小小东 · 内务府 隐私政策

更新日期：2026-10-11

1. 用途与账号
本扩展在 Chrome 中管理每日待办、速记与专注时间。使用需要登录小小东账号。免费账号与会员的额度和功能不同。账号和会员服务由 vip.xiaoxiaodong.ai 提供。

2. 保存方式
默认本地资料库使用浏览器 IndexedDB 保存 Markdown 笔记、任务、图片、附件与同步记录。配置、服务密钥、登录令牌和缓存使用 chrome.storage.local 或页面本地存储保存。用户可以选择电脑文件夹，授权后直接读写该文件夹；也可以选择本机 Obsidian Local REST API，向 127.0.0.1 的 27123/27124 端口发送密钥、笔记与附件以双向同步。

会员主动启用云同步并连接 Google Drive 后，笔记路径、正文和附件会通过小小东会员站的 HTTPS 接口中转至用户自己的 Google Drive 隐藏应用目录。此时内容会离开设备并由中转服务处理，并非端到端加密。会员站及 Google 的数据处理分别适用其隐私政策。未启用云同步的本地笔记不会通过此云同步功能上传。

可选 Google Drive 设置备份同样通过会员站中转，包含脱敏配置、设备标识、便签与专注统计，不包含 Obsidian/OCR API 密钥与 Bark 推送地址。该备份与笔记云同步是不同功能。

3. 账号与订单
登录时，邮箱和密码或授权码经 HTTPS 发送到会员站进行验证；扩展保存可撤销的登录令牌、账号标识与会员状态，不持久保存账号密码。用户主动开通会员时，扩展处理套餐、支付方式、金额、订单编号和状态。付款在支付机构页面完成，扩展不读取银行卡号或支付密码。

4. 网页与外部服务
网页记录功能处理用户主动选择的文字、图片、网页标题和链接；标签页工具读取当前打开的标签页信息。不读取完整浏览历史，不通用记录键盘、鼠标或滚动轨迹。
用户启用 OCR 时，所选图片、提示词和模型会连同服务密钥发送至用户配置的 OpenAI 兼容端点，服务方可能按其政策保留内容。
天气查询把城市和 adcode 发送到会员站天气服务。中文金句由 v1.hitokoto.cn 提供。启用 Bark 后，设备地址与通知内容发送至用户设置的推送服务。启用远程背景后向相应图片来源请求图片。远程服务可接收 IP、User-Agent、请求时间等网络元数据。
专注记录、任务完成状态和便签用于用户自己的统计和工作台；可选云同步或设置备份会传输其包含的数据。

5. 使用、共享与保护
数据仅用于账号验证、用户请求的笔记管理、同步、备份、提醒、天气和 OCR。我们不出售用户数据，不用于个性化广告，不为与扩展单一用途无关的目的转移数据，不用于信用评估或贷款。我们遵守 Chrome Web Store 的 Limited Use 要求。必要的服务商仅在提供相关功能时处理相应数据。远程请求使用 HTTPS；用户选择的本机 Obsidian HTTP 服务仅通过回环地址连接。设备本地存储与笔记内容不承诺端到端加密。

6. 保留与删除
本地数据保留至用户删除记录、清除扩展数据或卸载；电脑文件夹、Obsidian Vault 和下载备份由用户自行管理。自动本地备份按配置轮换，手动导出由用户管理。Google Drive 数据可通过扩展的数据管理功能和 Google 账户的应用数据管理删除；断开连接或退出登录不等同于删除云端副本。账号、订单及服务器日志的保留适用会员站隐私政策 https://vip.xiaoxiaodong.ai/privacy；需要删除账号或服务器数据时可联系下方邮箱。第三方 OCR、推送及资源提供方按各自政策保留数据。

7. 用户控制
用户可以切换保存方式、关闭云同步/备份、天气、OCR、Bark、背景和网页记录功能，撤销可选站点权限，并导出自己的记录。清除浏览器数据前应先导出需要保留的本地笔记。

8. 联系
开发者：小小东
隐私与数据删除联系邮箱：yeschenxiang@gmail.com
政策会随功能变化更新，更新日期显示在本页。

XXD Chamberlain Privacy Policy

Updated: 2026-10-11

1. Purpose and account
The extension manages daily tasks, quick notes and focus time in Chrome. A Xiaoxiaodong account and sign-in are required. Free accounts and members have different limits and features. Account and membership services are provided by vip.xiaoxiaodong.ai.

