This policy explains how Huafang Li, trading as AQUOR (“AQUOR”, “we”, “us”), a sole trader based in Manila, Philippines and the provider of Xinghai Browser, handles your data. Contact: hi@aquor.app.
The most important point first
Your store logins, passwords, cookies and proxy settings are encrypted with a sync password that only you know before they ever leave your computer. Our server only holds ciphertext that we cannot decrypt. This is not a promise not to look — we are technically unable to.
1. What we collect
| What | Why |
|---|---|
| Email address | Signing in, password reset, contacting you when necessary |
| Nickname and avatar (optional, set by you) | Shown in the app |
| Device ID (a one-way hash computed from your network adapter and disk serial numbers) | Tying an account to one computer. It is irreversible — we cannot recover your hardware details from it |
| Plan, expiry date and order records | Knowing what you bought and when it ends |
| Encrypted settings data (ciphertext) | Restoring your settings on a new computer. We cannot decrypt it |
| Sign-in and activity logs (time, action, only the first two parts of your IP address) | Troubleshooting and spotting account-theft attempts |
What we deliberately do not collect
- Your store logins and passwords — they stay on your computer and are only uploaded encrypted, which we cannot read
- The proxies you use — same as above
- Your browsing history, cookies or page content — never uploaded
- Your full IP address — logs keep only the first two parts, e.g.
112.209.*.* - IP addresses or browser identifiers of people who download the app — we count downloads without recording them
2. Why we keep only half an IP address
The first two parts (112.209.*.*) are enough to notice that an account suddenly signs in from a
completely different region — a common sign of theft — but not enough to identify who or where you are.
3. Where data is stored
- Your store settings are stored mainly on your own computer (in your user folder). Only if you turn on sync do we keep an encrypted copy on our server
- Account information is stored on servers run by us and our hosting providers, which may be in a different country from yours
4. Who we share data with
We never sell, rent or trade your data. Third parties are involved only in these cases:
- Payments — Paddle. Online orders are processed by Paddle.com, our reseller and Merchant of Record. Paddle collects your payment details, billing address and email to process the order, calculate tax and prevent fraud, under its own privacy policy. We never see or store your card number. Paddle tells us what you bought so we can activate your plan
- Sign-in service. Email sign-up, sign-in and password reset are handled by a third-party authentication provider, which receives your email address
- Legal requirements. We may have to respond to a valid legal order. Even then, we cannot hand over your encrypted settings in readable form — we do not have the key
5. Cookies and local storage
This website only uses local storage to remember your language and theme preference. There is no advertising tracking and no third-party analytics. The desktop app stores your sign-in state and settings locally on your computer. If you open the Paddle checkout, Paddle may use its own cookies to complete the payment.
6. Your rights
- Access and correction: view and edit your details under Profile in the app
- Deletion: contact us and we will delete your account and related data. ⚠️ This cannot be undone, including your synced settings
- Export: contact us if you need a copy of your data
- Stop syncing: turn off sync in the app and delete the encrypted copy in the cloud
7. How long we keep data
- Account information: for as long as your account exists
- Logs: used for troubleshooting and deleted regularly
- Order records: kept longer, for accounting and refunds
- When you delete your account, we delete the data above, except where the law requires us to keep it
8. Children
The service is for adults running online businesses and is not intended for anyone under 18.
9. Changes to this policy
We update the “Last updated” date at the top of this page when the policy changes, and announce significant changes in the app.
10. Contact
For any privacy question, or to use the rights above, email hi@aquor.app.
