产品文档 / Product DocsMulti-Account Switch · v0.1.1
隐私协议 / Privacy Policy
多账号切换（Cookie配置）的数据处理说明。中英文全文在本页公开可见。
中文隐私协议
本协议说明「多账号切换」浏览器扩展及其配套落地页（product.xyptkd.cn） 和后台服务（my-admins.xyptkd.cn）如何收集、使用、存储和保护你的个人信息。 安装或使用本扩展即视为你已阅读并同意本协议。
1. 我们收集的信息
- 账号邮箱与密码：你主动注册或登录专业版时，邮箱和输入的密码 经 HTTPS 发送至我们的账号服务，服务器处理密码以完成注册或认证，并保存密码哈希， 不以明文保存密码。扩展本地保存返回的邮箱及登录令牌，不保存你输入的密码。
- 订单与支付信息：商户订单号、支付渠道（微信/支付宝）、 金额、支付/退款时间戳、支付渠道返回的交易流水号。我们不接触你的银行卡、 支付宝/微信密码，支付过程完全在第三方渠道完成。
- 随机浏览器标识：一个由本扩展在首次安装时生成的随机 UUID （存储在浏览器本地 storage），用于实现专业版「最多 3 台设备」的绑定校验。 不包含你的真实硬件信息（不采集 MAC / IMEI / IP 地理定位）。
- 账号快照数据：你主动保存的站点完整网址、主机名、Cookie 名称、值及属性， 分组名、配置名和更新时间 —— 仅存储在本机浏览器 storage 中，不会上传到我们的服务器。 Cookie 可能包含登录会话和认证信息，即使仅在本机处理，也属于敏感数据。
2. 扩展数据边界与官网访问统计
- 扩展读取当前标签页网址以保存和切换账号，不读取浏览器完整历史记录数据库，也不向我们的服务器上传站点列表或浏览活动记录；保存的站点与 Cookie 快照仅在本机用于账号管理和切换
- 扩展在本机读写 Cookie 以完成保存和切换，我们的服务器不接收这些快照
- 扩展不采集硬件标识、MAC 地址或 IP 地理位置用于设备绑定
- 即使尚未登录，打开扩展设置页也会向账号服务发送公开支付渠道查询（GET /api/v1/pay/channels）。该请求不附带已保存的 Cookie 快照；服务器或反向代理可能记录 IP 地址、请求时间、路径、状态码和客户端信息，用于运行服务、排错和限制滥用
- 官网使用 stats.xyptkd.cn 提供的 GoatCounter 访问统计，用于了解页面访问及来源；访问网站也会产生服务器请求日志。这与扩展中的 Cookie 快照数据分开，不上传快照进行统计
- cookies 权限用于读取、清除和恢复会话；tabs 用于读取当前站点及切换后打开页面；storage 用于保存本地快照和设置；contextMenus 用于扩展图标的账号或分组快捷操作。站点访问权限通常按站点请求，也可由你在设置中主动授予所有站点；账号服务访问权限用于账号、权益、设备绑定和支付渠道查询。授予所有站点权限不表示我们会上传全部浏览数据
3. 信息的使用目的
- 账号邮箱：用于登录和联系你（订单异常通知）
- 订单信息：用于发放专业版权益、核对账目、退款处理
- 随机浏览器标识：用于专业版设备绑定校验，防止一份授权被无限制复用
- 账号快照数据（本机）：实现扩展的核心功能"按站点切换 Cookie 账号"
4. 信息的存储位置
- 本机（浏览器 storage）：账号快照、分组、随机设备标识、邮箱、access_token（登录凭证）、 权益缓存、语言和已授予站点记录。扩展未对 Cookie 快照另行加密；请保护你的浏览器配置文件和设备。 卸载扩展会清除其本地存储，但不会删除你另行导出的文件，也不会自动注销服务器账号。
- 本地备份文件：你主动导出的 JSON 包含分组、配置、站点网址和 Cookie 值，未加密，不包含专业版账号登录令牌。导入时在本机读取文件，不上传备份。备份可包含有效登录凭据，请勿公开、发给他人或放入不可信的同步位置；不再需要时自行删除
- 本地待付款标记：发起或恢复支付宝付款时，扩展本地保存账号邮箱、产品标识、订单 ID 和随机尝试标识，用于恢复待付款订单并避免重复下单；已确认终态订单会清除对应标记
- 我们的服务器（my-admins.xyptkd.cn，位于中国大陆阿里云）： 账号邮箱、哈希后的密码、订单记录、权益记录、设备绑定摘要。
5. 信息共享
除以下场景外，我们不会向任何第三方分享你的个人信息：
- 支付时必要的信息传递给支付渠道（微信支付、支付宝），用于完成交易， 包括商户订单号、金额、商品信息及必要签名字段。
- 法律法规要求或司法机关依法出具的调证文件。
发起或继续支付宝付款时，扩展把必要付款信息提交至支付宝的独立跨来源 iframe 收银台，页面适用支付宝自己的隐私规则。扩展不读取支付宝支付表单的 DOM 或你输入的支付密码，而是向账号服务查询订单付款状态。
我们不会售卖、出租、或以营销目的共享你的信息。
6. 你的权利
- 查询与导出：在扩展 options 页查看订单历史和权益状态，并通过备份功能导出本地分组与账号快照。
- 注销账号：发邮件到客服邮箱申请，我们会核实身份并处理账号及关联记录的删除或匿名化；依法需要保留的交易或安全记录可能无法立即删除。
- 解绑设备：在扩展或 Admin 后台自助解绑，释放设备名额。
- 退款：符合退款条件时发邮件申请，我们会通过原支付渠道退回。
7. 数据保留
本地快照按浏览器存储机制保留，你可删除配置、清理扩展数据或卸载扩展；导出文件需自行删除。 服务器账号、订单、权益和设备绑定记录在提供服务、处理退款与争议、保障安全及满足适用保存义务 所需期间保留。你可联系客服申请查询、更正或删除；核实身份后处理，依法应保存的记录除外。
8. 安全措施
- 全站 HTTPS 传输（Let's Encrypt 证书）
