隐私政策Privacy Policy

文档与本地存储Documents and local storage

SSmd 只读取和写入你主动选择的文档及文件夹，原始文档保留在原位置。为提供崩溃恢复和本地历史功能，SSmd 会在当前 macOS 用户的 Application Support/SSmd 目录中保存恢复副本和文档版本。SSmd reads and writes only documents and folders you choose. Documents remain in their original locations. For crash recovery and Local History, SSmd stores recovery copies and revisions locally in the current macOS user's Application Support/SSmd directory.

数据收集Data collection

SSmd 不包含账号系统、广告 SDK、分析 SDK、崩溃上报 SDK 或跟踪 SDK。开发者不会通过应用收集你的文档、使用分析或诊断数据。可选的早鸟验证会处理下文说明的有限 Apple 获取记录。SSmd has no account system, advertising, analytics, crash-reporting, or tracking SDK. We do not collect your documents, usage analytics, or diagnostics through the app. Optional early-bird verification processes the limited Apple acquisition information described below.

网络访问Network access

导入网页、加载网络图片或确认打开外部链接时，相关请求会发送到对应网站。目标网站及其服务商可能收到 IP 地址、User-Agent 等常规连接信息，但 SSmd 不会将你的整篇文档发送给它们。早鸟验证产生的请求见下文。Importing a webpage, loading a remote image, or confirming an external link sends requests to the relevant website. That website and its providers may receive ordinary connection information, such as your IP address and user agent. SSmd does not send them your entire document. Early-bird verification requests are described below.

Mac App Store 版由 Apple 管理下载与更新，不使用 Sparkle，也不访问 SSmd 的独立更新源。如果你仍在使用此前的独立分发版本，手动或自动更新检查会访问 download.ssmd.app，并在 User-Agent 中包含应用版本；该版本已关闭 Sparkle 匿名系统画像。Apple manages downloads and updates for the Mac App Store edition. That edition does not use Sparkle or contact SSmd's direct-update feed. If you still use an earlier independently distributed build, manual or automatic update checks contact download.ssmd.app and include the app version in the user agent. Sparkle's anonymous system profiling is disabled in those builds.

本地偏好Local preferences

语言、外观、排版、已打开文档状态、恢复元数据和本地历史设置均保存在 Mac 本地。Language, appearance, typography, open-document state, recovery metadata, and Local History settings are stored locally on the Mac.

早期支持者计划Early Supporter program

SSmd 0.1 免费首发，无需账号、邮箱、付款或登记。早鸟资格以 Apple 记录的免费商店版首次获取时间为准，截止至北京时间 2026 年 12 月 31 日结束。验证可选，之后仍可验证，未验证或验证失败都不会影响编辑。具体价格与优惠细则将在付费版本上线前公布。SSmd 0.1 is a free first release. No account, email, payment, or registration is required. Early-bird eligibility uses Apple's original acquisition date for the free App Store edition, through December 31, 2026 (UTC+8). Verification is optional and can be completed later; skipping it or encountering an error never blocks editing. Pricing and offer details will be announced before the paid version launches.

仅当你在应用中点击“验证资格”时，SSmd 才会为此功能访问由 Cloudflare Workers 提供的 api.ssmd.app，查询规则并提交 Apple 签名获取记录以验证资格。浏览本页面不会登记或验证资格。SSmd contacts api.ssmd.app, operated using Cloudflare Workers, for this feature only when you choose Check eligibility in the app. It checks the policy and submits Apple's signed acquisition record to verify eligibility. Visiting this page does not register or verify eligibility.

规则开放后，验证会提交 Apple 签名的应用获取记录，包含应用交易标识、首次获取日期、应用身份、环境及 Apple 设备验证字段。服务端验证签名和正式商店环境，不依赖电脑时间或本地设置。我们不索取文档、邮箱、Apple 账号密码或硬件序列号。Once verification opens, the app submits Apple's signed acquisition record, including its app transaction identifier, original acquisition date, app identity, environment, and Apple device-verification fields. The server checks the signature and production environment rather than trusting your computer's clock or local settings. We do not request documents, an email address, your Apple Account password, or a hardware serial number.

TestFlight 版本通过 api-test.ssmd.app 进行可选的测试验证，提交 Apple Sandbox 获取记录。测试库与正式库分开，保存下文所列字段，在最后验证 30 天后清理。测试结果不授予正式早鸟资格。TestFlight builds offer optional test verification through api-test.ssmd.app using Apple Sandbox acquisition records. The test database is separate from production and retains the fields listed below for 30 days after the last verification. Test results do not grant production early-bird eligibility.

Cloudflare D1 仅保存交易标识的带密钥哈希、首次获取日期、规则版本、资格结果及最后验证时间。原始签名记录和设备验证字段不写入我们的数据库或应用日志。Cloudflare 处理网络连接时会收到 IP 地址，接口临时用于限流；数据库不保存 IP 地址。Cloudflare D1 stores only a keyed hash of the transaction identifier, original acquisition date, rule version, eligibility result, and last verification time. We do not retain raw signed records or device-verification fields in our database or application logs. Cloudflare receives IP addresses when processing connections; the endpoint uses them transiently for rate limiting and does not store them in D1.

连续 365 天未验证的记录会在定期清理时删除。之后仍可重新验证 Apple 原始获取记录，清理不会改变首次获取日期。资格结果不是付费许可证，也不代表已经购买或领取某项优惠。Records not verified for 365 days are deleted during scheduled cleanup. Your original Apple acquisition record can be verified again afterward; cleanup does not change its date. An eligibility result is not a paid license or confirmation that you have purchased or redeemed an offer.

网站与联系支持Website and support

网站在浏览器本地保存语言和纸张主题偏好，由 Cloudflare 提供托管服务。托管服务处理访问请求时可能收到 IP 地址和浏览器等常规连接信息。如果你主动发送支持邮件，我们会收到你的邮箱地址和邮件内容，用于处理请求；这不是早鸟登记。请勿发送 Apple 账号密码或签名获取记录。The website stores your language and paper-theme preferences locally in your browser and is hosted by Cloudflare. The hosting service may receive ordinary connection information, such as your IP address and browser details, when serving requests. If you email support, we receive your email address and message to handle your request; this is not early-bird registration. Do not send your Apple Account password or signed acquisition record.

联系方式Contact

隐私问题或删除验证记录的请求，请联系 For privacy questions or requests to delete verification records, contact [email protected]。处理删除请求前，我们需要核实记录归属。. We need to verify ownership before processing a deletion request.