隐私政策
版本 v1.0 ｜ 生效日期：2026 年 9 月 18 日 ｜ 最后更新：2026 年 9 月 18 日
陈峻屹（个人运营者，以下称"我们"或"本站"）重视你的隐私保护。本隐私政策（以下简称"本政策"）说明：在你使用番茄麻薯proxy工坊服务（以下简称"本服务"）时，我们如何收集、使用、存储和共享你的个人信息，以及你依法享有的权利。
请在使用本服务前仔细阅读本政策。你使用本服务即表示你同意本政策。我们可能不时更新本政策，重大变更将按第 13 条的方式通知你。
1. 数据控制者
本服务的数据控制者为：
2. 我们收集哪些信息
2.1 你主动提供的信息
- 账号信息：电子邮箱地址、密码（以哈希形式存储，我们无法还原你的明文密码）、注册时间与账号状态。
- 支付信息：订单号、订单金额、支付状态、订阅周期与到期时间。我们不收集也不存储你的完整银行卡号——卡数据由支付处理商直接采集与处理（见第 5 条）。
- 沟通信息：你提交的工单内容、与我们往来的邮件，以及你在反馈中提供的其他信息。
2.2 我们自动收集的信息
- 设备与网络信息：IP 地址、设备型号与操作系统、浏览器类型与版本、语言与时区。
- 服务使用数据：为完成流量计费与用量展示所必需的连接时间、数据用量统计、所连接的服务器节点标识。
- 日志数据：请求时间戳、接口调用记录、错误日志与性能指标。
关于流量内容：我们不会记录、存储或分析你通过本服务访问的具体网站、域名或传输内容。加密传输的内容对我们不可见。我们仅保存为计费、故障排查与安全防护所必需的技术性用量数据（如连接时间与流量总量）。
3. 我们如何使用你的信息
| 使用目的 | 法律依据 |
|---|
| 提供与维护服务（账号开通、订阅管理、节点接入） | 履行合同 |
| 计费、支付处理与订单管理 | 履行合同 |
| 客户支持与工单处理 | 履行合同 / 正当利益 |
| 服务通知（账单、安全提醒、政策更新） | 正当利益 |
| 安全防护、反欺诈与滥用检测 | 正当利益 |
| 服务统计分析与产品改进 | 正当利益 |
| 遵守法律法规要求 | 法律义务 |
你可能基于统计目的对数据进行汇总或匿名化处理。此类数据无法与任何个人关联。
4. Cookies 与本地存储
| 类型 | 用途 | 可否关闭 |
|---|
| 必要 | 登录会话保持、身份验证、站点核心功能 | 否 |
| 功能性 | 界面语言与显示偏好 | 是 |
| 安全验证 | 登录与注册时的人机验证（Cloudflare Turnstile） | 否（关闭将无法完成注册/登录） |
我们不使用广告类 Cookie，也不进行跨站行为追踪。你可以通过浏览器设置清除或阻止非必要 Cookie，但这可能影响部分功能的正常使用。注册与登录环节使用 Cloudflare Turnstile 进行人机验证，该过程会由 Cloudflare 处理必要的设备与网络信息，详见 Cloudflare 的隐私政策。
5. 信息共享与披露
我们不会出售你的个人信息，包括不进行适用法律（如 CCPA）所定义的"出售"行为。我们仅在下列情形下共享必要的信息：
- 支付服务商：支付卡数据由我们的支付处理商 Waffo Pancake（PCI-DSS 认证，作为记录商户 / Merchant of Record）独家处理，不存储于我们的服务器。为完成交易、税务处理、退款与拒付管理，Waffo Pancake 会独立处理相应的交易数据。
- 基础设施服务商：为我们提供服务器托管、内容分发与安全防护的服务商，其仅能在为我们提供服务所必需的范围内接触数据，并受保密义务约束。
- 法律要求：在法律法规要求、法院命令或有权机关的合法要求下，我们可能披露必要信息。
- 业务变更：如发生合并、收购或类似交易，我们将提前通知，并确保你的信息持续受到不低于本政策的保护。
- 经你同意：除上述情形外，我们仅在取得你明确同意后共享你的信息。
6. 数据安全
- 传输加密：站点全站启用 TLS / HTTPS 加密传输。
- 存储安全：账号密码以不可逆哈希方式存储；敏感配置加密保存。
- 访问控制：遵循最小权限原则，仅授权必要人员接触数据。
- 定期进行安全审计、系统更新与漏洞修补。
如发生影响你权益的安全事件，我们将按法律要求在发现后 72 小时内通知你及相关监管机构。请妥善保管你的账号凭证，不要向他人透露。
7. 数据保留期限
| 数据类型 | 保留期限 | 到期处理 |
|---|
| 账号信息 | 账号存续期间；注销后 90 天 | 删除或匿名化 |
| 交易与订单记录 | 3 年（会计与税务合规要求） | 删除或归档 |
| 工单与支持记录 | 2 年 | 安全删除 |
| 安全与访问日志 | 6 个月 | 安全删除 |
| 流量用量统计 | 13 个月（仅用于计费核对） | 删除或聚合匿名化 |
8. 你的权利
如需行使下列任何权利，请通过本政策第 14 条的方式联系我们。我们将在 30 个自然日内回复。
| 权利 | 说明 |
|---|
| 知情权 | 了解我们收集哪些数据以及如何使用 |
| 访问权 | 获取你所提供个人信息的副本 |
| 更正权 | 更正不准确或不完整的数据 |
| 删除权 | 在符合条件的情况下要求删除你的数据 |
| 限制处理权 | 在特定情形下要求暂停处理 |
| 可携带权 | 以机器可读格式获取你的数据 |
| 反对权 | 反对基于正当利益的处理 |
| 撤回同意权 | 随时撤回基于同意进行的处理 |
你也有权向你所在国家或地区的数据保护监管机构投诉。
9. 营销信息与退订
我们不发送营销推广邮件。我们仅在你注册、下单、订阅到期、账号安全异常或政策更新等必要情况下，向你发送服务类通知。如我们未来开展营销活动，将事先取得你的单独同意，并提供随时退订的方式。退订不影响你接收必要的服务与安全通知。
10. 数据的跨境传输
本服务的服务器节点位于美国、中国香港、日本等地区，我们的基础设施与支付服务商也可能位于你所在国家或地区之外。这意味着你的数据可能被传输至境外并在境外处理。
对于跨境传输，我们采取下列保护措施：
- 与相关服务商签订数据处理协议，并要求其承担保密与安全义务；
- 仅将数据传输至具有同等保护水平的接收方；
- 传输过程全程使用 TLS 加密。
11. 未成年人保护
本服务面向 18 周岁及以上的用户。我们不会有意收集未满 18 周岁用户的个人信息。如你发现未成年人向我们提供了信息，请立即联系我们，我们将尽快删除相关数据并关闭对应账号。
12. 第三方链接与服务
本服务可能包含指向第三方网站或服务的链接（例如客户端下载源、支付收银台）。本政策仅适用于我们直接收集的数据。我们不对第三方的隐私实践负责，建议你在使用前查阅其隐私政策。你在 Waffo Pancake 收银台完成的支付，由 Waffo 作为记录商户按其隐私政策处理。
13. 政策变更
对于重大变更，我们将提前不少于 15 日通过站内公告或你的注册邮箱通知你，并更新页面顶部的"最后更新"日期。变更生效后你继续使用本服务，即视为接受更新后的政策。
14. 联系我们
| 渠道 | 信息 |
|---|
| 隐私事务邮箱 | cjye29213@gmail.com |
| 支持渠道 | 站内工单（推荐，登录后提交） |
| 主体名称 | 陈峻屹 |