本政策说明星海浏览器的提供方 Huafang Li（以 AQUOR 名义经营，菲律宾马尼拉个体经营者，下称「AQUOR」或「我们」）如何处理你的数据。联系邮箱：hi@aquor.app。
先说最要紧的一句
你的店铺账号、密码、Cookie、代理 IP，在离开你电脑之前就已经用 你自己设的同步密码加密了。服务器上存的只是一串我们也解不开的乱码。 我们不是承诺不看，是技术上就看不到。
一、我们收集什么
| 收集的 | 用来干什么 |
|---|---|
| 邮箱 | 登录、找回密码、必要时联系你 |
| 昵称、头像（可选，你自己填） | 界面上显示 |
| 机器码（你电脑网卡和硬盘序列号算出的一串哈希） | 把账号绑定到一台电脑，防止一个账号到处用。是不可逆的哈希，我们还原不出你的硬件信息 |
| 套餐、到期时间、订单记录 | 知道你买了什么、什么时候到期 |
| 加密后的配置数据（一串密文） | 让你换电脑时能同步回来。我们解不开 |
| 登录/操作日志（时间、动作、只留前两段的 IP） | 排查问题、发现盗号异常 |
我们明确不收集的
- 你的店铺账号和密码 —— 只存在你电脑上，加密后才上传，我们解不开
- 你用的代理 IP —— 同上
- 你的浏览记录、Cookie、网页内容 —— 从不上传
- 你的完整 IP 地址 —— 日志里只留前两段，比如
112.209.*.* - 下载记录里的 IP 和浏览器标识 —— 统计下载量时刻意不记， 否则官网上那句「你的 IP 我们也看不到」就成了谎话
二、为什么只留半个 IP
留前两段（112.209.*.*）是为了能看出「同一个账号在完全不同的地区登录」
这种盗号异常，但没法反推到具体是谁、在哪。这是我们在「能排查问题」和
「不过度收集」之间划的线。
三、数据存在哪
- 你的店铺配置：主要存在你自己的电脑上（你的用户目录下）。 开了同步才会把加密后的密文存一份到我们服务器
- 账号信息：存在我们和我们的托管服务商的服务器上，服务器可能不在你所在的国家或地区。 如果你所在地区对数据跨境有要求，请自行评估
四、我们跟谁共享
我们不出售、不出租、不交换你的任何数据。只有下面几种情况会涉及第三方：
- 支付 —— Paddle：网上订单由我们的经销商兼记账商户 Paddle.com 处理。Paddle 会收集你的付款信息、 账单地址和邮箱，用于完成订单、计税和防欺诈，按它自己的 隐私政策处理。 我们看不到也不存储你的银行卡号。Paddle 只告诉我们你买了什么，好给你开通套餐
- 登录服务：邮箱注册/登录、找回密码由第三方身份服务承担， 它会拿到你的邮箱
- 法律要求：收到合法有效的法律文书时，我们可能需要配合。 但即便如此，加密的配置数据我们也交不出明文 —— 我们没有密钥
五、Cookie 和本地存储
官网只用必要的本地存储记住你的语言和深浅色偏好，不做广告追踪， 不接第三方统计代码。客户端软件在本地保存你的登录状态和配置。 打开 Paddle 付款页时，Paddle 可能使用它自己的 Cookie 来完成付款。
六、你的权利
- 查看和更正：在软件里「个人中心」可以看到和修改你的资料
- 删除账号：联系我们，我们会删除你的账号及关联数据。 ⚠️ 删了就找不回来了，包括云端同步的配置
- 导出数据：需要的话联系我们
- 撤回同步：在软件里关掉数据同步，并删除云端那份密文
七、数据保留多久
- 账号信息：账号存在期间一直保留
- 日志：用于排查问题，定期清理
- 订单记录：因为要对账和处理退款，保留较长时间
- 你删除账号后，我们会删除上述数据（法律要求必须保留的除外）
八、未成年人
本服务面向从事跨境电商经营的成年人，不面向未满 18 岁的用户。
九、政策变更
有修改会更新本页顶部的「最后更新」日期；涉及你权利的重大变更， 会在软件内提示。
十、联系我们
关于隐私的任何问题，或者要行使上面这些权利，请发邮件到 hi@aquor.app。