更新及生效日期 / Effective: 2026-10-14
返回官网 / Home正文提取和 TXT/ePub 生成在浏览器中完成，但并不代表所有数据都只保留在本地。
书架网址、书名、进度和规则使用浏览器同步。是否同步、同步时间及容量取决于 Chrome/Edge 账号设置和配额。
共读默认关闭。主动参与后会发送书名、域名和认证账号标识。“公开昵称和章节”是单独选项，开启后其他参与者可以看到这些详情。停止心跳90秒后不再计入在线人数，过期记录由定时任务清理。
公开讨论初始关闭；用户主动开启查看讨论时会发送书名和域名。开放后，用户主动提交的评论会上传评论正文、最多500字引用原文、章节、昵称和移除查询参数及片段的来源链接；审核通过后公开。作者可删除自己的评论，读者可举报已公开的评论。
会员恢复码仅保存在扩展可信上下文中，服务端保存其哈希及内部账号标识。恢复码相当于账号密码，请私密备份，可用于另一台设备恢复会员。支付通过 Stripe Checkout 完成，可选收据邮箱发送给 Stripe。服务保存订单编号、金额、币种、付款状态和回调事件编号，不接收完整银行卡号或CVV。
服务端使用持久数据库保存共读、评论和订单；短期保存经过哈希的网络标识用于限流。浏览器同步、托管服务和 Stripe 会按各自条款处理信息。托管由 Cloudflare 全球网络及 D1 数据库提供，数据可能在您所在国家或地区之外处理；Stripe 和浏览器同步服务也可能涉及跨境处理。我们不出售个人数据。官网使用外部字体及图标样式服务，访问这些资源可能向对应服务发送IP和浏览器请求信息；文章图片也可能向其来源站点发送请求。
扩展弹窗提供删除云端评论及共读记录的入口；为保留会员权益和处理账务、争议，认证及订单记录会保留。认证及订单数据仅在提供会员服务及履行适用账务、争议处理义务所需期间保留。您可联系客服申请关闭账号及删除不再需要保留的记录。卸载插件不等于删除服务端数据。服务名称：Wanderscroll（漫卷）。客服、隐私请求和权利人投诉邮箱：hudncc@gmail.com。正式支付已在扩展内开启。
我们不出售用户数据，不将其用于个性化广告、信用评估或放贷决策。对从 Google API 获取的信息的使用和转移遵守 Chrome 应用商店用户数据政策，包括有限使用要求。
Reading extraction and TXT/ePub generation happen in your browser. This does not mean all data stays local.
Bookshelf URLs, titles, progress and rules use browser sync when you enable it. Availability, quotas and synchronization time depend on Chrome or Edge and its account settings.
Live presence is off by default. Opting in sends book title, domain and an authenticated account identifier. Publishing profile details is a separate choice that shares your nickname and current chapter with other participants. Presence expires after 90 seconds without a heartbeat; stale rows are removed by scheduled cleanup.
Public discussions are initially disabled. Opting in to view discussions sends book title and domain. If enabled, submitting a note uploads its text, up to 500 characters of quoted source text, chapter, nickname and source URL without query parameters or fragments. Notes require moderation before public display. Authors can delete their notes; readers can report published notes.
Account recovery codes are stored only in the extension's trusted context. The server stores a hash of the code and an internal account identifier. Keep your code private; it can restore membership on another device. Payment uses Stripe Checkout; optional receipt email is sent to Stripe. The service retains order identifiers, amount, currency, payment state and webhook event identifiers, but never receives your full card number or CVV.
The backend stores presence, notes and orders in a persistent database. Short-lived hashed network identifiers are used for rate limiting. Browser sync, hosting and Stripe process information under their own terms; Hosting is provided by Cloudflare using its global network and D1 database; processing may occur outside your country. Stripe and your browser sync provider may also process data abroad. Personal data is not sold. The website uses external font and icon stylesheets, whose providers receive network request information. Article images can also request their source hosts.
The extension popup offers deletion of your cloud notes and presence. Authentication and payment records are retained for membership, accounting and disputes; records are retained as needed to provide membership and meet applicable accounting and dispute obligations. Contact support to request account closure and deletion of records that are no longer required. Removing the extension does not delete server records. Service: Wanderscroll (漫卷). Support, privacy requests and rights-holder complaints: hudncc@gmail.com. Paid checkout is enabled through the extension.
We do not sell user data or use it for personalized advertising, creditworthiness or lending decisions. Use and transfer of information received from Google APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.