隐私政策
Privacy Policy
生效日期：2026-10-17 · 适用于 annonext.com 网站与 AnnoNext 软件
Effective: 2026-10-17 · Applies to the annonext.com website and the AnnoNext application
一句话：AnnoNext 软件默认不联网、零遥测、不接触你的文件内容；只有你主动在网站提交留言/订阅时，才会把必要信息送达作者。本站无广告、无追踪脚本、无行为画像。
In one line: AnnoNext runs offline by default, has zero telemetry and never touches your file contents. Only when you actively submit a message or subscription on the website is the necessary information sent to the author. No ads, no tracking scripts, no behavioural profiling.
1. 适用范围
本政策适用于 annonext.com 网站（含留言与订阅表单）与 AnnoNext 软件（免费版以及规划中的专业版）。
2. 软件如何对待你的数据
- 零遥测：不采集使用行为，不统计功能点击，不含广告或分析 SDK。
- 默认不联网：软件默认不发起任何网络连接；「检查更新」默认关闭、出厂地址为空，需要你手动开启并粘贴检测地址。开启后仅请求一个静态版本清单（version.json）并比对版本号，不上传任何数据。
- 文件不出本机：你打开的 PDF、处理的图纸全程留在你的电脑上，我们无法访问。
- 专业版激活（开售时）：激活与校验的具体方式将在购买页事先写明；无论采用何种方式，都不会上传你的文档内容。
3. 网站如何处理数据
- 站点是静态页面，托管在 Cloudflare Pages；没有 cookies、没有统计脚本、没有第三方广告。
- 语言偏好等设置保存在你自己浏览器的 localStorage 中，可随时通过清除浏览器数据删除。
- 留言框内容与订阅邮箱会在你的浏览器里留一份本地副本（localStorage），仅存在于你的设备。
4. 当你主动提交留言或订阅时
- 提交内容：邮箱，以及你填写的称呼、问题类型与留言正文（订阅仅含邮箱）。
- 服务端自动记录：IP 地址、国家、省/州、城市（取自 Cloudflare 边缘网络自带的定位信息）、提交时间与浏览器标识（User-Agent）。用途仅限：防刷防滥用、判断并回复你的留言。
- 数据流向：留言存入作者自有的 Cloudflare D1 数据库，并转发至 ① 作者邮箱（经 Cloudflare Email Service 送达，可能使用 Resend 作为备选发信通道）；② 作者自用的钉钉群通知（阿里巴巴旗下服务，仅作「有新留言」的到站提醒）。
- 不共享：除上述履约与通知服务外，不向任何第三方提供你的信息；不用于广告；不做用户画像。
- 保留与删除：留言保留至处理完毕；你可随时发邮件要求查阅或删除，我们一般在 7 个工作日内完成。
5. 支付（专业版开售后的说明）
- 国际订单将由 Lemon Squeezy 作为记录商户（Merchant of Record）处理；国内订单计划经爱发电 / 面包多处理。
- 卡片与支付信息由支付平台按其自身隐私政策处理；我们只会收到完成交付所需的最少信息（如下单邮箱、订单号、许可码发放记录）。
- 目前尚未开售任何付费商品。此节即刻有效的承诺是：开售之前，我们会先更新本页。
6. 你的权利
- 访问、更正、删除你的个人信息，或撤回对留言处理的同意：发邮件到 [email protected] 即可。若你认为处理不当，也可向所在地数据保护机构投诉。
- 本站由 Cloudflare 全球网络提供服务，留言数据可能存储在境外的 Cloudflare 数据中心（D1 数据库）。
- 本软件与本站面向专业人士，不面向儿童。
7. 变更与联系
本页更新会标注生效日期；重大变化会在首页提示。联系：[email protected]。生效日期：2026-10-17。
1. Scope
This policy covers the annonext.com website (including the message and subscription forms) and the AnnoNext application (the free edition and the planned Pro edition).
2. How the application treats your data
- Zero telemetry: no usage collection, no feature analytics, no ad or analytics SDKs.
- Offline by default: the app opens no network connections by default. "Check for updates" is off by default with an empty factory address; you enable it manually by pasting a check URL. Once enabled it requests a single static version manifest (version.json) and compares version numbers — nothing is uploaded.
- Files never leave your machine: the PDFs you open and drawings you process stay on your computer. We cannot access them.
- Pro activation (at launch): the exact activation and validation method will be stated on the purchase page beforehand. Whichever method is used, your document contents are never uploaded.
3. How the website handles data
- The site is static and hosted on Cloudflare Pages: no cookies, no analytics scripts, no third-party ads.
- Preferences such as language are stored in your own browser's localStorage and can be removed at any time by clearing browser data.
- A local copy of your message draft and subscribed email address (localStorage) stays inside your browser on your device.
4. When you actively submit a message or subscription
- What you submit: your email address, plus the name, topic and message text you choose to fill in (subscription carries the email only).
- What the server records: IP address, country, region/state and city (taken from Cloudflare's own edge data), submission time and browser identification (User-Agent). Used strictly for: abuse prevention and replying to your message.
- Where it goes: the message is stored in the author's own Cloudflare D1 database and forwarded to ① the author's mailbox (delivered via Cloudflare Email Service, with Resend possibly used as the backup sender) and ② the author's DingTalk group notification (an Alibaba service, used only as a "new message" alert).
- No sharing: beyond the delivery and notification services above, your information is shared with no third party; not used for advertising; not used for profiling.
- Retention and deletion: messages are kept until handled; you may email any time to request access or deletion, typically completed within 7 working days.
5. Payments (applies once the Pro edition is on sale)
- International orders will be handled by Lemon Squeezy as Merchant of Record; domestic (China) orders are planned via Afdian / Mianbaoduo.
- Card and payment details are handled by those platforms under their own privacy policies; we receive only the minimum needed to deliver (e.g. order email, order number, licence issuance record).
- No paid product is on sale today. The commitment that is already in force: this page will be updated before anything goes on sale.
6. Your rights
- Access, rectify or delete your personal information, or withdraw consent for message processing: just email [email protected]. If you believe processing is improper, you may also complain to your local data protection authority.
- The site runs on Cloudflare's global network; message data may be stored in Cloudflare data centres outside your country (D1 database).
- The application and site are aimed at professionals, not children.
7. Changes and contact
Updates to this page carry an effective date; material changes will be flagged on the homepage. Contact: [email protected]. Effective date: 2026-10-17.