Very little, and none of it on purpose. There are no analytics on this site, no advertising pixels, and nothing sold to anyone.
Last updated 7 August 2026 · Xinyao Lin, sole proprietor · Los Angeles, California
The short version. Reading this site: I get nothing. No analytics, no pixels, no tracking cookies. Booking a call: your name, email and timezone, through Cal.com. Buying something: your payment details go to Stripe, never to me. Working together: your exports and creator lists, kept private and never shared.
I don’t sell data, I don’t advertise, and there is no mailing list to be added to without asking.
Xinyao Lin, sole proprietor, 7300 W Sunset Blvd, Ste L #706, Los Angeles, CA 90046. Questions about anything on this page go to lin@linxinyao.com and I answer them myself.
There are no analytics on this website. No Google Analytics, no Meta pixel, no TikTok pixel, no heatmaps, no session recording, no advertising trackers. I don’t know how many people visit, which is a real cost to me and a deliberate choice.
I set no cookies of my own, and none for tracking or advertising. Cloudflare sets one security cookie to tell real visitors from bots — that’s the only cookie on these pages, and the booking page adds Cal.com’s own (section 3). There’s no cookie banner because there’s nothing here that requires your consent.
Pages load fonts from Google Fonts. Your browser requests them from Google’s servers, which means Google receives your IP address and basic browser information as part of that request. It’s how the site gets its typeface, and it’s the only third-party call on any page except the booking page.
This site is hosted and served by Cloudflare, which sits between you and the pages. Like every web host, it keeps standard logs — IP address, timestamp, page requested — and sets a security cookie to tell real visitors from bots. I don’t analyse those logs and I don’t build profiles from them.
The booking calendar is provided by Cal.com and embedded on the call page. When you book, Cal.com collects your name, email address, timezone and anything you type into the booking notes, then sends us both a confirmation with a Google Meet link.
Cal.com sets its own cookies on that page. Their privacy policy governs what they do with what they hold. I use the booking details to hold the call and to reply to you — nothing else.
If you show me your dashboard, I’m looking at it, not recording it. I don’t record calls unless you ask me to. I usually keep a few private notes so the follow-up isn’t generic; you can ask me to delete them.
Payments are handled by Stripe. Your card details go to Stripe directly — I never see or store your full card number. What reaches me is your name, email, billing country and the fact that a payment succeeded, which is what I need to deliver what you bought and keep tax records.
Stripe is its own data controller for payment information and runs its own fraud checks. Their privacy policy covers that part.
If you email me, I have your email. I keep correspondence so I can remember our conversation, and I reply myself.
You will not be added to a mailing list because you emailed me, because there isn’t one. If I ever start one, joining will be a thing you actively do.
I do send cold outreach to brands, using business contact addresses published on the brand’s own website — a wholesale, partnerships or business-enquiries inbox. I don’t guess addresses, buy lists, or scrape personal inboxes. Every email is written by hand and sent one at a time. Reply “no” or ignore it and you’ll hear from me at most once more; ask me to delete your details and I will, that day.
This is the part that actually matters, because it’s where the sensitive data is.
Configure and run your system. That’s the whole list.
I don’t sell it, share it with other clients, or use one brand’s numbers to advantage another. Case studies are anonymised and published only with your written approval — including the founding-rate ones.
Your files sit in my working storage and are processed with Claude, made by Anthropic, which is the engine the system runs on. If you’d rather your exports were never processed by a third-party AI service, say so before we start — that’s a fair position, but it changes what I can offer you, and I’d rather tell you that up front than quietly do it anyway.
Exports contain information about real creators. Where I handle it, I’m acting on your instructions and on your behalf — you remain responsible for having a lawful basis to hold and share it.
That is the complete list. There are no advertising networks, no data brokers and no analytics vendors on it, and I’ll update this page if that ever changes.
You can ask me to show you what I hold about you, correct it, delete it, or stop emailing you. One email to lin@linxinyao.com; I’ll act within 30 days and usually within two business days.
Being straight with you about the legal position: as a sole proprietor I fall well below the revenue and volume thresholds that make the CCPA and CPRA legally binding on me, and I’m not established in the EU or UK.
I’ll honour access, correction and deletion requests anyway, from anyone, wherever you are. It costs me nothing and refusing would be an odd way to run a business built on being trustworthy.
I don’t sell or share personal information for advertising, so there is nothing for you to opt out of. I don’t make automated decisions about you with legal effects.
Device encryption, strong unique passwords, two-factor authentication on every account that offers it, and card data that never touches my systems.
What I won’t claim: that a one-person business has enterprise security infrastructure. If a breach affected your data, I’d tell you promptly and directly rather than posting a notice and hoping you missed it.
I’m in the United States and your data is processed here. Some of the services in section 8 process data in other countries too. If you’re in a jurisdiction with stricter rules than California’s and that matters to you, email me before we start and I’ll tell you honestly whether I can meet what you need.
This is a business-to-business service and isn’t directed at anyone under 18. I don’t knowingly collect children’s data.
If this page changes, the date at the top changes with it. If a change materially affects a current client, I’ll email you rather than let you discover it.
Xinyao Lin · 7300 W Sunset Blvd, Ste L #706, Los Angeles, CA 90046 · lin@linxinyao.com
Twenty minutes, no pitch.All it costs you is a name and an email address.