| 联系地址 | 山东省济南市历城区山大南路27号 |
| 服务时间 | 周一至周五 10:00–22:00（UTC+8） |
版本 v1.0 ｜ 最后更新日期：2026 年 9 月 18 日 ｜ 服务条款 · 可接受使用政策
Privacy Policy
Version 1.0 | Effective date: September 18, 2026 | Last Updated: September 18, 2026
Junyi Chen, an individual operator ("we," "us," or "our"), is committed to protecting your privacy. This Privacy Policy ("Policy") explains how we collect, use, store, and share your personal information when you use the encrypted network connectivity service operated at https://sub.mohuaye.cn (the "Service"), and the rights available to you.
Please read this Policy carefully before using the Service. By using the Service, you agree to this Policy. We may update this Policy from time to time; material changes will be notified as described in Section 13.
1. Data Controller
The data controller for this Service is:
| Item | Detail |
|---|
| Legal name | Junyi Chen |
| Contact address | No. 27 Shanda South Road, Licheng District, Jinan, Shandong, China |
| Privacy email | cjye29213@gmail.com |
| Data Protection Officer | Not applicable (no large-scale or sensitive processing) |
2. Personal Information We Collect
2.1 Information You Provide Directly
- Account info: email address, password (stored as a one-way hash — we cannot recover your plaintext password), registration date, and account status.
- Payment info: order number, order amount, payment status, subscription period, and expiry date. We do not collect or store your full card number — card data is collected and processed directly by our payment processor (see Section 5).
- Communications: support tickets you submit, emails exchanged with us, and other information you provide in feedback.
2.2 Information We Collect Automatically
- Device & network: IP address, device model and operating system, browser type and version, language, and time zone.
- Service usage data: connection times, aggregate data-transfer volume, and the identifier of the server node used — the minimum required for traffic accounting and quota display.
- Log data: request timestamps, API call records, error logs, and performance metrics.
About traffic content: We do not record, store, or analyse the specific websites, domains, or content you access through the Service. Encrypted traffic is not visible to us. We retain only the technical usage data (such as connection time and total traffic volume) required for billing, troubleshooting, and security.
3. How We Use Your Information
| Purpose | Legal basis |
|---|
| Service delivery & maintenance (account provisioning, subscription management, node access) | Contract performance |
| Billing, payment processing & order management | Contract performance |
| Customer support & ticket handling | Contract / Legitimate interests |
| Service notifications (billing, security, policy) | Legitimate interests |
| Security, fraud prevention & abuse detection | Legitimate interests |
| Usage analytics & service improvement | Legitimate interests |
| Legal compliance | Legal obligation |
We may aggregate or anonymise data for statistical purposes. Such data cannot be linked to any individual.
