隐私政策 / Privacy Policy

产品用途Product purpose

签绪用于在桌面 Chrome 中按任务整理、查找、切换、恢复和管理浏览器页签。数据只用于这一单一用途及其安全、稳定运行。签绪不替换主页、默认搜索引擎或地址栏行为。TabToTask helps users organize, find, switch, restore, and manage browser tabs by task in desktop Chrome. Data is used only for this single purpose and its secure, reliable operation. TabToTask does not replace the home page, default search engine, or address-bar behavior.

本机处理的数据Data processed on-device

页签与窗口Tabs and windows

标题、URL、站点图标、窗口、顺序、固定状态与浏览器原生分组。Titles, URLs, favicons, windows, order, pinned state, and browser-native groups.

虚拟任务Virtual tasks

领域、任务、页面关系、手动纠错、撤销与回收站数据。Domains, tasks, page relationships, manual corrections, undo, and recycle-bin data.

行为事件Behavior events

打开来源、激活、停留、切换、关闭、移动、分组与窗口变化。Open source, activation, dwell, switching, closing, moving, grouping, and window changes.

产品设置Product settings

语言、主题、Web Dock、AI 设置、本地激活状态与短期页签预览。Language, theme, Web Dock, AI settings, local activation state, and short-term tab previews.

短期页签预览截图不会发送给云端 AI。签绪不以读取页面正文、表单输入、Cookie、密码、账号令牌或支付信息作为产品功能。Short-term tab preview screenshots are never sent to cloud AI. Reading page bodies, form input, cookies, passwords, account tokens, or payment information is not part of TabToTask’s product function.

官网访问分析Website analytics

本官网使用自建的第一方访问统计，记录随机会话 ID、访问时间、站内路径、来源域名、搜索引擎、UTM、语言、设备类别、Cloudflare 提供的国家/地区代码，以及安装入口点击、页面最大浏览深度和页面在前台时的有效停留时间。它不读取扩展中的页签、浏览历史或页面正文。This website uses first-party analytics that record a random session ID, visit time, on-site path, referrer domain, search engine, UTM fields, language, device category, a country/region code supplied by Cloudflare, install-entry clicks, maximum page depth, and active time while the page is visible. It never reads extension tabs, browsing history, or page content.

不保存完整 IP、完整来源 URL、Cookie、账号或跨站指纹。No full IP, full referrer URL, cookies, account data, or cross-site fingerprint is stored.
Do Not Track 或 Global Privacy Control 开启时，官网不发送统计事件。No analytics event is sent when Do Not Track or Global Privacy Control is enabled.
停留时间只累计页面在前台可见的时间；浏览深度只记录 0–100% 的最大百分比，不记录用户阅读的具体内容。Active time counts only while the page is visible; depth stores only a 0–100% maximum percentage, never the content viewed.
页面访问、会话、点击与互动明细最多保留 365 天；活跃会话只用于近 5 分钟实时人数和会话统计。Page views, sessions, clicks, and engagement details are retained for up to 365 days; active sessions support the five-minute live count and session metrics.
分析面板仅对站点所有者开放，公开访客无法读取统计汇总。The analytics dashboard is owner-only; public visitors cannot read analytics summaries.

当你主动提交上线预约时，我们会保存你填写的邮箱、触发预约的安装入口、提交时间、语言和国家/地区代码，用于发送上线通知和兑现预约会员赠送。邮箱不会用于个性化广告，也不会出现在公开页面。When you submit a launch reservation, we store the email you provide, the install entry that opened the reservation, submission time, language, and country/region code. We use it to send the launch notice and fulfill the membership offer. Your email is never used for personalized advertising or shown publicly.

存储位置与保留时间Storage and retention

行为事件保存在本机 IndexedDB，滚动保留 30 天；用户可在隐私与数据设置中清除。Behavior events are stored in local IndexedDB on a rolling 30-day basis and can be cleared in Privacy & Data settings.
虚拟任务、页面关系与手动纠错保留到用户删除任务或清除全部本地数据。Virtual tasks, page relationships, and manual corrections remain until the user deletes them or clears all local data.
少量偏好可进入浏览器同步或本地存储；AI API 密钥只保存在 chrome.storage.local，不进入同步存储。A small set of preferences may use browser sync or local storage. AI API keys are stored only in chrome.storage.local and never synced.
预览截图为短期会话缓存，最多 40 项，在会话结束、清除数据或缓存淘汰时删除。Preview screenshots are short-term session cache items, capped at 40 and removed on session end, data clearing, or cache eviction.
本地激活记录保存在设备内；注销会删除本机激活记录。Local activation records stay on-device and are removed on deactivation.
官网分析明细最多保留 365 天；预约邮箱保留到上线通知与会员赠送完成后 90 天，或收到你的删除请求时提前删除。Website analytics details are retained for up to 365 days. Reservation emails are retained until 90 days after the launch notice and membership offer are completed, or deleted earlier on request.

