拾页 ClipWeave 隐私政策

最后更新：2026 年 7 月

一句话原则：我们只收集为提供核心功能所必需的数据，绝不出售用户数据，绝不用作广告或用户画像。你采集的网页内容默认保存在你自己的浏览器本地；仅当你主动触发 AI 整理时，相关内容才会发送至我们的后端进行临时处理。

摘要

本地优先：你采集的网页内容默认保存在你自己的浏览器本地，不上传至我们的服务器做长期存储。
主动触发：扩展仅在您主动点击采集或整理时才读取/发送当前网页，绝不在后台自动收集。
无遥测：扩展不收集任何使用行为遥测，也不植入第三方追踪代码。
不出售、不画像：我们不会将任何用户数据出售给第三方，也不用于广告或用户画像。
可选登录：Google 登录为可选项；不登录时以匿名设备标识模式运行，不收集任何账户信息。
传输加密：发送至自有后端的内容均通过 HTTPS 加密传输。

1. 我们收集哪些数据

1.1 网页内容（核心功能所需）

当您主动使用 ClipWeave 采集时，扩展会读取您当前正在浏览的网页中您选择的内容（选中的文本或整页正文），并转换为 Markdown。这些数据是您主动触发采集的网页文本，属于"网页浏览内容"。默认情况下，这些内容仅保存在您的浏览器本地。

1.2 设备标识（仅用于额度统计）

为统计每月免费 AI 整理额度，扩展会在本地生成一个匿名设备标识（device id）。该标识不与您的真实身份绑定，仅用于区分不同设备的额度消耗，无法用于识别您个人。

1.3 账户信息（仅在您主动登录时）

若您选择使用 Google 账号登录（登录为可选，非强制），我们会通过 Google OAuth 获取您的邮箱地址与 Google 用户 ID。不登录时，ClipWeave 以匿名设备标识模式运行，不收集任何账户信息。

1.4 服务端日志（连接元数据）

为维持服务安全与排查故障，我们的服务端（托管于 Cloudflare）可能会记录有限的连接元数据，包括：来源 IP 地址、浏览器类型（User-Agent）、访问时间戳、请求类型与规模（如采集片段数量、处理模式），以及上述匿名设备标识。这些日志仅用于安全防护、滥用检测与故障排查，不做用户画像或广告用途，并在短期（通常数天至数周）内自动清理。

1.5 Cookie 与类似技术

我们仅在 Google 登录流程中使用必要的会话 Cookie（如 OAuth 状态标识、登录会话），用于完成身份认证与安全防护。我们不使用任何广告 Cookie 或跨站追踪 Cookie，在您浏览网页或使用采集功能时也不会植入追踪代码。

2. 数据如何使用

上述所有数据仅用于以下单一目的：

将您采集的网页内容转换为 Markdown 并保存在本地；
将采集内容发送至 ClipWeave 自有后端，用于 AI 整理（分类、去重、摘要、矛盾检测、结构化导出）；
统计并控制每月 AI 整理额度；
（仅登录用户）在您重装或换设备时恢复设置与额度。

我们不会将任何用户数据用于广告、用户画像、信贷审批或与上述目的无关的场景。

3. 数据存储、传输与保留

3.1 本地存储

您采集的碎片、设置项默认保存在您的浏览器本地存储（chrome.storage.local）中，不经过我们的服务器长期保存。

3.2 服务端存储（必要且最小化）

为提供 AI 整理与额度服务，我们的服务端（Cloudflare KV）仅存储以下必要数据：

额度数据：匿名设备标识对应的剩余额度/使用量，按月滚动，到期自动清除；
登录用户数据：您登录后的邮箱与 Google 用户 ID（仅登录时存储）；
AI 整理结果短期缓存：为提升性能、避免重复计费，整理结果可能在服务端短期缓存，并随 TTL 自动过期。

重要：我们不会将您的原始网页全文持久化存储在我们的服务器上。网页文本仅在您主动触发 AI 整理时被临时读取与处理，处理完成后不保留您的原始内容副本。

3.3 传输安全

采集内容在发送至 ClipWeave 自有后端进行 AI 处理时，均通过 HTTPS（TLS 加密）传输。

3.4 AI 处理与第三方模型

网页文本会被发送至我们配置的 AI 模型供应商进行整理。这些调用由 ClipWeave 后端代为发起，文本仅用于本次整理任务。我们不在这些供应商处为广告或画像目的留存您的文本。

3.5 保留期限

本地数据：您可随时在扩展内清除采集内容与管理设置；
额度数据：按月滚动存储，次月自动重置清除；
AI 结果缓存：随 TTL 自动过期删除；
登录用户数据：您可在设置中删除账户，删除后服务端相关记录将被清除；
服务端日志：短期留存后自动清理。