4. Cookies & Local Storage
| Type | Purpose | Disableable |
|---|
| Strictly necessary | Login sessions, authentication, core site functionality | No |
| Functional | Interface language and display preferences | Yes |
| Security verification | Human verification at sign-up/sign-in (Cloudflare Turnstile) | No (disabling prevents sign-up/sign-in) |
We do not use advertising cookies and do not perform cross-site behavioural tracking. You may clear or block non-essential cookies via your browser settings, though this may affect some functionality. Registration and sign-in use Cloudflare Turnstile for human verification; during that process, Cloudflare processes necessary device and network information under its own privacy policy.
5. Sharing & Disclosure
We do not sell your personal information, including as defined under applicable laws such as the CCPA. We share your information only in the following circumstances:
- Payment processor: payment card data is processed exclusively by our payment processor Waffo Pancake (PCI-DSS certified, acting as Merchant of Record) and is not stored on our servers. To complete transactions, handle tax, process refunds, and manage chargebacks, Waffo Pancake independently processes the relevant transaction data.
- Infrastructure providers: vendors providing server hosting, content delivery, and security, which may access data only to the extent necessary to provide their services to us and are bound by confidentiality obligations.
- Legal requirements: where required by law, court order, or a lawful request from a competent authority.
- Business transactions: in a merger, acquisition, or similar event, with advance notice and continued protection of your information at a standard no lower than this Policy.
- With your consent: for any other purpose, only with your explicit prior consent.
6. Data Security
- Encryption in transit: TLS / HTTPS across the entire site.
- Secure storage: passwords are stored using irreversible hashing; sensitive configuration is encrypted.
- Access controls: least-privilege principle; only authorised personnel can access data.
- Regular security audits, system updates, and vulnerability patching.
In the event of a security incident affecting your rights, we will notify you and the relevant authorities within 72 hours of discovery, as required by law. Please keep your credentials secure and do not share them.
7. Data Retention
| Data type | Retention period | Upon expiry |
|---|
| Account information | While the account is active; 90 days after deletion | Delete or anonymise |
| Transaction & order records | 3 years (accounting and tax compliance) | Delete or archive |
| Support & ticket records | 2 years | Secure deletion |
| Security & access logs | 6 months | Secure deletion |
| Traffic usage statistics | 13 months (billing reconciliation only) | Delete or aggregate/anonymise |
8. Your Data Rights
To exercise any right below, contact us using the details in Section 14. We respond within 30 calendar days.
| Right | Description |
|---|
| Right to be informed | Know what data we collect and how we use it |
| Right of access | Obtain a copy of the personal information we hold about you |
| Right to rectification | Correct inaccurate or incomplete data |
| Right to erasure | Request deletion under certain conditions |
| Right to restrict processing | Temporarily suspend processing in certain cases |
| Right to data portability | Receive your data in a machine-readable format |
| Right to object | Object to processing based on legitimate interests |
| Right to withdraw consent | Withdraw consent for consent-based processing |
You may also lodge a complaint with your local data protection authority.
9. Marketing & Opt-Out
We do not send marketing emails. We contact you only for essential service matters such as registration, order confirmation, subscription expiry reminders, account security alerts, and policy updates. If we introduce marketing in the future, we will obtain your separate consent first and provide a way to opt out at any time. Opting out does not affect essential service and security notifications.
10. International Data Transfers
Our server nodes are located in the United States, Hong Kong (China), and Japan, and our infrastructure and payment vendors may be located outside your country or region. This means your data may be transferred to and processed in another jurisdiction.
For international transfers, we apply the following safeguards:
- Data processing agreements with vendors, imposing confidentiality and security obligations;
- Transfers only to recipients providing an equivalent level of protection;
- Encryption of data in transit using TLS.
11. Children's Privacy
The Service is intended for users aged 18 and above. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us with information, contact us immediately and we will promptly delete it and close the associated account.
12. Third-Party Links & Services
The Service may include links to, or integrations with, third-party services (for example client download sources or the payment checkout). This Policy applies only to data we directly collect. We are not responsible for third-party privacy practices and encourage you to review their policies before use. Payments made at the Waffo Pancake checkout are processed by Waffo as Merchant of Record under Waffo's privacy policy.
13. Policy Changes
For material changes, we will provide at least 15 days' advance notice via a website announcement or your registered email, and update the "Last Updated" date at the top of this page. Continued use after the effective date constitutes acceptance of the revised Policy.
14. Contact Us
| Channel | Detail |
|---|
| Privacy email | cjye29213@gmail.com |
| Support | In-site support ticket (recommended, requires sign-in) |
| Legal name | Junyi Chen |
| Contact address | No. 27 Shanda South Road, Licheng District, Jinan, Shandong, China |
| Business hours | Mon–Fri, 10:00–22:00 (UTC+8) |
Version 1.0 | Last Updated: September 18, 2026 | Terms of Service · Acceptable Use Policy