沧烁工具箱

隐私政策

版本 0.1.0 · 更新:2026-10-06

运营主体:湖北花海网络科技有限公司
联系邮箱:14329140@qq.com

数据与用途

基础工具处理你输入的文本、图片和二维码,以及按需读取的设备、传感器和电池信息,默认在本机处理。收藏、最近使用和设置保存本机;云同步默认关闭,你分别开启后才发送相应工具编码、时间/次数、设置和随机同步设备标识,不发送工具原文、图片或扫码历史。扫码历史默认关闭,最多 100 条,不保存 Wi-Fi/OTP 载荷。

注册时服务器保存邮箱、昵称、BCrypt 密码哈希和会话信息,客户端长期令牌用 Android Keystore 加密。反馈发送你填写的正文、类型及可选联系方式,供管理员处理回复。

AI 在你单独同意后,把文本经本项目服务器交给界面所示的服务商。服务器不持久化输入/输出,仅保存每日尝试数;结果在 App 内存。服务商保存区域与期限按部署时选定服务商政策,启用前说明。取消不保证上游停止,可能仍计次。请勿提交不必要的敏感信息。当前 QR/PDF 网页在浏览器或 WebView 中处理,不上传选中文件。

权限与第三方

仅开启扫码才申请相机;网络和网络状态支持联网能力。不申请位置、麦克风、电话、通讯录或全盘存储权限。系统选择器只授予选中文件访问权。没有广告或第三方自动分析 SDK。外部推荐链接需确认,分享接收方由你选择,它们按各自政策处理数据。完整权限说明。

运行与保存

网络连接需要网络地址;限流身份/IP 计数设有 TTL。日志只保留状态、耗时及 traceId 等运行信息,不记录工具原文;网关不记录 IP、User-Agent、URL 或正文。日志按最多 3 个 10 MB 文件滚动,覆盖时间取决于使用量。账号、同步、反馈及历史 AI 次数保存至账号删除;登录会话最长 30 天并定期清理。

本机崩溃诊断 / Local crash diagnostics

只读取本包近期崩溃/ANR 时间与类型,近 7 天最多 10 条。不读取异常原文或系统堆栈,不自动上传;可复制、清空显示历史,系统维护的原始记录不能由应用删除。 / Up to 10 local crash/ANR times and types from 7 days, without exception text, system traces or automatic uploads. Copying is your choice; clearing hides history but cannot remove OS records.

控制与删除

你可撤回相机权限、关闭云同步、清空扫码历史和最近使用。关闭同步不等于删除服务器数据。在 App「我的 → 删除账号」或 网页账号删除入口 输入邮箱和密码确认,删除账号、所有会话、云同步、反馈及 AI 使用计数。App 同时清理本机该账号同步分区;网页不远程擦除设备。

匿名数据、其他设备副本及导出文件仍需在对应设备/文件应用清理。系统清除应用存储或卸载可移除本机应用数据;导出文件不自动删除。App 配置排除系统云备份和设备迁移,厂商实现可能不同。

受限服务器恢复备份最多保留 30 天,删除后的副本随保留期淘汰;旧备份恢复必须合并最新删除台账并再次移除已删除账号。台账仅保留旧账号 ID/时间,管理员审计不含工具原文。第三方 AI 数据删除可通过联系邮箱提出,由运营方按服务商能力处理;无法保证撤回已发送的内容。

联系与安全

信息查询、更正、导出、删除或隐私问题请联系 14329140@qq.com。请勿在邮件或公开反馈提供密码、Token 或不必要的敏感内容,核验身份不要求明文密码。正式服务使用 HTTPS、服务端环境密钥、输入校验和资源限制;功能和第三方处理变化时更新政策并在需要时重新征求同意。

English

Privacy policy

Operator: 湖北花海网络科技有限公司 (Hubei Huahai Network Technology Co., Ltd.). Contact: 14329140@qq.com. Version 0.1.0, updated 2026-10-06.

Basic tools process input and selected files on your device. Favorites, recents, settings and optional scan history stay there by default. Cloud sync is off until you opt in separately; it sends tool codes, times/counts, settings and a random sync device identifier, not tool inputs or images. Scan history holds up to 100 entries, excluding Wi-Fi and OTP.

Accounts store email, nickname, BCrypt password hashes and sessions; long-lived client tokens use Android Keystore encryption. Feedback sends your text and optional contact information for support. AI sends text via our server to the displayed configured provider only with your consent. Our server retains no AI input/output, only daily attempt counts. Provider retention, region and deletion rules depend on the provider disclosed before enabling it. Cancellation may still consume an attempt. Current QR/PDF web tools process selected files in the browser.

Camera permission is requested only for scanning. Internet/network state support online functions. No location, microphone, contacts, phone or broad storage permission is requested. No advertising or automatic third-party analytics SDK is included. Sharing and confirmed external links are controlled by you.

Rate-limit identity/IP counters expire with a TTL. Operational logs omit input, IP, URL and User-Agent at the gateway and rotate across at most three 10 MB files. Account, sync, feedback and AI count data remain until account deletion. Sessions last at most 30 days and expire regularly.

Delete your account in the app or through the web deletion page after email/password confirmation. Cloud data and sessions are removed; the app clears its account sync partition. Anonymous data, copies on other devices and exported files require separate clearing. Clear app storage/uninstall for app-local data; delete exported files separately. App backup rules exclude system cloud backup and device transfer, subject to manufacturer behavior.

Restricted recovery backups expire within 30 days. Restoring older backups requires the latest independent deletion ledger and suppression of deleted users before reopening service. The ledger contains only old IDs/times. Contact us for information, correction, export, deletion or provider deletion requests; do not send passwords/tokens in messages. Production uses HTTPS and server-side secrets. Changes to processing update this policy and consent where applicable.