隐私政策
最后更新日期：2026 年 4 月 25 日
「网页摘要助手」（以下简称"本扩展"或"我们"）尊重并保护所有用户的个人隐私。本政策将详细说明在您使用本扩展及相关服务时，我们如何收集、使用、存储和保护您的信息。请您在使用前仔细阅读本政策。
核心原则：我们仅在为您提供服务所必需的范围内收集最少量的信息；您的网页内容仅在您主动点击操作时才会被发送处理；历史记录和摘要默认保存在您的本地浏览器中。
1. 我们收集哪些信息
1.1 账户信息
- 邮箱地址：用于注册、登录和身份识别，是您账户的唯一标识。
- 昵称：选填信息，用于在界面中展示。
- 密码：经加密后存储，我们无法查看您的原始密码。
1.2 您主动提交的网页内容
当您主动点击以下功能按钮时，当前页面的信息会被发送至后端服务器：
- 生成摘要：发送页面的 URL、标题和 HTML 内容。
- 转换 Markdown：发送页面的 URL、标题和 HTML 内容。
- AI 建议标签（收藏功能）：发送页面的 URL、标题和 HTML 内容，用于分析并推荐分类标签。
如果您未主动点击上述按钮，我们不会收集任何网页内容。
1.3 收藏夹信息
- 收藏的网页：URL、页面标题、页面摘要（可选）。
- 自定义标签：您创建或选择的分类标签名称。
- 收藏数据同时保存在两处：后端数据库（用于跨设备同步）和您浏览器的本地存储（用于离线访问）。
1.4 使用记录
- 调用记录：操作类型（生成摘要 / 转换 Markdown）、页面 URL、页面标题、操作时间、请求来源 IP 地址。
- 用量统计：每日调用次数，用于配额管理和防止滥用。
- 本地历史：摘要结果、Markdown 内容、聊天记录保存在浏览器的
chrome.storage.local 中，上限 100 条。
1.5 反馈信息
1.6 技术信息
- 浏览器扩展 ID：用于 OAuth 回调等浏览器扩展相关通信。
- 语言偏好：您选择的界面语言（中文或英文）。
2. 我们如何使用这些信息
- 提供核心服务：使用网页内容调用 Kimi AI 生成摘要、转换 Markdown、提供标签建议。
- 身份验证：验证您的登录状态，保护账户安全。
- 用量管理：统计每日调用次数，防止服务滥用。
- 收藏管理：保存、同步和分类您收藏的网页。
- 多轮对话：基于摘要内容提供连续问答功能。
- 服务改进：分析汇总的使用数据用于优化功能和性能。
- 公告推送：向您展示与产品相关的重要通知。
3. 数据存储与安全
3.1 本地存储
- 历史记录、摘要内容、收藏缓存、JWT Token、语言偏好均存储在您的浏览器
chrome.storage.local 中。
- 本地数据不会自动同步到云端，仅在您主动发起请求时才会与服务器交互。
- 您可以随时通过清除浏览器扩展数据或卸载扩展来删除本地信息。
3.2 服务器存储
- 账户信息、调用记录、收藏数据、反馈内容存储在由运营方管理的服务器数据库中。
- 密码经 bcrypt 单向哈希加密存储，无法反推出原始密码。
- JWT Token 用于维持登录状态，有效期有限，存储在您的本地浏览器中。
3.3 Markdown 文件存储
- 如果您选择"保存到服务器"模式，转换后的 Markdown 文件将存储在服务器指定目录中，按用户分目录隔离。
- 如果您选择"下载到本地"模式，文件直接保存到您的设备，不会在服务器留存（除非同时开启了"下载时保存到服务器"选项）。
3.4 数据传输安全
- 生产环境下，所有数据传输均通过 HTTPS 加密。
- JWT Token 在请求头中传输，用于身份验证。
3.5 浏览器脚本注入说明
- 注入目的：为获取当前网页的完整 HTML 内容以生成摘要和 Markdown，本扩展会使用 Chrome 提供的
chrome.scripting.executeScript API 向当前标签页注入一个极简的读取函数。
- 注入内容：注入的脚本仅包含一行代码：
() => document.documentElement.outerHTML，即只读取页面的完整 HTML 文本，不做任何其他操作。
- 不做 DOM 修改：注入的脚本不会修改页面内容、不会插入或删除任何 DOM 节点、不会修改页面样式、不会监听用户行为。
- 不加载外部脚本：注入的代码完全内嵌于扩展包内，不会从网络加载任何远程脚本，不会使用
eval 或 new Function 等动态执行方式。
- 触发条件：脚本注入仅在您主动点击"生成摘要"或"转换 Markdown"等按钮时才会执行，不会自动或静默运行。
4. 信息共享与第三方服务
4.1 我们不会出售您的数据
我们不会将您的个人信息出售、出租或以其他方式分享给任何第三方用于商业目的。
4.2 必要的第三方服务
- Kimi AI（Moonshot AI）：为实现摘要生成和 Markdown 过滤功能，网页内容需要发送至 Kimi AI 进行处理。具体隐私条款请参考 Kimi 隐私政策。
- 企业微信（可选）：如您提交反馈，反馈内容可能通过企业微信机器人推送给运营团队，仅用于处理您的问题。
4.3 法律要求
仅在以下情况下，我们可能会披露您的信息：
- 获得您的明确同意；
- 根据法律法规要求，或应政府机关的合法要求；
- 为保护我们的合法权益或公共安全所必需。
5. 管理后台的数据访问
拥有管理员权限的人员可以通过加密随机路径访问管理后台，进行以下操作：
- 查看用户账户信息（邮箱、昵称、注册时间），无法查看密码。
- 查看调用记录（操作类型、页面 URL、时间、IP），用于服务运维和滥用排查。
- 查看收藏数据和标签，用于数据管理和故障排查。
- 查看用户反馈内容，用于产品改进。
- 禁用或启用用户账户（仅针对普通用户，管理员账户不受影响）。
6. 您的权利
- 访问权：您可以在扩展设置和后台查看自己的使用记录和收藏。
- 删除权：您可以随时清除本地历史记录、卸载扩展，或联系管理员删除账户及后端数据。
- 更正权：您可以在扩展中修改昵称等个人信息。
- 撤回同意：您可以随时停止使用服务并删除账户。
7. 数据保留期限
- 本地数据：保留至您主动清除或卸载扩展为止。
- 账户信息：保留至您申请删除账户为止。
- 调用记录：保留用于统计和运维，保留期限不超过 2 年。
- 反馈信息：保留至处理完毕或您要求删除为止。
8. 儿童隐私
本服务不向 14 岁以下儿童提供。如果您发现未满 14 岁的用户向我们提供了个人信息，请联系我们，我们将采取措施删除相关信息。
9. 隐私政策的更新
我们可能会不时更新本隐私政策。更新后的政策将在本页面发布，重大变更将通过扩展内公告或其他适当方式通知您。请您定期查阅本政策以了解最新内容。
10. 联系我们
