Privacy Policy · 隐私政策

1. Who we are · 我们是谁

The Service is operated by the Console-as-a-Service project ("the Operator"). For any privacy question, access or deletion request, contact us at daviddongxu@gmail.com.

本服务由 Console-as-a-Service 项目（下称"运营方"）运营。任何隐私相关问题、数据查阅或删除请求， 请发邮件至 daviddongxu@gmail.com。

2. Data we collect · 我们收集的数据

• Account data / 账号数据：email address, optional username, a salted password hash, plan and role, last login time. We never store passwords in plain text.
• Session metadata / 会话元数据：session ID, creation/expiry times, which engineer joined, connection events, and the requesting IP address (used only for rate limiting, abuse prevention and diagnostics).
• Terminal content / 终端内容：commands and output are relayed through our server in memory only and are not written to disk or used for any other purpose.
• Field uploads / 现场端上传：photos/files you send from the field console are stored temporarily for relay and are wiped when the server restarts or the session ends.
• Payments / 支付数据：when you pay online, the payment is processed by a third-party payment provider. We receive only an order reference, the email you paid with, the plan and the amount — we never see or store your card number. Activation codes purchased manually are stored with their redemption status.
• Messages you send us / 主动提交的信息：feedback text and an optional reply email address.

我们只收集运行服务所必需的数据：账号信息（邮箱/用户名/加盐口令散列）、会话元数据（会话 ID、时间、参与工程师、IP 仅用于限速与防滥用）、 现场端临时上传文件（重启或会话结束后清除）、支付订单参考信息（卡号由支付机构处理，我们不经手不存储）以及你主动提交的反馈内容。 终端里敲的命令与回显仅在内存中转发，不落盘、不用于其它用途。

3. Cookies and local storage · Cookie 与本地存储

We do not use advertising or analytics trackers. Your browser's local storage keeps a single login token so you stay signed in; clearing site data or signing out removes it. The server sets no tracking cookies.

本站不使用广告或统计追踪。浏览器本地存储只保存一个登录令牌（用于保持登录态），退出登录或清理站点数据即被删除；服务端不设置追踪 Cookie。

4. Service providers · 第三方服务商

• Payment processors — card payments (Stripe) and China-market checkout (afdian). Your payment data is handled under their own privacy policies.
• Email delivery — transactional email (activation, receipts, password reset), e.g. Resend / Brevo.
• Cloud hosting — servers located in Singapore; data is transmitted over TLS.

支付由第三方支付机构处理（信用卡通道 Stripe / 国内爱发电），邮件由事务性邮件服务商（Resend 或 Brevo）投递，服务器托管在新加坡并通过 TLS 传输。 我们不会出售或出租你的个人数据。

5. Retention · 数据保留

Relay session data and uploaded files live in memory or temporary storage and are removed automatically. Account records are kept until you ask us to delete them. Order records are retained as long as needed for accounting, tax and dispute handling.

中继会话数据与上传文件为临时性质、自动清除；账号数据保留到你申请注销为止；订单记录按财务、税务与争议处理所需期限保留。

6. Your rights · 你的权利

You can ask us to access, correct, export or delete your personal data, or to close your account, by writing to daviddongxu@gmail.com. We answer within a reasonable period. Deleting the account removes the account record and revokes all of its sessions.

你可以通过 daviddongxu@gmail.com 要求查阅、更正、导出或删除个人数据，或注销账号；注销会移除账号记录并立即失效全部登录会话。

7. Security, changes and children · 安全、变更与未成年人

Passwords are stored only as salted hashes, traffic is encrypted with TLS, and access to relay sessions requires the session code plus an account where applicable. No system is perfectly secure, so please do not relay data you are not allowed to share. The Service is not directed at children under 13. If this policy changes, the new version will be published on this page with an updated date.

口令仅以加盐散列保存、传输使用 TLS，加入中继会话需要会话码（部分场景还需登录）。没有任何系统绝对安全，请勿转发你无权分享的数据。 本服务不面向 13 岁以下儿童。政策如有变更，将在本页发布并更新日期。