隐私政策 Privacy Policy

中文版

1. 我们是谁

本站（acmsz.top）是个人博客，由 CMSZ（下称「我们」）运营。您使用本站即表示您信任我们对您信息的处理方式。我们深知这项责任重大，始终致力于保护您的信息，并让您拥有控制权。本政策说明我们收集哪些信息、为什么收集、如何处理与存储，以及您如何联系我们。

2. 我们收集的信息

本站不投放广告、不向广告平台发送数据、不设置用于跨站跟踪的 cookie。我们仅收集提供本站功能所需的信息。本站不设置追踪型 cookie，不使用指纹识别；统计数据经处理后不再包含可直接识别个人的信息。

分析信息（Umami）。 自托管 Umami 不设置 cookie、不使用指纹识别，收集用于站点分析的汇总或去标识化统计数据：访问页面与来源、设备 / 浏览器 / 系统、大致地区，以及核心 Web 指标（LCP、CLS 等）。原始 IP 不作为分析字段持久化存储，仅临时用于推断大致地区；独立访客识别不依赖 cookie。

评论（Artalk）。 发表评论时发送：评论内容与昵称（默认公开显示，可能被搜索引擎收录）、可选的邮箱 / 网站（不填也能评论）、User-Agent；服务器还会记录 IP。邮箱仅用于回复通知（需您主动选择接收）和头像获取（邮箱先经 SHA-256 哈希再发送给头像服务，明文绝不出站）。

原始 IP 仅存储在服务器上（用于反垃圾、限流与审核），不会出现在公开的评论接口中；原始 User-Agent 随评论存储，仅管理员在后台可见。本站已启用 IP 属地功能，评论者 IP 对应的省份会作为地域徽章公开显示在评论旁；该地域由 IP 地址推断，仅表示大致所在地区，可能与实际所在地不一致。IP 与 User-Agent 随评论一并保存，评论删除时一并删除。

本地存储（localStorage）。 本站无追踪 cookie，仅在您的浏览器中保存少量功能性数据：主题偏好；Artalk 的用户信息、评论草稿、未读状态。这些数据只存在于您的设备上，不会随每个 HTTP 请求发送至服务器，可随时在浏览器设置中清除。

3. 数据的使用

提供并维护评论功能（反垃圾、审核）；以汇总、去标识化的方式了解流量、改进内容与性能；维护站点安全与正常运行；在您请求时发送回复通知。我们不会将任何信息用于广告、营销或内容推荐，也不会出售您的信息；除为提供本站服务所必要的第三方服务，以及法律法规要求或允许的情形外，我们不会主动向其他机构出售、出租或提供您的个人信息。

4. 数据的存储与跨境传输

Umami 与 Artalk 运行于中国大陆的一台自托管服务器，请求经 Cloudflare 转发。中国大陆以外的访客，其评论与统计相关数据会经 Cloudflare 传输并存储于中国大陆。

本站使用 Cloudflare 提供 CDN、反向代理及安全防护服务。访问本站时，部分请求会经过 Cloudflare 的网络基础设施。Cloudflare 可能根据其自身隐私政策处理必要的技术信息，包括 IP 地址、请求信息及安全相关数据（如反机器人 cookie __cf_bm）。此类处理由 Cloudflare 独立负责。

5. 第三方服务

• Cloudflare：托管与 CDN 服务商。
• WeAvatar：仅当您填写邮箱时，邮箱的 SHA-256 哈希发送至 weavatar.com 加载头像；明文邮箱绝不发送给第三方。

6. 数据保留

• 统计与评论数据保存在我们的服务器上，直至您请求删除或我们删除；
• 评论删除时，其关联的 IP、User-Agent 一并删除；
• 服务器访问日志短期保留，用于安全与诊断后自动清理；
• localStorage 数据由您随时清除。

7. 您的权利

您可随时联系我们查询、更正或删除与本站相关的个人数据（如删除评论），并可要求解释本政策。中国大陆访客依据《个人信息保护法》、欧盟 / 英国访客依据 GDPR 行使相应权利；我们会在合理期限内答复。

8. 政策更新与联系方式

政策更新会修改顶部日期并在本页公布。任何疑问、权利请求或数据删除请求，请联系 me@acmsz.top。

English Version

1. Who We Are

This site (acmsz.top) is a personal blog operated by CMSZ (“we”). By using this site you place your trust in how we handle your information. We take that responsibility seriously and are committed to protecting your information and giving you control. This policy explains what information we collect, why, how it is processed and stored, and how to contact us.

