MANDARIN GARDEN
Privacy and data
Private beta. Updated 11 November 2026.
Mandarin Garden is operated by Carlos Mantilla Mateos. For questions about your data, contact [email protected].
Data used for your study account
When an invited participant requests access, we use their email address to send a one-time sign-in code and identify their account. We store the custom cards, collections and completed-round results that they save. These data support account access, study features and synchronization between devices.
Service providers
Cloudflare hosts the website and handles web requests. Supabase provides authentication and the database. Mailjet delivers requested sign-in emails through Supabase. These providers process the data necessary to perform those functions, including technical request and delivery records. The study database for this beta is configured in Tokyo, Japan.
Information about their processing is available from Cloudflare, Supabase and Mailjet.
Storage and retention
Account data are retained while the account exists. Study history keeps the most recent 500 completed rounds. Account deletion removes the account and its saved study data from the application database. Providers may retain technical records under their own retention policies.
Authentication uses secure, HttpOnly session cookies. The access cookie lasts up to one hour and the refresh cookie lasts up to seven days. Your browser also remembers the interface language and can retain collections imported from earlier browser-only versions.
Your choices
The account panel provides data export, sign-out and account deletion. You can also contact the operator to request access to your data, correction or deletion. Addresses are supplied by participants when requesting access. Sign-in emails are sent in response to those requests.