- 账号密码在服务器注册或认证时处理，持久存储为密码哈希
- JWT 访问令牌有效期 30 天
- Admin 管理后台路径混淆 + 独立强密码
- 数据库物理部署在自有服务器，不上第三方 SaaS
9. 儿童隐私
本服务不面向 14 岁以下儿童。若你是儿童的监护人并发现儿童使用了本服务，请联系客服邮箱，我们会立即删除相关信息。
10. 协议变更
本协议更新时会在本页面公布最新版本，并更新顶部的"最近更新"日期。 重大变更会通过注册邮箱通知。继续使用本服务即视为同意变更后的协议。
11. 联系我们
有任何隐私相关问题请邮件联系： xyptkd1991_multi_account@2925.com
12. Chrome Web Store 用户数据有限使用
多账号切换仅为已披露的按站点保存和切换账号，以及相关账号认证、权益、付款、支持和服务安全用途使用必要用户数据。我们对用户数据的使用遵守 Chrome Web Store 用户数据政策，包括 Limited Use（有限使用）要求。
我们不出售用户数据，不将其用于个性化广告、无关画像、信用评估或借贷。向第三方传递数据仅限于提供或改进已披露功能所必需、遵守法律或防范滥用的情况；人工访问受限于你的明确同意、必要安全调查或法律要求。
Chrome Web Store User Data Policy · Limited Use
13. 本静态资料站的托管
本页面所在的 knrlos.github.io/docs/ 为面向所有用户的公开静态资料站，用于提供产品说明、隐私与支持信息。本站不运行访问统计、登录、付款或广告脚本，不接收扩展中的 Cookie 快照、备份或 Pro 登录凭据。
本站由 GitHub Pages 托管。GitHub 可能记录并保存访问者 IP 地址，用于安全目的。详情见 GitHub Pages 官方说明。
上述资料站声明与产品官网及账号服务的处理范围分开。访问 product.xyptkd.cn 时的 GoatCounter 统计与服务器日志，以及扩展设置页的账号服务查询、Pro 账号和支付处理，仍适用前文披露。本站中的官网链接由你主动点击访问。
Privacy Policy (English)
This policy describes how the Multi-Account Switch browser extension, its landing page (product.xyptkd.cn) and its backend service (my-admins.xyptkd.cn) collect, use, store and protect your personal information. By installing or using the extension you are deemed to have read and agreed to this policy.
1. Information we collect
- Account email & password: entered when you voluntarily register or sign in to Pro. Your email and entered password are sent over HTTPS to our account service, which processes the password for registration or authentication and stores a password hash, not a plaintext password. The extension stores the returned email and login token locally, not the password you entered.
- Order & payment info: merchant order number, payment channel (WeChat / Alipay), amount, paid/refunded timestamps, channel-side transaction IDs. We do not have access to your card / Alipay / WeChat credentials — payment happens entirely on the third-party channel.
- Random browser identifier: a random UUID generated by the extension on first install (stored in browser local storage), used to enforce the "up to 3 devices" Pro binding rule. No hardware identifiers (MAC / IMEI / IP geolocation) are collected.
- Account snapshot data: full site URLs, hostnames, Cookie names, values and attributes, group names, profile names and update timestamps you save — stored only in your local browser storage; never uploaded to our servers. Cookies may contain login sessions and authentication information, which are sensitive even when handled only on your device.
