本政策说明 Daily Tools(Screenshot) -日常工具箱（STool）Chrome 扩展及其会员服务如何处理您的数据。我们仅为提供您主动使用的功能、验证会员权益、处理付款与支持请求以及防止服务滥用而处理数据。
1. 本地工具与文件
时间戳转换、JSON 格式化、URL 编解码、条码与二维码生成和计算在浏览器本地完成。吸管取色通过浏览器取色功能获取您选择的色值，以 HEX、RGB、HSL 显示；最近 5 次色值保存在浏览器本地，不上传到服务器。工具设置、语言、输入草稿及登录令牌可保存在浏览器存储中。截图、录屏及其预览、标注、导出文件在本地处理和保存，不上传到我们的会员服务器。截图和录屏记录可能包含页面标题、网址、文字、图像及您选择录制的声音。我们不读取浏览器的完整浏览历史，不记录鼠标轨迹或键盘输入；默认开启的使用统计仅记录下文说明的工具和功能使用事件。
2. 在线翻译与沉浸式对照翻译
何时读取与发送
普通文本翻译会发送您在翻译工具中提交的文本。沉浸式翻译仅在您点击翻译页或网页悬浮球中的“沉浸式翻译”入口后运行，使用翻译页中设置的源语言和目标语言。启用悬浮球或授予网页访问权限本身不会启动正文翻译。
沉浸式翻译按需提取当前网页视口及附近区域的可见正文段落；向下滚动或网页动态加载新正文时，可能继续发送新出现的段落，并在原文下方显示译文。提取规则排除密码框、输入框、表单、可编辑区域和代码区。普通正文仍可能包含姓名、订单内容或其他个人资料，扩展不会识别并自动隐去正文中的所有敏感信息，请根据页面内容决定是否开启。
发送哪些数据、发送给谁
翻译请求包含待翻译文本、源语言和目标语言；不会主动将整页 HTML、网页地址、截图、录屏、登录邮箱或会员令牌作为翻译参数发送。普通文本翻译与沉浸式翻译均按 Microsoft 必应 → Google → DeepL → DeepSeek 的顺序尝试，前一来源失败或不可用时再尝试下一来源。同一段文本可能因回退而发送给多个实际尝试的来源，不会发送给未尝试的来源。
必应和 Google 请求由浏览器直接发送。DeepL 和 DeepSeek 请求通过我们的 Cloudflare 后端转发到对应官方 API；后端临时处理文本和所选语言，不将原文或译文写入数据库或使用情况统计。共用服务密钥由开发者在后端配置，插件用户无需填写，也不会收到密钥；未配置的服务不发送上游翻译请求。浏览器直连的服务可接收您的网络 IP 和请求信息；通过后端转发时，Cloudflare 处理您的网络请求，上游服务接收后端发出的请求。第三方可能依照其政策处理请求元数据或 Cookie。
缓存与停止
沉浸式翻译的段落和译文缓存仅用于当前页面的临时内存，不写入持久化浏览器存储；刷新或关闭页面会清除该页面内存缓存。翻译工具的手动输入草稿和语言设置则保存在浏览器本地，以便下次使用。
点击“恢复原文”会移除对照译文并停止继续提交该页面的段落；已发送给服务提供商的请求无法撤回，可能仍完成处理。关闭或刷新页面也会结束该页面的翻译。功能未开启时不会自动上传网页正文。第三方对已接收数据的保留和处理受其各自政策约束：Microsoft 隐私声明、Google、DeepL、DeepSeek。
3. 邮箱登录与安全
我们处理您的登录邮箱、验证码验证结果和会话信息。邮箱用于发送验证码、识别账号及绑定会员权益。服务端保存验证码的哈希而非明文验证码，并保存登录令牌的哈希；浏览器保存会话令牌以维持登录。验证码有效期为 5 分钟，会话有效期为 7 天，过期记录由定期任务清理。请求 IP 用于防滥用限流，限流标识以带密钥的哈希保存；Cloudflare 等服务提供商可能处理网络与安全日志。
4. 支付与会员
支付由 Stripe 托管页面处理。我们保存账号关联的套餐、订单金额、支付标识、订阅状态、会员有效期及退款或争议状态，以确认和维护会员权益。我们不接收或存储完整银行卡号或 CVC。季度及年度套餐自动续费，永久套餐为一次性付款；订阅用户可通过插件中的管理订阅入口取消续费。支付、退款及争议记录用于账务核对和权益验证。
5. 反馈与退款申请
您主动提交的反馈、退款申请、联系信息和插件版本，以及退款申请关联的账号与订单信息，会由服务器处理并通过邮件发送给支持人员。提交退款申请不会自动执行退款。请勿在反馈中提交密码、银行卡信息或其他不必要的敏感资料。
6. 服务提供商与数据共享
- Cloudflare：托管会员 API 和数据库，并提供网络与安全服务。
- Resend：发送验证码及转交支持请求邮件。
- Stripe：处理付款、自动续费、支付通知及订阅管理。
- Microsoft 必应、Google、DeepL 和 DeepSeek：按上述顺序处理用户主动提交的翻译请求；不向未尝试的来源发送文本。
我们仅向服务提供商传输提供相关功能所需的数据，或在法律要求、处理欺诈和安全事件时披露必要数据。第三方可能在您所在地区之外处理数据，其处理受各自隐私政策约束：Cloudflare、Resend、Stripe。
7. 保留、安全与您的选择
本地文件和设置由您通过插件删除功能或浏览器管理；删除扩展数据、浏览器配置或卸载扩展可能导致本地文件丢失。账号、会员订单及支持记录在提供服务、处理退款争议和满足适用账务义务所需期间保留，目前不设置统一自动删除期限。您可通过插件的意见反馈入口提交数据查询、更正、删除或账号注销请求；依法必须保留的交易记录可能无法立即删除。退出登录会撤销当前会话，卸载扩展不会自动取消 Stripe 订阅。
我们使用 HTTPS、验证码和令牌哈希、会话验证、支付通知签名验证及请求限流保护数据。请妥善保管您的邮箱和设备。
8. 数据使用承诺与联系
我们不出售用户数据，不将数据用于广告画像，不将数据用于与上述功能无关的目的，也不用于信用评估或贷款决定。我们遵守 Chrome 应用商店用户数据政策，包括其有限使用要求。
有关隐私或数据权利的问题，请通过插件“意见反馈”入口联系开发者。重大变更会通过更新本页面或插件说明告知，页面顶部显示最新日期。
Daily Tools(Screenshot) Privacy Policy
This policy covers the Daily Tools(Screenshot) (STool) Chrome extension and its membership service. Data is processed to provide features you request, authenticate accounts, verify membership, process payments and support requests, and prevent abuse.
