隐私政策Privacy Policy

生效日期：2026-07-14　·　适用范围：htmlGenius 浏览器扩展Effective date: 2026-07-14 · Scope: the htmlGenius browser extension

本政策说明我们收集什么、为什么收集、存在哪里、以及你如何控制自己的数据。This policy explains what we collect, why we collect it, where it is stored, and how you stay in control of your data.

htmlGenius 奉行最小收集原则：只收集让「登录身份」与「团队协作批注」正常运转所必需的数据，且全部存放在我们自己控制的服务器上，不接入任何广告网络或第三方数据分析。 htmlGenius follows a minimal-collection principle: we gather only the data essential for login identity and collaborative team annotations to work. Everything is stored on servers we control — no ad networks, no third-party analytics.

1. 我们收集的信息1. Information We Collect

你主动提供或登录时产生的信息Information you provide or that is created on sign-in

数据Data	何时产生When	用途Purpose
Google 账户：邮箱、显示名称、头像、Google 唯一标识（sub）Google account: email, display name, avatar, Google unique ID (sub)	你选择「Google 登录」时When you choose “Sign in with Google”	建立账号身份、显示头像/昵称、把批注绑定到你本人Establishes account identity, shows your avatar/nickname, ties annotations to you
飞书账户：飞书 open_id、显示名称Lark account: Lark open_id, display name	你选择「飞书登录」时When you choose “Sign in with Lark”	同上（仅在你选用飞书登录时收集）Same as above (collected only if you use Lark login)
批注内容：你写下的评论文字、你选中的网页原文片段（quote）、选区位置Annotation content: the comment text you write, the quoted page snippet you select, and the selection position	你创建或编辑一条批注时When you create or edit an annotation	让批注能保存、展示、并跨页面版本自动重新定位Lets annotations be saved, displayed, and automatically re-located across page versions
团队关系：你加入/创建了哪个团队、邀请码Team membership: which team you joined/created, invite code	你加入团队或新建团队时When you join or create a team	团队成员间共享同一份批注并相互隔离Lets teammates share the same annotations while keeping teams isolated
在线状态：你正在查看哪个文档Presence: which document you are viewing	你打开某文档的侧边栏时When you open a document’s sidebar	在同一团队内显示「谁在线」，便于协作Shows “who’s online” within a team to aid collaboration

浏览器本地存储（不发送到我们的服务器）Browser-local storage (never sent to our servers)

本地模式下，或未登录时：批注保存在你浏览器的 IndexedDB 中，完全不离开你的电脑。In local mode, or when not signed in: annotations are stored in your browser’s IndexedDB and never leave your device.
登录后：你的登录会话凭证（session token）保存在 chrome.storage.sync，用于后续请求鉴权（由 Chrome 在你的账户间同步）。After signing in: your session token is stored in chrome.storage.sync to authenticate later requests (synced across your devices by Chrome).

我们不收集的信息What we do not collect

我们不收集：浏览历史、完整网页内容、键盘输入、设备指纹、位置信息、财务信息，也不接入任何广告、追踪或用户分析 SDK。We do not collect: browsing history, full page content, keystrokes, device fingerprints, location, or financial information, and we integrate no advertising, tracking, or analytics SDKs.

当你在某个网页上选中文字并创建批注时，你选中的那段原文片段会上送到我们的后端以便保存这条批注；其余页面内容不上送。When you select text on a page and create an annotation, the quoted snippet you selected is sent to our backend to save that annotation; no other page content is sent.

本机 AI Agent（可选功能，仅在你主动启用时）On-device AI Agent (optional, only when you choose to use it)

「发送给 Codex / Claude Code」是可选功能，且仅在 macOS 上可用。使用时，扩展会把你本次勾选的评论 + 相关页面文本，通过浏览器的原生消息（Native Messaging）只发送给你自己电脑上已安装、已登录的 Codex（Codex Mac App）或 Claude Code CLI，由你本机的 Agent 在本地生成一份候选 HTML。"Send to Codex / Claude Code" is an optional feature, available only on macOS. When used, the extension sends your selected comments + the relevant page text, via the browser's Native Messaging, only to the Codex (Codex Mac App) or Claude Code CLI you have installed and signed into on your own computer. The candidate HTML is generated locally by your own agent.

这部分数据只在你本机处理，不会发送到 htmlGenius 的服务器或插件作者，也不会用于我们的任何分析。This data is processed only on your device; it is never sent to htmlGenius's servers or the extension author, nor used for any of our analytics.
扩展不读取、不保存、不上传你的 Codex / Claude 登录凭证（API Key / Token / Cookie）——它只复用你本机已经存在的登录态。The extension does not read, store, or upload your Codex / Claude credentials (API key / token / cookie) — it only reuses the sign-in that already exists on your machine.
生成的候选版本只写成本地文件（如 原名V1.1.html），不上传任何候选内容。Generated candidates are written only as local files (e.g. nameV1.1.html); no candidate content is uploaded.
Codex / Claude 各自有其独立的隐私政策，约束它们如何处理你交给它们的内容。Codex / Claude each have their own independent privacy policies governing how they handle content you give them.

