1. 信息收集 / Information We Collect
账户信息 / Account Information
注册时，我们仅收集您提供的用户名、昵称和密码哈希值。我们不要求手机号码、电子邮箱或其他个人身份信息。
When you register, we only collect the username, nickname, and password hash you provide. We do not require a phone number, email address, or other personally identifiable information.
消息数据 / Message Data
私聊正文使用端到端加密。当前源码的新群消息强制签名与 Sender Key 加密；旧客户端与历史数据的处理取决于所部署版本。服务器仍处理账号、群成员、消息路由、投递及推送所需元数据，并保存上传文件。
Private-message bodies are end-to-end encrypted. New group messages in current source require signatures and Sender Key encryption; legacy clients and data depend on the deployed software. The server still processes account, membership, routing, delivery and notification metadata and stores uploaded files.
设备信息 / Device Information
为进行会话管理和安全保护，我们收集浏览器类型、操作系统等基本设备信息，用于“登录设备”功能。
For session management and security, we collect basic device information such as browser type and operating system for the Devices feature.
2. 加密与安全 / Encryption & Security
当前共享源码的私聊使用 X25519、XSalsa20-Poly1305 与 Ed25519 消息签名；新群消息强制使用签名与 Sender Key 加密。身份私钥和 Sender Key 保留在本地，原生客户端使用系统安全存储。双方须在线下约定文本外观密码并完成双向身份验证，安全号码仍应通过可信线下渠道核对；身份密钥变化会撤销信任。当前签名路径不宣称 ML-KEM 后量子保护。
加密不隐藏账号关系、群成员、时间、消息类型或路由等必要元数据。服务器保存上传的附件文件；文件本身不因消息签名而获得端到端加密。签名也不能保护已被控制的设备或收件人保存的副本。额外密码只在线下交流，不上传或自动同步。
Current shared source uses X25519, XSalsa20-Poly1305 and Ed25519 signatures for private messages. New group messages require signatures and Sender Key encryption. Private keys and Sender Keys remain local, with operating-system secure storage in native clients. Participants must agree on a text-appearance password offline and complete mutual identity verification, and independently compare safety numbers through a trusted offline channel. Identity-key changes revoke trust. The current signed protocol makes no claim of ML-KEM post-quantum protection.
Encryption does not hide necessary account, membership, time, type or routing metadata. Uploaded attachment files are stored on the server and are not end-to-end encrypted by message signatures. Signatures cannot protect compromised devices or recipient-saved copies. Share the extra password only offline; it is not uploaded or automatically synchronized.
3. 数据存储 / Data Storage
您的数据存储在您自行部署或选择的服务器上。PaperPhonePlus 支持自托管，实例运营者决定备份与保留规则。单文件上限 500MB；头像、群头像和社交媒体永久保存，聊天附件默认 14 天后清理。消息自动删除与附件保留分别配置，接收方副本和备份可能继续存在。
Your data is stored on the server you deploy or choose. Instance operators control backups and retention. Files are limited to 500MB; avatars and social media are permanent, while chat attachments expire after 14 days by default. Message expiry and attachment retention are configured separately; recipient copies and backups may persist.
4. 信息共享 / Information Sharing
我们不会出售、出租或以其他方式向第三方提供您的个人信息，除非获得您的明确同意、适用法律法规要求，或为保护我们的合法权益所必需。
We do not sell, rent, or otherwise provide personal information to third parties except with your explicit consent, when required by applicable law, or when necessary to protect our legitimate interests.
5. Cookie 与本地存储 / Cookies & Local Storage
我们使用 localStorage 和 IndexedDB 保存登录状态、加密密钥和应用设置。原生客户端使用操作系统安全存储保护密钥，并按账号缓存消息与媒体。启用通知时，服务端会向 FCM、APNS、ntfy 或可选 Bark 服务发送相应通知数据；公开社交内容和提交审核的内容不属于私聊正文加密范围。
We use localStorage and IndexedDB to store login state, encryption keys, and app settings. Native clients protect keys using operating-system secure storage and cache messages and media by account. Enabled notifications send notification data through FCM, APNS, ntfy or optional Bark. Public social content and content submitted for moderation are outside private-message encryption.
6. 未成年人保护 / Children’s Privacy
服务不面向 13 岁以下儿童。如果发现无意中收集了儿童个人信息，我们将及时采取措施删除。
The service is not directed to children under 13. If we discover that we inadvertently collected a child’s personal information, we will take steps to delete it promptly.
7. 政策更新 / Changes to This Policy
我们可能不时更新本隐私政策。更新后的政策将在应用内公布；继续使用服务即表示接受更新后的政策。
We may update this policy from time to time. Updated policies will be published in the app; continued use constitutes acceptance of the updated policy.
8. 联系我们 / Contact Us
应用：PaperPhonePlus
公司：FM619 Technolog LTD
电子邮件：4722522@gmail.com
App: PaperPhonePlus
Company: FM619 Technolog LTD
Email: 4722522@gmail.com
This page reflects the latest PaperPhonePlus shared source, changelog and deployment documentation.