2. What Information We Collect

The site runs no advertising, sends no data to ad platforms, and sets no cross-site tracking cookies. We collect only what is needed to provide the site’s features. This site sets no tracking cookies and uses no fingerprinting; analytics data is processed so it no longer directly identifies individuals.

Analytics (Umami). The self-hosted Umami sets no cookies and uses no fingerprinting, and collects aggregated or de-identified statistics for site analysis: pages visited and referrer, device / browser / OS, approximate region, and Core Web Vitals (LCP, CLS, etc.). Raw IP is not persisted as an analytics field and is only used transiently to infer an approximate region; unique-visitor counting does not rely on cookies.

Comments (Artalk). When you post a comment, the following is sent: your comment text and nickname (publicly displayed by default, and may be indexed by search engines), an optional email / website (you can comment without them), and your User-Agent; the server also records your IP. An email is used only for reply notifications (if you opt in) and avatars (the email is SHA-256 hashed before being sent to an avatar service; plaintext never leaves the site).

The raw IP is stored only on our server (for anti-spam, rate-limiting and moderation) and is not exposed in the public comment API; the raw User-Agent is stored with the comment and is visible only to the site administrator. This site has IP-region enabled, so the province derived from a commenter’s IP is shown as a public region badge next to the comment; it is inferred from the IP address and only indicates a broad area, not necessarily the commenter’s actual location. The IP and User-Agent are stored with the comment and are deleted together with it.

Local storage. We set no tracking cookies but store a small amount of functional data in your browser: your theme preference; Artalk’s user info, comment drafts, and unread state. This stays on your device, is not sent to our server with every HTTP request, and can be cleared at any time in your browser settings.

3. How We Use Data

To provide and maintain the comment feature (spam protection, moderation); to understand traffic and improve content and performance in aggregated, de-identified form; to keep the site secure and operational; to send reply notifications when you ask for them. We never use any information for advertising, marketing or content recommendation, and we do not sell your information; Apart from the third-party services necessary to provide this site, and where required or permitted by law, we do not proactively sell, rent, or otherwise provide your personal information to other organisations.

4. Storage and Cross-Border Transfers

Umami and Artalk run on a self-hosted server in mainland China, with requests proxied through Cloudflare. For visitors outside mainland China, comment and analytics-related data is transmitted via Cloudflare and stored in mainland China.

This site uses Cloudflare for CDN, reverse-proxy and security protection. When you visit, some requests pass through Cloudflare’s network infrastructure. Cloudflare may process the necessary technical information under its own privacy policy, including IP addresses, request information and security-related data (such as the anti-bot cookie __cf_bm). Such processing is carried out independently by Cloudflare.

5. Third-Party Services

• Cloudflare: hosting and CDN provider.
• WeAvatar: only if you provide an email, a SHA-256 hash of it is sent to weavatar.com to load an avatar; your plaintext email is never sent to third parties.

6. Data Retention

• Analytics and comment data are kept on our servers until you ask us to delete them or we delete them;
• when a comment is deleted, its associated IP and User-Agent are deleted with it;
• server access logs are retained for a short period, then automatically cleared after security and diagnostics;
• localStorage data can be cleared by you at any time.

7. Your Rights

You may contact us at any time to access, rectify or delete personal data related to this site (such as deleting a comment), and to ask for an explanation of this policy. Visitors in mainland China may rely on the PIPL, and EU/UK visitors on the GDPR, for their corresponding rights; we will respond within a reasonable period.

8. Changes and Contact

Updates will be reflected on this page with a revised date at the top. For any questions, rights requests or deletion requests, email me@acmsz.top.