2. Storage choices
The default local vault stores Markdown notes, tasks, images, attachments and sync records in browser IndexedDB. Configuration, API keys, login tokens and caches are stored in chrome.storage.local or page local storage. Users can authorize a computer folder for direct file access, or choose the local Obsidian REST API, which receives the key, notes and attachments on 127.0.0.1 ports 27123/27124 for two-way synchronization.

When members enable cloud sync and connect Google Drive, note paths, bodies and attachments pass through the Xiaoxiaodong membership service over HTTPS to the user's Google Drive hidden application folder. This content leaves the device and is processed by the relay service; it is not end-to-end encrypted. The membership service and Google process data under their respective privacy policies. Local notes are not uploaded by cloud sync when that feature is disabled.

Optional Google Drive settings backup also passes through the membership service. It includes sanitized preferences, a device identifier, sticky notes and focus statistics, excluding Obsidian/OCR API keys and Bark endpoints. Settings backup and note cloud sync are separate features.

3. Account and orders
Login email/password or authorization codes are sent over HTTPS to the membership service for verification. The extension stores revocable tokens, account identifiers and membership status, without persisting the account password. When a user buys membership, it processes the plan, payment method, amount, order ID and status. Payment is completed on payment-provider pages; the extension does not read card numbers or payment passwords.

4. Pages and external services
Capture features process explicitly selected text, images, page titles and links. The tabs tool reads information about currently open tabs. The extension does not read the full browsing history or generally record keystrokes, mouse movements or scrolling.
When OCR is enabled, selected images, prompts and model names are sent with the API key to the user's configured OpenAI-compatible endpoint. That provider may retain data under its policy.
Weather requests send city and adcode to the membership weather service. Chinese quotes use v1.hitokoto.cn. Enabled Bark notifications send the device endpoint and notification content to the configured push service. Enabled remote backgrounds request images from their sources. Remote services receive network metadata such as IP, User-Agent and request time.
Focus sessions, completion state and sticky notes support the user's own statistics and workspace. Enabled cloud sync or settings backup transfers the data included in that feature.

5. Use, sharing and protection
Data is used for authentication and requested note management, sync, backups, reminders, weather and OCR. We do not sell user data, use it for personalized advertising, transfer it for purposes unrelated to the extension's single purpose, or use it for creditworthiness or lending. We follow the Chrome Web Store Limited Use requirements. Necessary service providers process relevant data to supply the requested feature. Remote requests use HTTPS; user-selected local Obsidian HTTP connections use loopback addresses. Local storage and note content are not represented as end-to-end encrypted.

6. Retention and deletion
Local data remains until records or extension data are deleted or the extension is uninstalled. Users manage their computer folders, Obsidian vaults and downloaded backups. Automatic local backups rotate according to configuration; manual exports remain user-managed. Google Drive data can be removed using extension data-management features and Google account app-data controls. Disconnecting or signing out does not itself delete remote copies. Account, order and server-log retention is governed by the membership policy at https://vip.xiaoxiaodong.ai/privacy. Contact the address below to request account or server-data deletion. Third-party OCR, push and resource providers apply their own retention policies.

7. Controls
Users can change storage mode, disable cloud sync/backup, weather, OCR, Bark, backgrounds and page capture, revoke optional site access and export their records. Export local notes before clearing browser data if they need to be retained.

8. Contact
Developer: Xiaoxiaodong
Privacy and deletion requests: yeschenxiang@gmail.com
This policy is updated as features change; its date appears above.