可选第三方 AIOptional third-party AI

默认关闭；关闭时 AI 网络请求为零。Off by default; zero AI network requests while disabled.

只有用户主动开启 AI、填写本机密钥、查看发送范围并触发分析后，签绪才会向用户配置的 HTTPS 第三方 AI API 发起请求。可能发送：脱敏标题、注册域、路径类型、候选任务 ID/名称、少量聚合证据与风险代码。TabToTask calls a user-configured HTTPS third-party AI API only after the user enables AI, enters a local key, reviews the data scope, and starts analysis. Possible fields include redacted titles, registered domains, path types, candidate task IDs/names, limited aggregate evidence, and risk codes.

不会发送完整 URL、查询参数、哈希、页面正文、表单输入、Cookie、截图、书签、完整历史或原始行为事件流。敏感站点默认排除。AI 只调整虚拟任务关系，不移动、关闭、固定、分组或重排真实页签。TabToTask does not send full URLs, query parameters, hashes, page bodies, form input, cookies, screenshots, bookmarks, complete history, or raw behavior streams. Sensitive sites are excluded by default. AI adjusts virtual task relationships only and never moves, closes, pins, groups, or reorders real tabs.

第三方 AI 接收方的法定名称、隐私政策 URL、保留与删除规则尚待产品所有者确认。确认前不得把模型名或中转域名当作法律接收方。The third-party AI recipient’s legal name, privacy-policy URL, and retention/deletion terms still require product-owner confirmation. A model name or relay domain is not a legal recipient disclosure.

权限与触发方式Permissions and triggers

tabs · tabGroups

展示真实页签与原生组；只按用户明确命令切换、关闭、固定、分组或排序。Show real tabs and native groups; switch, close, pin, group, or reorder only after explicit user commands.

sessions

仅在用户打开最近关闭入口时读取必要元数据；仅点击具体 http/https 页面后恢复。Read necessary Recently Closed metadata only when opened; restore a specific http/https page only after a click.

storage

保存偏好、虚拟任务、本地行为事件、AI 设置与激活状态；AI 密钥只进本地存储。Store preferences, virtual tasks, local behavior events, AI settings, and activation state; AI keys remain local.

scripting · favicon · <all_urls>

在普通网页显示随扩展打包的工作台/Web Dock 代码与网站图标；不下载远程可执行代码。Show packaged workspace/Web Dock code and favicons on ordinary pages; no remote executable code is downloaded.

bookmarks (optional)

只在首次点击“从书签导入”时申请；拒绝后不读取书签，可稍后重试。Requested only after Import from bookmarks; denial means no bookmark access and can be retried later.

history (optional)

只在结果区点击明确授权按钮后申请；授权后读取最近 7 天、最多 500 条并在本机匹配，结果不持久保存。Requested only from an explicit results-area action; then reads up to 500 items from the past 7 days for local matching, without persisting results.

分享与有限使用Sharing and Limited Use

除用户主动配置并触发的第三方 AI 外，签绪不出售、出租或将用户数据用于个性化广告，也不允许人工阅读浏览数据。必要数据只会在提供页签管理单一用途、遵守法律或处理安全滥用所需的范围内使用。Except for third-party AI explicitly configured and triggered by the user, TabToTask does not sell, rent, or use user data for personalized advertising, and does not permit human reading of browsing data. Necessary data is used only to provide the single tab-management purpose, comply with law, or address security abuse.

Chrome Web Store Limited Use

The use of information received from Google APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.

用户控制与删除User control and deletion

拒绝或撤销可选的书签、历史与 AI 访问。Deny or revoke optional bookmark, history, and AI access.
清除 AI 密钥、行为事件或全部本地数据。Clear the AI key, behavior events, or all local data.
删除任务、关系、回收站内容并注销本地激活状态。Delete tasks, relationships, recycle-bin items, and deactivate local activation.
卸载扩展以删除扩展拥有的本地存储；同步数据由浏览器账户机制管理。Uninstall to remove extension-owned local storage; browser-account mechanisms control synced data.
通过支持与数据请求渠道申请删除预约邮箱及其提交记录。Request deletion of a reservation email and its submission record through the support and data-request channel.

关闭 AI 或清除本机密钥不会自动删除第三方已经处理的数据；第三方删除渠道将在正式接收方披露中写明。Disabling AI or clearing a local key does not automatically delete data already processed by a third party; the applicable deletion channel will be disclosed with the confirmed recipient.

如果未来版本改变收集字段、用途、保留周期或第三方接收方，签绪会在变更生效前通过产品内醒目提示主动说明，并同步更新本政策与商店隐私披露。If a future version changes collected fields, purposes, retention, or third-party recipients, TabToTask will provide a prominent in-product notice before the change takes effect and will update this policy and the store privacy disclosures.

查看支持与数据请求路径See support and data-request path