私隱政策

Privacy policy · webpage-review (Chrome extension)

最後更新 2026-07-29 · Last updated 29 July 2026

1這個工具做甚麼What this is

這是一個檢視工具。你在自己的網站上瀏覽，把意見直接標註在頁面的元素上；意見會送到開發者 自行租用的一部伺服器，供開發者回覆及處理。工具由開發者個人開發及營運，並非公司產品， 亦沒有任何合作夥伴。

A review tool. You browse your own website and pin written comments onto elements on the page; the comments are sent to one server the developer rents and operates. Built and run by the developer as an individual. No company, no partners.

2收集甚麼What is collected

只有以下幾項，全部由你按下「送出意見」的一刻才產生：

• 意見及回覆的全文，就是你自己輸入的文字。 The full text of your comments and replies — what you typed.
• 你留下意見時所在頁面的網址，以及該頁面的標題。 The URL of the page you commented on, and that page's title.
• 你所指向元素的結構特徵，用來在頁面日後改動之後仍然找回同一個位置。 具體是：元素的 tag 名稱、它在同類兄弟元素之中的排列位置、該元素文字內容的雜湊值（單向計算的結果，不是文字本身）、圖片的檔案名稱與 alt 文字、上方最接近的標題文字及其 id、以及元素的 CSS class 名稱。 A structural fingerprint of the element you pointed at, so the comment can find the same spot again after the page changes: the element's tag name, its position among same-tag siblings, a hash of the element's text (a one-way value, not the text itself), an image's filename and alt text, the nearest heading's text and id above it, and the element's CSS class names.
• 時間，即每則意見送出的時刻。 A timestamp for each comment.
• 你貼上的那一行文字（工作階段憑證）：它會存在你的瀏覽器內，並在每次向伺服器查詢時一併送出，作為身分證明。伺服器只保存它的雜湊值，不保存原文。 The line of text you pasted in (your session token): kept in your browser and sent with every request as proof of identity. The server stores only a hash of it, never the original.

意見的作者名稱由伺服器指派，來自開發者建立這一行文字時所填的標籤。你不需要輸入姓名，擴充功能也不會傳送任何你自行填寫的身分。 The author name on a comment is assigned by the server, from the label the developer set when issuing that line of text. You never type a name, and the extension never sends one.

3不會收集甚麼What is never collected

• 不會收集瀏覽紀錄。No browsing history.
• 除上述指紋以外，不會收集頁面內容；不會截圖，亦無法截圖。 No page content beyond the fingerprint above. No screenshots — the extension has no screenshot capability at all.
• 不會讀取或傳送 Cookie、密碼、表格內容或按鍵紀錄。 No cookies, no passwords, no form contents, no keystroke logging.
• 沒有分析工具、沒有廣告識別碼、沒有第三方追蹤程式碼。 No analytics, no advertising identifiers, no third-party tracking code.
• 在白名單網址以外的任何頁面，擴充功能不會載入，亦不會收集任何東西。 Nothing at all from any page outside the whitelisted address prefixes: the extension is not loaded there.
• 在未登入的狀態下，完全不會收集任何東西。 Nothing at all while signed out.

4資料送到哪裡Where it goes

只有一個目的地：public-tools.hjc925.cloud，一部由開發者租用及管理的伺服器。 意見存放在該伺服器上的一個 SQLite 資料庫。程式碼之中沒有第二個網絡目的地——沒有雲端服務供應商、沒有分析平台、沒有內容傳送網絡。

One destination only: public-tools.hjc925.cloud, a server the developer rents and administers. Comments live in a SQLite database on that server. There is no second network destination anywhere in the code — no cloud provider, no analytics platform, no CDN.

