Privacy Policy

This policy explains how great.pm handles personal information when you visit the website at great.pm (the "site") or contact us. The site offers explainer videos and short courses on GMP, project management and mental models. It has no user accounts, no comment or payment features, no advertising and no analytics. All page resources, including video preview images, are served from great.pm itself.

1. Who is responsible

The site is operated by great.pm ("we", "us"). We are the controller (or "personal information handler", "business" or "personal information controller", depending on the law that applies to you) for the processing described in this policy.

Contact for all privacy matters, including requests to exercise your rights: me@great.pm. We have not appointed a separate data protection officer or local representative. The operator personally handles every privacy request.

2. What we process, why, and for how long

We collect only what is needed to deliver the site and to answer you. We do not build profiles, and we do not make automated decisions about you.

We do not collect sensitive personal information, such as health or biometric data, or other categories that the applicable law treats as sensitive (for example precise location or financial account data) (GDPR Art. 9; PIPL 第28条; CCPA §1798.121; APPI Art. 2(3); LGPD Art. 11; PIPA Art. 23). Please do not send it to us. We use information only for the purposes listed above (APPI Art. 17; PIPL 第6条 and 第17条). If you choose not to provide information, the only effect is that we cannot reply to an email you do not send.

3. Cookies and similar technologies

We use no advertising, analytics or tracking cookies or technologies, and we do not use fingerprinting. No embedded frames (iframes) are loaded when a page opens. The site uses only the browser storage listed below. Each item is strictly necessary to provide a feature you request, so no consent is required under Art. 5(3) of the ePrivacy Directive or reg. 6 of the UK PECR. All of them stay under your control.

Cookie. The site sets one cookie only:

Local storage (kept until you clear it):

Session storage (deleted when you close the tab):

You can delete or block these items in your browser settings at any time. The site will still work; it will simply forget your choices.

These items are the only storage the site itself uses. A video provider may set its own cookies or storage only after you click play and its player loads (see section 4).

4. Service providers, third parties and international transfers

We do not sell, rent or trade personal information.

No third-party requests when a page opens. Opening a page loads resources only from great.pm. Video preview images are stored on and served from our own domain. Your browser sends no request to Google, Bilibili or any other third party until you click play on a video.

Clicking play connects you to the video provider. Each video is shown in a player provided by a third party. When you click play, your browser connects directly to that provider's servers to load the player and the video. The provider then receives your IP address, browser and device information, the page you are on and the video you chose. It may also set or read its own cookies or similar storage. The provider handles this data as an independent controller under its own privacy policy. If you do not click play, none of this happens. You can watch the same videos on the provider's own website instead.

We disclose personal information only to the service providers below, which process it on our behalf or as independent controllers of their own services:

• Cloudflare, Inc. (United States, global network) hosts and delivers the site and protects it against abuse. It processes the technical request data in section 2. Privacy contact: privacyquestions@cloudflare.com. See the Cloudflare Privacy Policy.
• Alibaba Cloud (mainland China) provides our email service. It processes the messages you send to me@great.pm. Privacy contact: a ticket on the Alibaba Cloud support page, or customer service on 400-80-13260. See the Alibaba Cloud legal notice and privacy policy.
• Google LLC / YouTube (United States) provides the video player on most pages. After you click play, the player loads from youtube-nocookie.com. Privacy contact: Google's privacy contact page. See the Google Privacy Policy and how Google uses cookies.
• Bilibili (mainland China) provides the video player for Chinese videos on Chinese-language pages. The service is operated by Shanghai Kuanyu Digital Technology Co., Ltd. (上海宽娱数码科技有限公司) and its affiliates. After you click play, the player loads from player.bilibili.com. Privacy contact: DPC@bilibili.com (personal information protection officer) or help@bilibili.com. See the Bilibili Privacy Policy.
• Other platforms. The site links to our channels on YouTube, Bilibili, Douyin, TikTok, Instagram, LinkedIn, X, Zhihu and Xiaohongshu. These sites receive information only if you follow a link, and their own policies apply.

These providers may process data outside your country, including in the United States and mainland China, where data protection laws may differ from yours. Where the law that protects you requires it, we rely on the transfer safeguards these providers offer. These include standard contractual clauses or recognised certification (GDPR Art. 44–49; UK GDPR Art. 44–49; LGPD Art. 33; APPI Art. 28; PIPA Art. 28-8; PIPL 第38–39条). Your request to view any page is handled by Cloudflare's global network, which may route it outside your country. Email you send to us is necessarily processed by our email provider in mainland China in order to reply to you. When you click play, your browser connects directly to YouTube's servers (United States and elsewhere) or Bilibili's servers (mainland China). Each recipient's name, contact details, purpose and data types are listed above. You may exercise your rights against these recipients through us (PIPL 第39条).

