Privacy & Licences

Andy Xu operates galeonwhistles.com. The website and its database are hosted by Hawk Host in Hong Kong. The host states that standard webserver access logs record visitor IP addresses and request metadata, such as requested URLs, HTTP methods and response status codes, and are retained for 30 days. Request URLs may contain a pseudonymous installation identifier, for example in a statistics deletion request. According to the host, Authorization headers and request bodies are not normally recorded in standard access logs by default. Other server, security or diagnostic logs may follow different recording and retention rules; their full contents and settings have not been independently verified.

Hawk Host provides automatic Acronis backups stored remotely in Los Angeles, California, USA, with a seven-day rolling retention period. The host states that these backups are not encrypted. Website and database information included in those backups may therefore be transferred from Hong Kong to the United States. Separately created manual or local backup copies are not covered by this seven-day retention period and currently have no fixed automatic expiry.

Hawk Host does not enable a CDN by default; no additional whole-site CDN is configured in the inspected website settings. Website pages load Google Fonts, and the keyless-flutes page embeds YouTube. Your browser may connect to those providers and disclose connection information, including your IP address, when loading their resources. These website connections are separate from native-app usage statistics. The app information pages do not require a visitor account.

These disclosures concern the Hawk Host copy of the website. They do not change what any installed app collects. For questions or requests, contact andyxuhang@gmail.com.

Website APK buttons use a first-party download entry that redirects to the existing APK file. The download counter stores daily totals by app and version, using UTC dates. It does not set tracking cookies or store IP addresses, User-Agent strings, device identifiers or individual download histories. Hosting access and security logs are separate and follow the disclosures above.

These totals count download starts, not completed downloads, unique people or installations. Repeated clicks and automated requests may be included. Direct APK links bypass this counter. Aggregate counts are configured to retain the latest 365 UTC days and are cleaned by a daily scheduled task; backup copies follow the separate backup rules above. This website counter is independent of optional usage reporting inside an app and does not activate that reporting.