2. 信息如何被使用2. How Information Is Used

提供登录、身份识别与团队协作功能；Provide login, identity, and team-collaboration features;
在你与团队成员之间实时同步批注（SSE 推送）；Sync annotations in real time between you and your teammates (via SSE);
让你能查看、编辑、删除自己的批注；Let you view, edit, and delete your own annotations;
诊断与保障服务稳定性（服务端日志，见第 4 节）。Diagnose and maintain service stability (server logs; see Section 4).

我们不会把你的数据用于跨站追踪、画像或出售给任何第三方。We never use your data for cross-site tracking, profiling, or sale to any third party.

3. 信息的存储与传输3. Storage & Transmission

存储位置：上述数据存放在我们自有的服务器（阿里云，域名 www.deuce.monster）上的数据库中。服务器与数据库均在我们自己控制下，不使用第三方托管数据库。Location: the above data is stored in a database on our own servers (Alibaba Cloud, domain www.deuce.monster). Both server and database are under our control; we use no third-party hosted database.
传输加密：扩展与后端之间的所有通信均通过 HTTPS（TLS）加密。Encryption in transit: all communication between the extension and the backend is encrypted via HTTPS (TLS).
本地数据：保存在你浏览器 IndexedDB / chrome.storage 中的数据，遵循 Chrome 本身的存储与同步机制。Local data: data stored in your browser’s IndexedDB / chrome.storage follows Chrome’s own storage and sync mechanism.

4. 第三方服务4. Third-Party Services

我们仅在你主动选择对应登录方式时，与以下第三方交互，且只为完成登录鉴权：We interact with the following third parties only when you actively choose the corresponding sign-in method, and solely to complete login authentication:

Google Identity Services：用于「Google 登录」。只读取 openid、email、profile 三个基础范围。受 Google 隐私政策约束。Google Identity Services: used for “Sign in with Google”. Reads only the three basic scopes openid, email, and profile. Subject to Google’s Privacy Policy.
飞书开放平台：用于「飞书登录」。仅在你点击飞书登录时调用，读取用户标识与昵称。Lark Open Platform: used for “Sign in with Lark”. Called only when you click Lark login; reads your user ID and nickname.

除上述登录鉴权外，我们不与任何第三方共享你的数据，也不接入广告/分析网络。Aside from the login authentication above, we share your data with no third party and integrate no ad/analytics networks.

服务端运行日志（用于排查故障）可能短暂记录请求路径、时间与状态码；这些日志默认不含你的批注正文，且会定期清除。Server runtime logs (used for troubleshooting) may briefly record request paths, timestamps, and status codes; these logs do not contain your annotation text by default and are periodically purged.

5. 数据保留与删除5. Data Retention & Deletion

你可以随时删除自己创建的任何一条批注（在侧边栏批注卡片上操作）。仅作者本人可删除自己的批注。You can delete any annotation you created at any time (from the sidebar annotation card). Only the author can delete their own annotations.
你可以编辑自己创建的批注（仅作者本人）。You can edit annotations you created (author only).
退出登录会使当前会话凭证立即失效。Signing out immediately invalidates your current session token.
彻底注销账号 / 删除全部数据：请通过第 8 节的联系方式联系我们，我们会在合理时间内从后端数据库删除你的账号及其名下批注。Permanently close your account / delete all data: contact us via Section 8 and we will remove your account and its annotations from the backend database within a reasonable timeframe.

6. 权限说明（与 Chrome 商店声明一致）6. Permissions (consistent with the Chrome Web Store listing)

activeTab / sidePanel：在当前标签页注入批注侧边栏与浮动工具栏。activeTab / sidePanel: inject the annotation sidebar and floating toolbar into the current tab.
host_permissions（内容脚本 + 连接后端）：批注功能需要在你打开的任意网页上读取/标注选中文本，并与我们的后端通信以保存与同步批注。host_permissions (content script + backend connection): the annotation feature needs to read/annotate selected text on any page you open, and communicate with our backend to save and sync annotations.
identity：完成 Google / 飞书 OAuth 登录。identity: complete Google / Lark OAuth sign-in.
storage：在本地保存你的偏好（语言、主题）、登录会话与本地批注。storage: store your preferences (language, theme), login session, and local annotations.

7. 未成年人7. Minors

本扩展不面向 13 岁以下儿童，我们也不 knowingly 收集儿童信息。如发现误收，请联系我们删除。This extension is not intended for children under 13, and we do not knowingly collect information from children. If we learn we have inadvertently collected any, please contact us to delete it.

8. 联系我们 / 政策变更8. Contact / Policy Changes

如对本政策有任何问题，或希望行使删除权，请通过扩展官网或 GitHub 仓库 chenerzhong123-cloud/htmlGenius 留言。For any questions about this policy, or to exercise your right to deletion, reach out via the extension’s website or the GitHub repo chenerzhong123-cloud/htmlGenius.
本政策如有重大变更，我们会更新本页面顶部的「生效日期」并在扩展内提示。If this policy changes materially, we will update the “Effective date” at the top of this page and notify you within the extension.