We may also disclose information if a law, court or competent authority requires it, or to protect the site or the safety of others.

5. Selling, sharing and opt-out signals

We do not sell or share personal information. "Share" here means disclosure for cross-context behavioural advertising (CCPA §1798.140(ah) and (k)). We have not done so in the past 12 months, and we have no actual knowledge of selling or sharing information about anyone under 16. We do not use or disclose sensitive personal information (CCPA §1798.121).

We treat Global Privacy Control and Do Not Track signals as valid requests to opt out of sale and sharing (CCPA §1798.135; Cal. Code Regs. tit. 11, §7025). Because we do no tracking, selling or sharing, no further change is needed when we receive these signals.

6. Your rights

Depending on where you live, you may have the right to:

• be informed about, and decide on, how we process your information, and to know what we hold;
• access and obtain a copy of your information, and to receive it in a portable format;
• correct inaccurate or incomplete information;
• delete your information;
• restrict processing, or object to processing based on legitimate interests;
• withdraw any consent at any time, without affecting earlier lawful processing;
• ask for an explanation of our processing rules;
• not be subject to solely automated decisions (we make none);
• not be discriminated or retaliated against for exercising your rights.

These rights are set out, for example, in GDPR and UK GDPR Art. 15–22, including the right to object in Art. 21; PIPL 第44–50条; CCPA §1798.100–1798.130 (rights to know, delete and correct, opt out, and non-discrimination under §1798.125); APPI Art. 32–35; LGPD Art. 18; PIPEDA Schedule 1, Principle 4.9; and PIPA Art. 35–37. Rights for a deceased person's information can be exercised by close relatives as the law permits (PIPL 第49条).

How to make a request. Email me@great.pm and say which right you want to exercise. We do not hold accounts, so we may ask for the minimum details needed to find your information (for example, the email address you wrote from) and to confirm the request is yours. You may use an authorised agent where the law allows. Requests are free. We reply without undue delay and within the time required by the law that applies to you, and in any case within one month. If we decline a request, we will explain why and tell you how to challenge the decision.

Complaints. You may complain to us first. You may also complain to a data protection authority at any time, for example:

• the supervisory authority in your EU or EEA country of residence, work or the place of the alleged infringement (GDPR Art. 77; list of EU authorities);
• the UK Information Commissioner's Office (Data Protection Act 2018 s. 165);
• the Cyberspace Administration of China or another competent authority (PIPL 第65条), or a people's court (PIPL 第50条);
• the California Privacy Protection Agency;
• Japan's Personal Information Protection Commission;
• Brazil's ANPD (LGPD Art. 18 §1);
• the Office of the Privacy Commissioner of Canada (PIPEDA s. 11);
• Korea's Personal Information Protection Commission.

7. Children

The site is not directed at children under 16, and we do not knowingly collect personal information from them. If you are under 16, please do not send us personal information. If you believe a child has done so, contact us and we will delete it. This threshold meets or exceeds the child-protection ages in GDPR Art. 8, PIPL 第28条 and 第31条, COPPA, CCPA §1798.120(c), LGPD Art. 14 and PIPA Art. 22-2.

8. Security

We keep personal information to a minimum and protect what we hold with reasonable technical and organisational measures appropriate to the small volume of data involved. The site is served over HTTPS. No method of transmission or storage is completely secure. If a breach affects your information, we will notify you and the competent authorities where the law requires it.

9. Great PM Publisher

The “Great PM Publisher” application is for the owner's personal use only. It uses the YouTube Data API to upload and manage videos, subtitles, thumbnails, and playlists on the owner's own channel.

The application does not collect, sell, or share any third-party user data. OAuth tokens are stored only on the owner's private server.

The owner may revoke authorization at any time at the Google Account permissions page.

The application complies with the Google API Services User Data Policy, including its Limited Use requirements.

YouTube services are subject to the YouTube Terms of Service. For Google's privacy practices, see the Google Privacy Policy.

The application's use of the YouTube API Services is also subject to the YouTube API Services Terms of Service.

10. International visitors

The site is available worldwide. We apply this policy to every visitor, wherever you are, and we give everyone the rights in section 6, even where a law does not strictly require it. If a mandatory law that applies to you gives you greater protection, that protection prevails.

This policy is published in English and Chinese. Each version is authoritative for readers of that language. If the two versions differ in meaning, the reading more favourable to you applies.

11. Changes to this policy

We may update this policy when the site or the law changes. We will post the new version here and change the "last updated" date. For material changes, we will place a notice on the site before the changes take effect. Where the law requires your consent to a change, we will ask for it.

12. Applicable laws and frameworks referenced

This list describes the laws and frameworks we intend to comply with. It does not choose a governing law or jurisdiction, and it is not a statement that any particular law applies to us.

13. Contact

For questions about this policy or to exercise your rights, email me@great.pm.