4. 第三方服务商

除以下必要情形外，我们不会将您的数据共享给任何第三方：

Google：仅在您主动登录时，为完成 Google 身份认证而与之交互；
Lemon Squeezy：仅在您购买付费套餐时，作为支付处理商处理相关账单信息；
Cloudflare：作为我们的基础设施与托管服务商（Workers、KV 存储）；
AI 模型供应商：为完成 AI 整理，网页文本会按上述方式发送至相应供应商；
法律要求：在法律法规或有效司法程序要求时。

我们不出售任何用户数据，不购买第三方数据用于补充用户档案。

5. 国际数据传输

由于我们使用 Cloudflare 等全球分布式基础设施，且 AI 模型供应商的服务器可能位于不同国家/地区，您的部分数据（尤其是发送至 AI 供应商进行整理的网页文本）可能会在您所在司法管辖区之外被处理或存储。我们通过加密传输及与供应商之间的合同保护措施来保障数据安全。

6. 您的权利

根据您所在地区的法律，您对个人信息享有相应权利。我们支持并尊重以下权利：

访问与更正：您可查看、更正我们持有的您的账户相关数据（如登录邮箱）；
删除：您可删除本地采集内容，或删除账户以清除服务端记录；
数据可携：您的采集内容保存在本地，可随时导出；
欧盟（GDPR）/ 英国：您享有访问、更正、删除、限制处理、数据可携及反对处理的权利；
美国加州（CCPA/CPRA）：您享有知情、删除、拒绝出售或共享个人信息的权利（我们不会出售或共享您的信息用于跨语境行为广告）；
中国（个人信息保护法）：您享有查阅、复制、更正、删除个人信息以及撤回同意的权利。

如欲行使上述权利，请通过扩展内「关于」页面或本政策末尾的联系方式与我们联系。您也有权向所在地数据保护监管机构提出投诉。

7. 儿童隐私

ClipWeave 不面向 13 岁以下儿童（及适用法域下的未成年人），我们不会故意收集儿童的个人数据。若发现误收集，请联系我们删除。

8. 本政策变更

若隐私政策发生重大变更，我们会在扩展内或本页面显著位置通知您，并在本页顶部更新"最后更新"日期。

9. 安全

我们采取合理措施保护您的数据：所有传输均经 HTTPS/TLS 加密；API 密钥等敏感配置通过 Cloudflare 加密密钥（wrangler secret）管理，不写入代码；我们不在服务端存储您的密码；服务端遵循最小权限原则。

10. 联系我们

如对本隐私政策有疑问，或希望行使您的权利，可通过扩展内「关于」页面提供的联系方式，或发送邮件至 clipweave@protonmail.com 与我们沟通。

ClipWeave (拾页) Privacy Policy

Last updated: July 2026

Our principle in one line: We collect only the data strictly necessary to provide our core features. We never sell user data, and we never use it for advertising or user profiling. The web content you clip is stored locally in your own browser by default; it is sent to our backend for temporary processing only when you actively trigger AI organization.

Summary

Local-first: The web content you clip is stored locally in your own browser by default and is not uploaded to our servers for long-term storage.
Active trigger only: The extension reads or sends the current page only when you actively click to clip or organize — it never collects in the background automatically.
No telemetry: The extension collects no usage telemetry and injects no third-party tracking code.
No selling, no profiling: We do not sell any user data to third parties, nor do we use it for advertising or user profiling.
Optional sign-in: Google sign-in is optional. Without signing in, ClipWeave runs in anonymous device-ID mode and collects no account information.
Encrypted in transit: Content sent to our own backend is transmitted over HTTPS.

1. What data we collect

1.1 Web content (required for the core feature)

When you actively use ClipWeave to clip, the extension reads the content you select on the page you are currently viewing (highlighted text or the full-page article) and converts it to Markdown. This data is the web text you deliberately chose to clip and falls under "web browsing content." By default, this content is stored only in your browser locally.

1.2 Device identifier (quota accounting only)

To track the monthly free AI-organizing quota, the extension generates a local, anonymous device identifier (device id). It is not tied to your real identity and is used only to distinguish quota usage across devices; it cannot be used to identify you as an individual.

1.3 Account information (only when you sign in)

If you choose to sign in with a Google account (optional, not required), we obtain your email address and Google user ID through Google OAuth. When you do not sign in, ClipWeave runs in anonymous device-ID mode and collects no account information.

1.4 Server logs (connection metadata)

To maintain security and troubleshoot issues, our server (hosted on Cloudflare) may record limited connection metadata, including: source IP address, browser type (User-Agent), access timestamp, request type and scale (e.g. number of clipped fragments, processing mode), and the anonymous device identifier described above. These logs are used solely for security, abuse prevention, and troubleshooting — never for profiling or advertising — and are automatically purged after a short period (typically days to a few weeks).

