隐私政策 / Privacy Policy

隐私政策（中文）

适用范围：葡萄社区（Grapevine Community），https://putao.info。

收集和用途

我们处理您提交的论坛用户名、邮箱、密码的安全哈希、个人资料、帖子、回复、收藏和账号操作记录，用于提供社区服务、身份验证与安全管理。公开的用户名、个人资料、已发布帖子和回复可被其他访客及搜索引擎访问；邮箱和密码不会作为公开个人资料展示。

选择 Google 登录时，我们请求 openid、email、profile 权限。Google 可向论坛提供账号唯一标识、已验证邮箱及基本资料。论坛使用这些信息验证身份、建立或关联论坛账号，名称可用于建议论坛用户名。我们不接收您的 Google 密码，不申请访问 Gmail 邮件、Google Drive 文件、联系人或日历，也不通过这些权限读取上述内容。Google 用户数据不出售，不用于广告定向，不用于训练通用 AI 模型；其访问、使用和转移遵守 Google API Services User Data Policy，包括 Limited Use 要求。

Cookie、安全验证与第三方处理

论坛使用必要 Cookie 保存登录、语言偏好、OAuth 临时状态和防滥用设备标识。注册风控处理 IP/网络、设备标识和注册/登录频次等安全信息，部分记录采用哈希化方式；主机及代理服务仍可能保留请求日志。哈希化不等于完全匿名。

Cloudflare Turnstile 用于识别自动化注册，其验证服务会处理浏览器、设备及网络信号；论坛也会向 Cloudflare 提交验证结果令牌和请求 IP。Google 处理第三方登录流程。各服务商还适用其自身隐私政策。

启用 AI 审核时，智谱等已配置的模型服务商处理帖子、回复及必要的去标识化注册风险统计。当前注册 AI 不接收密码、完整邮箱和完整 IP。用户点击翻译时，腾讯云或所选模型服务商处理待翻译的帖子/回复文本；译文会缓存供后续访问。请勿在公开内容中提交不希望被公开或被上述服务处理的敏感信息。Google 登录获取的身份资料不作为模型训练数据或注册审核提示词发送。

保存、访问与删除

账号和内容数据保存在论坛使用的服务器及备份中，仅向履行服务、安全维护和审核职责所必需的人员或服务商提供访问。我们采取访问限制、HTTPS 和密码哈希等保护措施，但不能保证绝对安全。论坛及第三方处理可能涉及您所在国家或地区之外的服务器。

数据按提供服务和安全防护所需保留。您可以联系 cntjpu@gmail.com 申请查询、更正或删除个人数据、解绑 Google 或删除论坛账号；我们会核实身份并处理请求，必要的安全、争议或法律记录可能需要继续保留，备份中的副本可能延后清除。您也可以在 Google 账号设置中撤销对本应用的授权；撤销授权本身不会自动删除论坛账号和帖子。已经公开或被第三方复制、索引的内容可能无法完全撤回。

联系与更新

隐私问题请联系 cntjpu@gmail.com。政策更新会在本页注明生效日期；涉及重要数据用途变化时提供适当通知。

Privacy Policy (English)

This policy applies to Grapevine Community (葡萄社区), https://putao.info.

We process your forum username, email address, password hash, profile, posts, replies, bookmarks and account activity to operate the community, authenticate users and prevent abuse. Public usernames, profiles and published contributions may be accessed by visitors and search engines. Email addresses and passwords are not displayed as public profile information.

When you choose Google sign-in, we request openid, email and profile. Google may provide your unique account identifier, verified email and basic profile information. We use these to authenticate you and create or link a forum account; your name may be used to suggest a forum username. We do not receive your Google password or request access to Gmail messages, Google Drive files, contacts or calendars. We do not sell Google user data, use it for targeted advertising or use it to train general-purpose AI models. Our access, use and transfer of Google user data comply with the Google API Services User Data Policy, including its Limited Use requirements.

Necessary cookies support sessions, language preferences, temporary OAuth state and an anti-abuse device identifier. Security processing includes IP/network information, device identifiers and registration/login frequency. Some security records are hashed; hosting and proxy logs may still contain request information. Hashing does not make data fully anonymous.

Cloudflare Turnstile processes browser, device and network signals for anti-bot verification; we send the verification token and request IP to Cloudflare. Google processes third-party sign-in. These providers also apply their own privacy policies.

When AI moderation is enabled, configured providers such as Zhipu process posts, replies and necessary de-identified registration-risk statistics. The current registration review does not send passwords, full email addresses or full IP addresses to the model. Requested translations send the relevant post/reply text to Tencent Cloud or the selected model provider and cache the result. Do not include sensitive information in public contributions that you do not wish to disclose or have processed this way. Identity information obtained from Google sign-in is not sent as model training data or in registration-review prompts.

Data is stored on forum servers and in backups. Access is limited to personnel and providers who need it for operations, security or moderation. We use controls such as restricted access, HTTPS and password hashing, but cannot guarantee absolute security. Processing may occur outside your country or region.

We retain data as needed for the service and security. Contact cntjpu@gmail.com to request access, correction, deletion, Google unlinking or account deletion. We will verify identity and handle requests; necessary security, dispute or legal records may be retained, and backup removal may be delayed. You can revoke the app's access in your Google account settings; revocation alone does not delete your forum account or contributions. Public copies and search-engine indexes may not be fully retractable.

Contact cntjpu@gmail.com for privacy questions. Updates will include an effective date and appropriate notice of material changes in data use.