隐私政策 / Privacy Policy

1. 我们收集什么

为了提供服务，我们仅收集以下必要信息：

账号信息：化名（handle）、显示名（displayName）、邮箱、密码（bcrypt 哈希存储，不会明文保存）
年龄确认时间戳：你勾选「已年满 18 岁」时记录，证明你符合使用资格
你发布的内容：链接、问题、回答、原创帖、评论、投票等
设备/日志信息：IP 地址、User-Agent（用于安全防护与故障排查）

2. 我们不收集什么

❌ 不收集真实姓名（除非你自愿填到显示名里）
❌ 不收集手机号
❌ 不收集精确位置（只用 IP 粗粒度判断国家/地区用于反作弊）
❌ 不收集通讯录、设备 ID、广告追踪 ID

3. 你的内容如何被使用

站内展示（含个人主页、问题流、相关推荐）
生成 OG 分享卡片（标题 + 摘要 + 平台标识）用于微信、微博等站外分享
搜索引擎收录（你的公开页面可能出现在 Google/Bing 结果中）

我们不会把你的内容用于商业广告投放，不会出售给第三方。

4. 第三方服务

我们使用以下第三方服务，过程中可能向其传输必要数据：

Cloudflare：CDN 加速与安全防护（你的 IP、UA 会经过其节点）
数据库托管：PostgreSQL（数据存储在境内）
邮件发送：当你使用魔法链接登录时，通过 SMTP 服务商发送邮件（仅含你的邮箱地址与登录链接）

5. 数据保留期限

账号信息：账号存续期间保留，删除账号后 30 天内彻底清除
发布内容：账号存续期间保留；删除账号时一并删除
登录日志：保留 90 天（安全审计用途）
反馈信息：保留 2 年（产品改进用途）

6. 你的权利

你对自己的数据享有以下权利：

查看：登录后访问「我的」页面查看你的全部公开内容
修改：在「我的 → 设置」修改化名、显示名、简介、语言
导出：通过页面反馈按钮申请导出你的数据
删除：通过页面反馈按钮申请删除账号

7. Cookie 使用

我们仅使用必要 Cookie 实现登录会话保持（Auth.js Session Cookie）。不使用任何第三方追踪 Cookie，不使用广告 Cookie。

8. 未成年人保护

本服务仅向 18 岁以上用户提供。注册时你需确认已年满 18 岁。我们不会主动收集未成年人信息。如发现未达年龄用户，会立即封禁账号并删除数据。

9. 政策变更

如本政策发生重大变更，我们会在站内公告并通过邮件通知。继续使用服务即视为接受变更。

10. 联系我们

隐私相关问题请联系：[email protected]

1. What We Collect

To provide the Service, we collect only the minimum necessary information:

Account info: handle, display name, email, password (stored as a bcrypt hash — never in plaintext)
Age-confirmation timestamp: recorded when you check "I am 18 or older" to confirm eligibility
Your posted content: links, questions, answers, posts, comments, votes
Device / log info: IP address, User-Agent (for security and troubleshooting)

2. What We Do Not Collect

❌ No real name (unless you voluntarily include it in your display name)
❌ No phone number
❌ No precise location (only coarse IP-based country/region for anti-abuse)
❌ No contacts, device IDs, or advertising identifiers

3. How Your Content Is Used

Display within the Service (your profile, question feed, recommendations)
Generate OG share cards (title + summary + site branding) for off-site sharing on WeChat, Weibo, etc.
Search engine indexing (your public pages may appear in Google/Bing results)

We do not use your content for commercial advertising, and we do not sell it to third parties.

4. Third-Party Services

We use the following third-party services; necessary data may be transmitted to them:

Cloudflare: CDN acceleration and security (your IP/UA traverses their network)
Database hosting: PostgreSQL (data stored within the U.S./EU regions)
Email delivery: when using magic-link sign-in, we send via SMTP providers (containing only your email and the login link)

5. Data Retention

Account info: retained while the account is active; permanently deleted within 30 days of account deletion
Posted content: retained while the account is active; deleted together with the account
Sign-in logs: retained for 90 days (security audit)
Feedback data: retained for 2 years (product improvement)

6. Your Rights

You have the following rights over your data:

View: visit "My profile" after signing in to see all your public content
Edit: edit handle, display name, bio, language in "My profile → Settings"
Export: request a data export via the in-site feedback button
Delete: request account deletion via the in-site feedback button

7. Cookies

We use only essential cookies for session maintenance (Auth.js session cookie). We do not use third-party tracking cookies, and we do not use advertising cookies.

8. Minor Protection

The Service is only for users 18 or older. You must confirm your age during registration. We do not knowingly collect information from minors. If we discover an underage user, the account is immediately banned and data deleted.

9. Policy Changes

For material changes, we will announce in-site and notify by email. Continued use of the Service constitutes acceptance of the changes.

10. Contact

For privacy questions, contact:[email protected]