如果您对本隐私政策有任何疑问、意见或请求，请通过以下方式联系我们：
感谢您信任并使用「网页摘要助手」。我们将持续致力于保护您的隐私和数据安全。
Privacy Policy
Last Updated: April 25, 2026
"Web Page Summary Assistant" (hereinafter referred to as "this extension" or "we") respects and protects the personal privacy of all users. This policy details how we collect, use, store, and protect your information when you use this extension and related services. Please read this policy carefully before using our services.
Core Principles: We collect only the minimum amount of information necessary to provide you with services; your web page content is only sent for processing when you actively click to initiate an action; history records and summaries are saved locally in your browser by default.
1. Information We Collect
1.1 Account Information
- Email Address: Used for registration, login, and identity verification. It is the unique identifier for your account.
- Nickname: Optional information displayed in the interface.
- Password: Stored in encrypted form; we cannot view your original password.
1.2 Web Page Content You Actively Submit
When you actively click the following function buttons, information about the current page will be sent to the backend server:
- Generate Summary: Sends the page URL, title, and HTML content.
- Convert to Markdown: Sends the page URL, title, and HTML content.
- AI Suggested Tags (Bookmark Feature): Sends the page URL, title, and HTML content for analysis and recommended classification tags.
If you do not actively click the above buttons, we will not collect any web page content.
1.3 Bookmark Information
- Bookmarked Web Pages: URL, page title, and page summary (optional).
- Custom Tags: Classification tag names you create or select.
- Bookmark data is stored in two places: backend database (for cross-device synchronization) and your browser's local storage (for offline access).
1.4 Usage Records
- Call Records: Operation type (Generate Summary / Convert Markdown), page URL, page title, operation time, and request source IP address.
- Usage Statistics: Daily call count for quota management and abuse prevention.
- Local History: Summary results, Markdown content, and chat records are saved in the browser's
chrome.storage.local, with a limit of 100 entries.
1.5 Feedback Information
- Feedback content and contact information (optional) that you voluntarily submit.
1.6 Technical Information
- Browser Extension ID: Used for browser extension-related communications such as OAuth callbacks.
- Language Preference: Your selected interface language (Chinese or English).
2. How We Use This Information
- Provide Core Services: Use web page content to call Kimi AI for generating summaries, converting Markdown, and providing tag suggestions.
- Identity Verification: Verify your login status and protect account security.
- Usage Management: Track daily call counts to prevent service abuse.