2. Extension data boundaries and website statistics
- The extension reads the current tab URL to save and switch accounts. It does not query the browser's complete history database or upload site lists or browsing-activity records to our servers. Saved sites and Cookie snapshots are used locally for account management and switching
- The extension reads and writes Cookies locally to save and restore sessions; our servers do not receive those snapshots
- The extension does not collect hardware identifiers, MAC addresses or IP geolocation for device binding
- Opening extension settings sends a public payment-channel query (GET /api/v1/pay/channels) to the account service even while signed out. The query does not include saved Cookie snapshots. Servers or reverse proxies may record IP addresses, request timestamps, paths, status codes and client information to operate the service, investigate faults and limit abuse
- The website uses GoatCounter at stats.xyptkd.cn for page-visit and referral statistics. Website requests also generate server logs. These are separate from extension Cookie snapshots, which are not uploaded for analytics
- The cookies permission reads, clears and restores sessions; tabs reads the current site and opens pages after switching; storage saves local snapshots and settings; contextMenus provides account and group shortcuts on the extension icon. Site access is normally requested per site; you can also explicitly grant all-site access in settings. Account-service access supports authentication, entitlements, device binding and payment-channel queries. All-site permission does not mean that we upload all browsing data
3. How we use the information
- Email: for sign-in and essential service notifications (e.g. order anomalies)
- Orders: to grant Pro entitlement, reconcile accounts, and handle refunds
- Random browser identifier: to enforce the Pro device binding cap
- Snapshot data (local): to power the core "switch accounts per site" feature
4. Where your data lives
- Local (browser storage): snapshots, groups, random device identifier, email, access_token, entitlement cache, language and granted-site records. The extension does not add encryption to Cookie snapshots; protect your browser profile and device. Uninstalling clears extension storage, but does not delete exported files or automatically close your server account.
- Local backup files: JSON files you explicitly export contain groups, profiles, site URLs and Cookie values. They are not encrypted and do not include the Pro account login token. Imports read the file locally without uploading the backup. Backups may contain valid login credentials; do not publish them, share them with others, or put them in untrusted sync locations. Delete them yourself when no longer needed
- Local pending-payment marker: when starting or resuming Alipay payment, the extension locally stores the account email, product identifier, order ID and a random attempt identifier to recover the pending order and avoid duplicate orders. The corresponding marker is cleared when a terminal order status is confirmed
- Our server (my-admins.xyptkd.cn, hosted on Alibaba Cloud Mainland China): account email, hashed password, order records, entitlements, device binding summary.
5. Sharing
We do not share your information with any third party except:
- Necessary data is passed to the payment channel (WeChat Pay, Alipay) to complete the transaction, including merchant order number, amount, product information and necessary signed fields.
- When required by law or a valid legal process.
When starting or continuing Alipay payment, the extension submits necessary payment information to Alipay’s separate cross-origin checkout iframe, which is subject to Alipay’s own privacy rules. The extension does not read the Alipay payment-form DOM or the payment password you enter. It queries the account service for the order’s payment status.
We do not sell, rent, or share your data for marketing purposes.
6. Your rights
- Access & export: view your order history and entitlement status in extension options, and export local groups and account snapshots using the backup feature.
- Delete your account: email support. After identity verification, we process deletion or anonymization of your account and related records; transaction or security records subject to retention obligations may not be removable immediately.
- Unbind devices: do it yourself in the extension or request via support.
- Refund: email support if eligible; refunds go back via the original payment channel.
7. Data retention
Local snapshots persist according to browser storage behavior. You can delete profiles, clear extension data or uninstall; exported files must be deleted separately. Server account, order, entitlement and device-binding records are kept as needed to provide services, handle refunds and disputes, maintain security and meet applicable retention obligations. Contact support for access, correction or deletion after identity verification, subject to required retention.
8. Security
- HTTPS everywhere (Let's Encrypt)
- Account passwords are processed by the server for registration or authentication and stored persistently as password hashes
- JWT access tokens with 30-day expiry
- Admin panel path obscured + independent strong password
- Database runs on our own server, not third-party SaaS
9. Children's privacy
This service is not directed to children under 14. If you are a guardian and discover a minor using the service, please email us and we will delete the related data promptly.
10. Changes to this policy
We will publish updates on this page and update the "Last updated" date. Material changes will be notified via your registered email. Continued use of the service constitutes acceptance.
11. Contact
For any privacy-related inquiry, email: xyptkd1991_multi_account@2925.com
12. Chrome Web Store Limited Use of user data
Multi-Account Switch uses necessary user data only for its disclosed per-site account saving and switching, and related authentication, entitlements, payment, support and service security. Our use of user data complies with the Chrome Web Store User Data Policy, including the Limited Use requirements.
We do not sell user data or use it for personalized advertising, unrelated profiling, credit-worthiness assessment or lending. Third-party transfers are limited to what is necessary to provide or improve disclosed features, comply with law or prevent abuse. Human access is restricted to your explicit consent, necessary security investigations or legal requirements.
Chrome Web Store User Data Policy · Limited Use
13. Hosting of this static documentation site
The knrlos.github.io/docs/ site hosting this page is a public static documentation site for all users, providing product guides, privacy information and support. It runs no analytics, sign-in, payment or advertising scripts and does not receive extension Cookie snapshots, backups or Pro sign-in credentials.
This site is hosted on GitHub Pages. GitHub may log and store visitors' IP addresses for security purposes. See the official GitHub Pages documentation.
This documentation-site disclosure is separate from the product website and account service. GoatCounter statistics and server logs on product.xyptkd.cn, as well as extension settings queries, Pro accounts and payment processing, remain subject to the preceding disclosures. Links to the product website are opened only when you choose to follow them.