1.5 Cookies and similar technologies

We use only the essential session cookies required by the Google sign-in flow (such as OAuth state and sign-in session identifiers) to complete authentication and security checks. We do not use any advertising cookies or cross-site tracking cookies, and we do not inject tracking code while you browse or clip.

2. How we use the data

All of the above data is used for the following single purpose only:

Converting the web content you clip into Markdown and saving it locally;
Sending the clipped content to ClipWeave's own backend for AI organization (classification, deduplication, summarization, contradiction detection, structured export);
Counting and limiting the monthly AI-organizing quota;
(signed-in users only) Restoring your settings and quota after reinstalling or switching devices.

We do not use any user data for advertising, user profiling, credit evaluation, or any purpose unrelated to the above.

3. Data storage, transfer, and retention

3.1 Local storage

Your clipped fragments and settings are stored in your browser's local storage (chrome.storage.local) by default and are not retained long-term on our servers.

3.2 Server storage (necessary and minimized)

To provide AI organization and quota services, our server (Cloudflare KV) stores only the following necessary data:

Quota data: Remaining quota / usage tied to the anonymous device id, rolled over monthly and cleared automatically on expiry;
Signed-in user data: Your email and Google user ID after sign-in (stored only when signed in);
Short-term AI result cache: To improve performance and avoid duplicate billing, organization results may be cached server-side for a short period and expire automatically via TTL.

Important: We do not persistently store your original, full web-page text on our servers. Web text is read and processed temporarily only when you actively trigger AI organization, and no copy of your original content is retained afterward.

3.3 Secure transfer

Clipped content sent to ClipWeave's own backend for AI processing is transmitted over HTTPS (TLS encryption).

3.4 AI processing and third-party models

Web text is sent to our configured AI model providers for organization. These calls are made on your behalf by the ClipWeave backend, and the text is used only for that organization task. We do not retain your text at these providers for advertising or profiling.

3.5 Retention periods

Local data: You can clear clipped content and manage settings inside the extension at any time;
Quota data: Stored on a rolling monthly basis and reset/cleared automatically the following month;
AI result cache: Expires automatically via TTL;
Signed-in user data: You can delete your account in Settings; upon deletion, related server records are removed;
Server logs: Retained briefly, then purged automatically.

4. Third-party service providers

Except for the necessary cases below, we do not share your data with any third party:

Google: Only when you actively sign in, to complete Google identity authentication;
Lemon Squeezy: Only when you purchase a paid plan, as the payment processor handling related billing information;
Cloudflare: Our infrastructure and hosting provider (Workers, KV storage);
AI model providers: To perform AI organization, web text is sent to the relevant provider as described above;
Legal requirement: When required by law, regulation, or a valid legal process.

We do not sell any user data, and we do not buy third-party data to enrich user profiles.

5. International data transfers

Because we use globally distributed infrastructure such as Cloudflare, and because AI model providers' servers may be located in different countries/regions, some of your data — especially the web text sent to AI providers for organization — may be processed or stored outside your jurisdiction of residence. We protect data through encrypted transfer and contractual safeguards with our providers.

6. Your rights

Depending on where you live, you have corresponding rights regarding your personal information. We support and respect the following:

Access and correction: You may view and correct your account-related data we hold (e.g. sign-in email);
Deletion: You may delete local clipped content, or delete your account to clear server records;
Data portability: Your clipped content is stored locally and can be exported at any time;
EU (GDPR) / UK: You have the right to access, rectify, erase, restrict processing, port, and object to processing of your data;
California, USA (CCPA/CPRA): You have the right to know, delete, and opt out of the sale or sharing of personal information (we do not sell or share your information for cross-context behavioral advertising);
China (PIPL): You have the right to access, copy, correct, delete your personal information, and to withdraw consent.

To exercise these rights, please contact us through the extension's "About" screen or the contact information at the end of this policy. You also have the right to lodge a complaint with your local data protection authority.

7. Children's privacy

ClipWeave is not directed to children under 13 (or minors under applicable law), and we do not knowingly collect personal data from children. If we inadvertently collect such data, please contact us to have it removed.

8. Changes to this policy

If we make material changes to this privacy policy, we will notify you prominently inside the extension or on this page, and update the "Last updated" date at the top.

9. Security

We take reasonable measures to protect your data: all transfers use HTTPS/TLS encryption; sensitive configuration such as API keys is managed through Cloudflare encrypted secrets (wrangler secret) and never written into code; we do not store your password on our servers; and our server follows least-privilege principles.

10. Contact us

If you have any questions about this privacy policy, or wish to exercise your rights, please reach out through the contact information on the extension's "About" screen, or email clipweave@protonmail.com.