- Bookmark Management: Save, synchronize, and classify your bookmarked web pages.
- Multi-turn Conversations: Provide continuous Q&A functionality based on summary content.
- Service Improvement: Analyze aggregated usage data to optimize features and performance.
- Announcement Delivery: Display important product-related notifications to you.
3. Data Storage and Security
3.1 Local Storage
- History records, summary content, bookmark cache, JWT Token, and language preferences are all stored in your browser's
chrome.storage.local.
- Local data is not automatically synchronized to the cloud; it only interacts with the server when you actively initiate a request.
- You can delete local information at any time by clearing browser extension data or uninstalling the extension.
3.2 Server Storage
- Account information, call records, bookmark data, and feedback content are stored in the server database managed by the operator.
- Passwords are stored using bcrypt one-way hashing and cannot be reverse-engineered to reveal the original password.
- JWT Tokens are used to maintain login status, have a limited validity period, and are stored in your local browser.
3.3 Markdown File Storage
- If you select "Save to Server" mode, converted Markdown files will be stored in a designated server directory, isolated by user.
- If you select "Download to Local" mode, files are saved directly to your device and will not remain on the server (unless the "Save to server when downloading" option is also enabled).
3.4 Data Transmission Security
- In production environments, all data transmission is encrypted via HTTPS.
- JWT Tokens are transmitted in request headers for authentication purposes.
3.5 Browser Script Injection Disclosure
- Purpose of Injection: To obtain the full HTML content of the current web page for generating summaries and Markdown, this extension uses Chrome's
chrome.scripting.executeScript API to inject a minimal read-only function into the active tab.
- Injected Content: The injected script consists of a single line:
() => document.documentElement.outerHTML. It only reads the page's complete HTML text and performs no other operations.
- No DOM Modification: The injected script does not modify page content, insert or remove any DOM nodes, alter page styles, or monitor user behavior.
- No External Scripts: The injected code is entirely embedded within the extension package. It does not load any remote scripts from the network, nor does it use dynamic execution methods such as
eval or new Function.
- Trigger Condition: Script injection only occurs when you actively click buttons such as "Generate Summary" or "Convert Markdown." It does not execute automatically or silently in the background.
4. Information Sharing and Third-Party Services
4.1 We Do Not Sell Your Data
We do not sell, rent, or otherwise share your personal information with any third party for commercial purposes.
4.2 Necessary Third-Party Services
- Kimi AI (Moonshot AI): To enable summary generation and Markdown filtering features, web page content needs to be sent to Kimi AI for processing. For specific privacy terms, please refer to the Kimi Privacy Policy.
- WeCom (Optional): If you submit feedback, the feedback content may be pushed to the operations team via WeCom bot, solely for handling your inquiry.
4.3 Legal Requirements
We may disclose your information only in the following circumstances:
- With your explicit consent;
- As required by laws and regulations, or in response to legitimate requests from government authorities;
- As necessary to protect our legitimate rights and interests or public safety.
5. Data Access in the Admin Dashboard
Personnel with administrator privileges can access the admin dashboard via an encrypted random path and perform the following actions:
- View user account information (email, nickname, registration time); passwords cannot be viewed.
- View call records (operation type, page URL, time, IP) for service operations and abuse investigation.
- View bookmark data and tags for data management and troubleshooting.
- View user feedback content for product improvement.
- Disable or enable user accounts (applies only to regular users; administrator accounts are not affected).
6. Your Rights
- Right to Access: You can view your own usage records and bookmarks in the extension settings and dashboard.
- Right to Deletion: You can clear local history, uninstall the extension, or contact an administrator to delete your account and backend data at any time.
- Right to Correction: You can modify personal information such as your nickname in the extension.
- Withdraw Consent: You can stop using the service and delete your account at any time.
7. Data Retention Period
- Local Data: Retained until you actively clear it or uninstall the extension.
- Account Information: Retained until you request account deletion.
- Call Records: Retained for statistics and operations, for a period not exceeding 2 years.
- Feedback Information: Retained until processing is complete or you request deletion.
8. Children's Privacy
This service is not provided to children under 14 years of age. If you discover that a user under 14 has provided us with personal information, please contact us and we will take steps to delete the relevant information.
9. Updates to This Privacy Policy
We may update this privacy policy from time to time. The updated policy will be published on this page, and significant changes will be notified to you via in-extension announcements or other appropriate means. Please review this policy regularly to stay informed of the latest content.
10. Contact Us
If you have any questions, comments, or requests regarding this privacy policy, please contact us through the following methods:
- Submit your questions through the "Feedback" feature within the extension.
Thank you for trusting and using "Web Page Summary Assistant." We are committed to continuously protecting your privacy and data security.