與任何網頁伺服器一樣，該伺服器的運行紀錄會保留每個 API 請求的方法、路徑、回應狀態與處理時間；查詢某一頁的意見時，該頁的網址會出現在這些紀錄之中。連線的 IP 位址亦會如常記錄。這些紀錄留在伺服器上，不會外傳。 Like any web server, it keeps operational logs: the method, path, status and duration of each API request. Because the page you are reading comments for is named in that path, its URL appears in those logs. Connecting IP addresses are logged as usual. The logs stay on the server.

5誰可以看到Who can see it

• 你自己，透過你手上的那一行文字。 You, through the line of text you were given.
• 開發者，即該項目的管理者，透過管理介面。 The developer, as the project's administrator, through the admin panel.
• 沒有其他人。伺服器不對外公開意見內容，每一次讀取都必須通過憑證檢查，而每一個憑證只能讀到它所屬項目的意見。 Nobody else. Comments are not public; every read is checked against a credential, and a credential only ever reaches its own project's comments.

6留在你電腦上的資料What is stored on your machine

全部存於 Chrome 自己的 chrome.storage.local，不會同步到任何 Google 帳戶，亦不會離開這部電腦：

• 你貼上的那一行文字；the line of text you pasted in;
• 你的項目名稱、顯示標籤與可檢閱網址清單的一份副本； a cached copy of your project name, display label and reviewable address list;
• 每則意見的已讀標記；your per-comment read marks;
• 尚未送出的草稿文字。any unsent draft.

登出會刪除以上全部。移除擴充功能亦會一併移除。 Signing out deletes all of them. Removing the extension removes them too.

7權限及原因Permissions and why

權限 Permission	原因 Why
public-tools.hjc925.cloud （必需 required）	存放意見的伺服器。安裝時的提示只會提到這一個網域。 The server the comments go to. The only domain named in the install notice.
個別網站 （選用 optional）	逐個網址、由你按下才要求。安裝時不會要求，開啟面板時不會要求，瀏覽時不會要求。你可以拒絕，也可以隨時在 chrome://extensions 收回。 Requested one origin at a time, only when you click that site. Never at install, never on panel open, never while browsing. You may refuse, and you may withdraw it at any time.
storage	存放上一節所列的項目。 Holds the items listed in section 6.
sidePanel	顯示側面板，即你留下意見的地方。 The side panel itself — where you write.
scripting	在你已授權、且屬於檢閱範圍的頁面上載入標註功能。 Loads the pinning code into a page you have granted and that is in review scope.
activeTab	讀取目前分頁的網址，以判斷該頁是否屬於檢閱範圍。 Reads the current tab's URL to decide whether it is in review scope.

擴充功能沒有要求 tabs、history、cookies、downloads、notifications 或 clipboardRead 權限。

The extension does not request tabs, history, cookies, downloads, notifications or clipboardRead.

8保存與刪除Retention and deletion

意見會一直保存，直至開發者刪除為止；刪除為軟刪除，紀錄仍留在資料庫內，只是不再顯示。伺服器每晚備份資料庫一次，備份同樣只存放在同一部伺服器。

Comments persist until the developer deletes them. Deletion is soft: the row stays in the database and stops being shown. The database is backed up nightly, on the same server and nowhere else.

撤銷你手上的那一行文字，只會收回存取權，不會刪除任何意見。若要刪除你留下的內容，請直接聯絡開發者。 Revoking your line of text withdraws access and deletes nothing. To have your content deleted, ask the developer directly.

9不出售、不分享No sale, no sharing

不出售資料。不與任何第三方分享。不用於廣告或個人化推薦。不用於任何自動決策或評分。不用於訓練任何模型。

No data is sold. No data is shared with any third party. It is not used for advertising or personalisation, not used for automated decision-making or profiling, and not used to train any model.

10聯絡Contact

有任何疑問、要求刪除，或想收回存取權：電郵 hello@hjc925.cloud， 或直接在 WhatsApp 聯絡設計師（你收到那一行文字的同一個對話）。

Questions, deletion requests, or withdrawal of access: email hello@hjc925.cloud, or message the designer on WhatsApp — the same thread the line of text arrived in.