灵犀书签隐私政策

更新日期：2026年4月

1. 数据存储与安全 (纯本地架构)

灵犀书签是一款基于“Local First（本地优先）”原则开发的浏览器扩展。您保存的所有书签、文件夹结构、网页标题与描述等核心数据，均仅保存在您本地浏览器的 IndexedDB 和 Chrome Storage 中。我们没有、也不会拥有任何中央服务器来主动收集、查看或存储您的上述隐私数据。

2. 跨设备传输 (局域网/P2P 发送到手机)

当您使用“发送到手机”功能时，扩展会使用 WebRTC 技术（基于 PeerJS 开源信令）在您的电脑和手机之间建立端到端加密的 P2P 传输通道。信令服务器仅用于初始设备发现，可能使用 STUN/TURN 服务协助 NAT 穿透，但您的卡片内容仅在这两个设备之间直接点对点传输，不经过且不存储于灵犀业务服务器。我们绝不会在任何中央服务器上拦截、收集或存储这些传输的数据。

3. 数据同步 (WebDAV)

本应用提供的云同步功能基于标准的 WebDAV 协议。当您开启同步功能时，数据将直接在您的本地设备与您自行配置的第三方云盘（如坚果云）之间加密传输。我们无法获取您的 WebDAV 账号密码，也无法触碰您的云端数据。

4. 外部 API 服务 (AI 功能)

当您使用 AI 智能分类、智能检索或重写功能时，扩展会将相关的网页标题或描述发送至您自行配置的大语言模型 API (BYOK)。此数据传输直接发生在您的浏览器与第三方 AI 提供商之间，且仅在您主动点击触发时执行。

5. 匿名统计与产品授权验证

为了保障软件的正常运行与提供更好的服务，我们会收集极其有限的必要信息：

授权验证与防滥用：当您购买并激活 Pro 版时，扩展会向我们的鉴权服务器发送您的激活码及系统生成的随机设备指纹 (Device ID)，仅用于核对设备在线数量限制。
基础产品统计：我们会收集完全匿名的每日活跃状态 (DAU) 与插件版本号，以帮助我们评估产品更新的稳定性；并通过百度统计服务来分析官方网站的访问情况。这些统计数据绝对不包含您的身份标识、浏览记录或任何书签内容数据。

6. 核心权限使用说明

tabs (标签页)：仅用于实现“保存当前网页”及“一键保存当前窗口所有标签页”功能。
storage & unlimitedStorage (本地存储)：仅用于在本地持久化保存您的海量书签数据和应用偏好设置，突破默认容量限制。
notifications & alarms (通知与定时器)：仅用于在本地为您提供后台同步状态提示或核心任务通知，不涉及任何远程数据上报。

7. 桌面端应用与只读 MCP 工具

灵犀桌面端（Linxy Desktop，Beta）通过 Native Messaging 与浏览器扩展进行本地进程间通信，该通信仅在本机完成，不经过任何远程服务器。桌面端将您的知识库数据库保存在本机本地存储中，数据不离开您的设备。

本应用提供的 4 个 MCP 工具（linxy_get_status、linxy_search_cards、linxy_get_card、linxy_get_saved_context）均为只读，仅支持搜索与读取收藏上下文，不会写入或修改您的数据。

8. 联系我们

如对本隐私政策有任何疑问或商务合作意向，请联系我们：443041183@qq.com

Privacy Policy for Linxy Tab

Last Updated: April 2026

1. Data Storage & Security (Local-First)

Linxy Tab is a browser extension built on a "Local First" principle. All your saved bookmarks, folder structures, webpage titles, and descriptions are stored exclusively on your local browser's IndexedDB and Chrome Storage. We do not own, nor will we ever use, centralized servers to collect, view, or store your private data.

2. Cross-Device Transfer (P2P Send to Phone)

When you use the "Send to Phone" feature, the extension establishes a Peer-to-Peer (P2P) end-to-end encrypted channel between your computer and mobile device using WebRTC (via PeerJS). Signaling servers are used only for initial peer discovery and may use STUN/TURN services to assist NAT traversal, but your card content is transmitted directly between these two devices and does not pass through or be stored on Linxy business servers. We absolutely do not intercept, collect, or store this transferred data on any centralized servers.

3. Data Synchronization (WebDAV)

The cloud sync feature provided by this application is based on the standard WebDAV protocol. When enabled, your data is transmitted encrypted directly between your local device and your self-configured third-party cloud drive. We cannot access your WebDAV credentials or your cloud data.

4. External API Services (AI Features)

When you use AI smart categorization, deep search, or rewriting features, the extension will send relevant webpage titles or descriptions to the Large Language Model API you have configured yourself (BYOK). This data transmission occurs directly between your browser and the third-party AI provider, and only when actively triggered by you.

5. Anonymous Analytics & License Verification

To ensure proper software operation and improve our services, we collect a very limited amount of strictly necessary information:

License Verification & Anti-Abuse: When you purchase and activate the Pro version, the extension sends your activation key and a randomly generated Device ID to our authentication server. This is solely used to enforce the concurrent device limits of your license.
Basic Product Analytics: We collect completely anonymous Daily Active User (DAU) pings and extension version numbers to monitor update stability. We also use Baidu Analytics to evaluate traffic on our official website. This analytical data absolutely does not contain personal identifiers, browsing history, or any bookmark content.

6. Explanation of Permissions Used

tabs: Used exclusively to enable the "Save Current Webpage" and "Save All Open Tabs" features to assist in bookmark management.
storage & unlimitedStorage: Used exclusively to persistently save a large number of bookmarks and application preferences locally, bypassing the default storage limits.
notifications & alarms: Used strictly locally to provide background sync status alerts or task notifications, with no remote data tracking.

7. Linxy Desktop & Read-Only MCP Tools

Linxy Desktop (Beta) communicates with the browser extension via Native Messaging, a local inter-process communication that stays entirely on your machine and does not pass through any remote server. The Desktop app stores your knowledge hub database in local storage on your machine; the data never leaves your device.

The 4 MCP tools provided (linxy_get_status, linxy_search_cards, linxy_get_card, linxy_get_saved_context) are strictly read-only, supporting only search and reading of saved context — they never write to or modify your data.

8. Contact Us

If you have any questions about this Privacy Policy or for business inquiries, please contact us at: 443041183@qq.com