隐私政策
Seashelf（拾贝，以下简称「本服务」，网址 seashelf.app）是一款由个人开发者运营的收藏备份与搜索工具：把你在 X 等平台上的收藏同步到自己的书架里，提供搜索、分类和浏览。本政策说明本服务收集哪些信息、如何使用，以及你拥有的权利。
1. 我们收集的信息
- Google 账号信息：你用 Google 登录时，我们只请求
openid、email、profile三项权限，获得你的邮箱、邮箱是否已验证、姓名、头像，以及 Google 账号的唯一标识。我们不会读取你的 Gmail、通讯录、云端硬盘或任何其他 Google 数据。 - 你同步的收藏：你主动同步到本服务的收藏内容，包括帖子正文、作者的公开资料、图片、视频、链接卡片、长文章，以及收藏的先后顺序和同步时间。这些内容本身来自公开平台。
- 登录会话：一个用于保持登录状态的 Cookie（随机令牌，服务端只保存它的哈希值），有效期 30 天。我们不使用广告或跨站追踪 Cookie。
- 访问日志：托管平台会记录请求的基本信息（如 IP 地址、浏览器类型、访问路径、时间），仅用于排查故障和防止滥用，短期保留。
2. 我们如何使用这些信息
- 识别你的身份，让你登录并只看到你自己的收藏。
- 提供关键词搜索、语义搜索、相似内容推荐和自动分类：为此我们会对收藏内容建立全文索引和向量索引，并用 AI 模型判断内容所属的分类。
- 备份收藏中的媒体，使原帖删除后你仍能查看。
- 回复你的咨询，或就服务的重要变更通知你。
我们不会出售你的个人信息，不会用于投放广告，也不会用你的数据训练任何 AI 模型。
3. 与第三方的共享
本服务依赖以下服务商处理数据，它们只为提供本服务而处理必要的数据：
- Cloudflare：网站托管、数据库与文件存储、向量检索，以及用于语义搜索的文本向量化（Workers AI）。数据可能在你所在国家或地区以外的 Cloudflare 数据中心处理和存储。
- Google：提供登录。
- OpenRouter 及其提供的 AI 模型服务商（如 Anthropic）：自动分类时，会把帖子的文字内容发送给 AI 模型，判断它属于哪些分类。只发送帖子内容，不发送你的邮箱或账号信息。
除上述情形以及法律要求外，我们不会向任何第三方提供你的信息。
4. Google 用户数据
本服务对通过 Google API 获得的信息的使用和传输，遵守 Google API 服务用户数据政策，包括其中的「有限使用」（Limited Use）要求。这些信息只用于登录和显示你的账号资料，不会转让给他人，不用于广告，也不会被人工查看（除非你同意、为安全目的或法律要求）。
5. 你的收藏是私密的
你的收藏默认只有你自己能看到。将来如果推出公开分享功能，只有在你主动开启后，相应的收藏才会公开。
6. 数据保存与删除
- 在你的账号存续期间，我们保存你的账号信息和同步的收藏。
- 你可以随时发邮件到 support@seashelf.app 要求导出或删除你的账号和全部数据。我们会在 30 天内完成删除；托管平台的灾难恢复副本会在其后最多 30 天内自动过期。
7. 安全
全站使用 HTTPS；登录令牌只以哈希形式保存；媒体文件通过带签名、会过期的链接访问。不过任何系统都无法保证绝对安全，如发现问题请及时联系我们。
8. 未成年人
本服务不面向 13 周岁以下的儿童。如果你认为有儿童向我们提供了个人信息，请联系我们删除。
9. 政策变更
我们可能会更新本政策。重大变更会在网站上提前告知，并更新上方的生效日期。
10. 联系我们
本服务由个人开发者运营。如有任何问题，请联系 support@seashelf.app。
Privacy Policy
Seashelf (“the Service”, seashelf.app) is a bookmark backup and search tool operated by an individual developer. It syncs the posts you have saved on platforms such as X into your own library and lets you search, categorize and browse them. This policy explains what we collect, how we use it, and your rights.
1. Information we collect
- Google account information. When you sign in with Google we request only the
openid,emailandprofilescopes, which give us your email address, whether it is verified, your name, profile picture and Google account identifier. We do not access your Gmail, contacts, Drive or any other Google data. - Bookmarks you sync. The saved posts you choose to sync: post text, the authors’ public profiles, images, videos, link previews, long-form articles, and the order and time they were synced. This content originates from public platforms.
- Session cookie. One cookie that keeps you signed in (a random token; we store only its hash), valid for 30 days. We use no advertising or cross-site tracking cookies.
- Access logs. Our hosting provider records basic request data (such as IP address, browser type, path and time), used only for troubleshooting and abuse prevention and kept for a short period.
2. How we use information
- To identify you, sign you in, and show you only your own bookmarks.
- To provide keyword search, semantic search, related-post suggestions and automatic categorization. For this we build full-text and vector indexes of your bookmarks and use an AI model to assign categories.
- To back up media in your bookmarks so you can still see it if the original post is deleted.
- To respond to your requests and notify you of important changes to the Service.
We do not sell your personal information, use it for advertising, or use your data to train AI models.
3. Service providers
- Cloudflare: hosting, database and file storage, vector search, and text embeddings for semantic search (Workers AI). Data may be processed and stored in Cloudflare data centers outside your country.
- Google: sign-in.
- OpenRouter and the AI model providers it routes to (such as Anthropic): for automatic categorization, the text of saved posts is sent to an AI model. Only post content is sent, never your email or account information.
We do not share your information with anyone else except as required by law.
4. Google user data
Seashelf’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. This information is used only to sign you in and display your profile; it is not transferred to others, not used for advertising, and not read by humans except with your consent, for security purposes, or as required by law.
5. Your bookmarks are private
Your bookmarks are visible only to you by default. If public sharing is offered in the future, bookmarks will become public only after you explicitly turn it on.
6. Retention and deletion
- We keep your account information and synced bookmarks for as long as your account exists.
- You can email support@seashelf.app at any time to export or delete your account and all of your data. We complete deletion within 30 days; disaster-recovery copies kept by our hosting provider expire automatically within a further 30 days.
7. Security
The site is served only over HTTPS, sign-in tokens are stored only as hashes, and media is served through signed, expiring links. No system is perfectly secure; please contact us if you find a problem.
8. Children
The Service is not directed to children under 13. If you believe a child has given us personal information, contact us and we will delete it.
9. Changes
We may update this policy. We will announce material changes on the site in advance and update the effective date above.
10. Contact
Seashelf is operated by an individual developer. Questions: support@seashelf.app.