Privacy Policy · 隐私政策

Last updated: 2026-07-10

1. Scans are ephemeral · 扫描即用即弃

When you scan a URL, we fetch its public pages, compute the report in memory, return it to your browser, and store nothing on our servers. Your scan history lives only in your own browser's localStorage.

扫描时,我们抓取该网址的公开页面,在内存中计算报告并返回给你的浏览器,服务器不存储任何内容。扫描历史只保存在你自己浏览器的 localStorage 里。

2. Monitoring subscriptions · 监控订阅

If you opt into weekly monitoring, we store: your email address, the monitored domain, your language preference, and weekly score snapshots. This data is used solely to send you the weekly report and is deleted when you unsubscribe (one click in every email).

如果你开启每周监控,我们会存储:你的邮箱、被监控的域名、语言偏好、每周分数快照。这些数据仅用于发送周报,退订即删除(每封邮件都有一键退订链接)。

3. Payments · 支付

Payments are processed by Creem (merchant of record). We never see or store your card details. Creem's privacy policy governs the checkout.

支付由 Creem(登记商户)处理,我们不会接触或存储你的银行卡信息。结账环节适用 Creem 的隐私政策。

4. Analytics · 分析

We use Vercel Web Analytics: aggregate, cookie-free page-view and event counts. No cross-site tracking, no advertising identifiers.

我们使用 Vercel Web Analytics:聚合、无 Cookie 的页面访问与事件计数。无跨站跟踪,无广告标识符。

5. Your rights · 你的权利

Email admin@hartevo.com to access or delete any data we hold about you; we act within 7 days.

发邮件至 admin@hartevo.com 即可查询或删除我们持有的关于你的任何数据,7 天内处理。

6. Google user data · Google 账号数据(Search Console)

If you connect Google Search Console inside the Hartevo app (app.hartevo.com), we request a single read-only scope (https://www.googleapis.com/auth/webmasters.readonly). We use it only to read your own verified property list and your site's Search Analytics — impressions, clicks, click-through rate, average position, and top queries and pages — and to display those numbers back to you as a performance card inside the app. Because the scope is read-only, Hartevo cannot change, add, or delete anything in your Search Console.

如果你在 Hartevo 应用(app.hartevo.com)内连接 Google Search Console,我们只申请一个只读权限(https://www.googleapis.com/auth/webmasters.readonly),仅用于读取你自己已验证的站点列表与站点的搜索分析数据(展示量、点击、点击率、平均排名、热门查询与页面),并把这些数字作为性能卡片在应用内展示给你本人。因为是只读权限,Hartevo 无法修改、新增或删除你 Search Console 中的任何内容。

Your Google OAuth refresh token is encrypted at rest (AES-256-GCM) and used only on our server to mint short-lived access tokens on demand; it is never exposed to your browser or to the assistant. You can disconnect at any time in the app (which deletes the stored token) or revoke access at myaccount.google.com/permissions. Questions about Google data: privacy@hartevo.com.

你的 Google OAuth 刷新令牌以 AES-256-GCM 静态加密存储,仅在我们服务器端用于按需换取短时访问令牌,绝不暴露给你的浏览器或助手。你可随时在应用内断开连接(即删除已存令牌),或在 myaccount.google.com/permissions 撤销授权。Google 数据相关问题请联系 privacy@hartevo.com。

Hartevo's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell this data, do not use it for advertising, and do not use it to develop, improve, or train generalized or non-personalized AI/ML models. Human access is limited to what you explicitly request, security, or legal compliance.

Hartevo 对从 Google API 获取的信息的使用,以及向任何其他应用的传输,均遵守 Google API 服务用户数据政策,包括其中的 Limited Use(有限使用)要求:我们不出售该数据、不用于广告、不用于开发或改进或训练通用/非个性化的 AI/ML 模型;人工访问仅限于你明确请求的操作、安全或法律合规所需。