve service reliability. No personal data is intentionally collected.
Umami (self-hosted at umami.jingxuefeng.com) - Anonymous product analytics. No data is shared with any third party. See Section 5 below for details.

5. Anonymous Analytics

To understand how the product is used and improve it, we collect a small set of anonymous usage events.

Random identifier (xr_did) — a random UUID stored in your browser's localStorage. It is not tied to your name, email, or any personal identifier. Clearing browser storage resets it.
Events we record — app opened, first drawing action, recording completed/failed, video/image/project file exported, VIP modal opened, activation code used, and payment completed. Analytics events do not contain Canvas content or audio/video; AI request data is handled separately as described in Section 1.
Where the data lives — our self-hosted Umami instance at umami.jingxuefeng.com. No third-party analytics providers receive this data.
Impact on service — analytics is informational only. It does not determine your VIP access or AI allowance.

6. Cookies

We use a secure session cookie for account sign-in. Browser local storage and IndexedDB store preferences, Canvas data, payment-return state, and the anonymous analytics identifier described in Section 5.

7. Children's Privacy

Our service is not directed to children under 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date.

9. Contact Us

If you have questions about this Privacy Policy, please contact us at [email protected].