Local tools and captures
Timestamp, JSON, URL, barcode, QR code and calculator tools run locally. The eyedropper uses the browser color picker to obtain a color you select and displays HEX, RGB and HSL values. The five most recent colors are saved locally and are not uploaded to our server. Settings, drafts and session tokens may be stored in your browser. Screenshots, recordings, annotations and exports are processed and stored locally and are not uploaded to our membership server. Local capture records may include page titles, URLs, text, images and selected audio. We do not read your complete browser history or record mouse movements or keystrokes. Usage statistics are enabled by default and cover only the tool and feature events described below.
Translation and immersive bilingual reading
When page text is read and sent
Text translation sends the text you submit in the translation tool. Immersive translation runs only after you select its entry in the translation tab or the page floating menu, using the source and target languages set in the translation tab. Enabling the floating button or granting page access alone does not start page translation.
Immersive translation extracts visible paragraphs in and near the current viewport on demand. Scrolling or dynamically loaded content may cause additional paragraphs to be sent. Translations appear below the originals. Extraction rules exclude password fields, input fields, forms, editable regions and code blocks. Ordinary paragraphs may still contain names, order details or other personal information. The extension does not identify and redact all sensitive information in page text; decide whether to enable translation based on the page content.
What is sent and who receives it
Translation requests contain the text, source language and target language. Whole-page HTML, the page URL, screenshots, recordings, login email and membership token are not deliberately included as translation parameters. Both text and immersive translation try Microsoft Bing, Google, DeepL and DeepSeek in that order, proceeding when an earlier provider fails or is unavailable. Fallback may send the same paragraph to more than one attempted provider; unattempted providers do not receive it.
Bing and Google requests are sent directly by your browser. DeepL and DeepSeek requests pass through our Cloudflare backend to their official APIs. The backend temporarily processes text and selected languages without storing source text or translations in our database or usage analytics. Shared service credentials are configured by the developer on the backend; extension users do not enter or receive them. Providers without configured credentials receive no upstream requests. Direct providers can receive your network IP address and request information. For proxied requests, Cloudflare handles your network request and upstream providers receive requests from our backend. Third parties may process request metadata or cookies under their own policies.
Temporary cache and stopping
Immersive paragraph and translation caches use temporary memory in the current page and are not written to persistent browser storage. Reloading or closing the page clears that page's memory cache. Manual translation input drafts and language preferences are saved locally for your next use.
Selecting Restore original removes bilingual output and stops further paragraph submissions from that page. Requests already sent to service providers cannot be recalled and may still finish processing. Closing or reloading the page also ends its translation. Page text is not automatically uploaded while the feature is off. Retention and handling of data already received by third parties are governed by their policies: Microsoft Privacy Statement, Google, DeepL and DeepSeek.
Accounts and security
We process your email address, verification and session data to sign you in and associate membership with your account. Resend delivers verification emails. The server stores hashes of verification codes and session tokens, while the browser stores the session token. Codes expire after five minutes and sessions after seven days; expired records are periodically removed. Request IP addresses are used for abuse prevention with keyed hashed rate-limit identifiers. Cloudflare may process network and security logs.
Payments and support
Stripe handles payments on hosted pages. We retain account-linked plans, amounts, payment identifiers, subscription status, membership expiry, refunds and dispute status. We do not receive or store full card numbers or CVC codes. Quarterly and annual plans renew automatically; lifetime membership is a one-time payment. Use the subscription management entry in the extension to cancel renewal. Uninstalling the extension does not cancel subscriptions.
Feedback and refund requests include the information you submit, contact details and extension version, and may include account and related order details. They are processed by our server and emailed to support through Resend. A refund request does not automatically issue a refund.
Providers, retention and rights
Cloudflare hosts the API and database, Resend delivers emails, Stripe processes payments and subscriptions, and Microsoft, Google, DeepL and DeepSeek handle translation as described above. Data necessary for these services may be processed outside your region. See their privacy policies: Cloudflare, Resend and Stripe. Necessary information may also be disclosed to comply with law or address fraud and security incidents.
You control local files through extension and browser management. Removing extension data, browser profiles or the extension may remove local files. Account, transaction and support records are retained as needed for service, disputes and applicable accounting obligations; no uniform automatic deletion period currently applies. Request access, correction, deletion or account closure through the extension's Feedback entry. Legally required transaction records may need to be retained. Logging out revokes the current session.
Commitments and contact
We use HTTPS, hashed authentication secrets, session checks, signed payment notifications and rate limits. We do not sell user data, use it for advertising profiles, unrelated purposes, creditworthiness or lending decisions. We comply with the Chrome Web Store User Data Policy, including Limited Use requirements. Contact the developer through the extension's Feedback entry for privacy questions and rights requests. Material changes will be communicated through this page or extension information.