隐私政策 / Privacy Policy

1. 何时读取内容

扩展会在 X / Twitter 页面挂载入口按钮。仅滚动浏览不会自动分析每篇帖子或记录整个信息流。你主动选择帖子、点击草稿核查、提交追问或生成回复后，扩展才读取与该功能相关的上下文。

相关内容可能包括帖子链接、作者显示名或账号、正文、时间、引用帖、相关回复上下文、图片及其说明；你主动核查的未发布草稿和附件；你提交的追问、已有分析、最近三轮问答及回复语气、方向和目标字数。不应发送你无权处理的内容或不希望所选提供方处理的秘密。

2. 数据去向与用途

相关输入发送到你选择的 xAI 官方 API / Grok 订阅连接，或你自行启用的本机 Grok Build 服务，用于生成分析、搜索来源、回答追问、提出问题建议和整理回复草稿。所选提供方可能进一步调用其搜索等工具。公开帖子的图片会涉及 X 的图片 CDN；草稿图片可作为图片数据输入。

初次分析和每次追问回答后，会额外生成 3 个问题建议；这些请求同样使用你的提供方额度。回复草稿由你主动点击生成，不额外执行新的核查搜索。账号资格、费用、模型、日志、数据保留和删除选项由提供方及你的账号政策决定。请求中的 store:false 不代表提供方零保留。

SideLens 不增加自己的分析中转、广告或统计服务器，不把输入集合上传给开发者，不出售、出租或用于广告定向，也不用于开发者自身的通用模型训练。

3. 账号与认证信息

按你选择的连接方式，扩展处理 xAI API Key、Grok OAuth 访问与刷新 Token，或本机 Build 连接信息。持久凭据使用 AES-GCM 加密记录及 IndexedDB 中不可导出的密钥；运行所需的会话凭据只在受限的会话存储或内存中使用。本机加密不能抵御设备被控制或完整浏览器配置与密钥材料被复制。

SideLens 不读取 X 密码或 X 认证 Cookie。你在 X、Grok 或 xAI 官方页面进行的登录由相应服务处理。模型请求中的身份凭据只发送到其对应的官方服务；本机 Build 只连接你选择的回环服务。

4. 本机保存与保留时间

• 设置、最近一次 X 外观和你选择记住的连接凭据保存在本机。
• 分析结果和初次追问建议共享最多 24 小时、160 条、约 4 MB 的有界缓存；不同账号、模型和相关配置隔离。
• 可选历史仅包含你主动打开分析的帖子及已有结果，最多保留 24 小时、1,000 条、约 6 MB。历史与缓存分别管理。
• 上述帖子缓存和历史不加密、不使用浏览器同步，可能包含你主动选择的非公开内容，请按敏感资料保管浏览器配置和备份。
• 未发布草稿及附件、追问聊天、包含聊天的后续问题建议和回复草稿仅在当前页面/运行内存中保留，不写入持久缓存、历史或持久诊断；刷新后不恢复。
• 必要的失败诊断限于经过清理的状态、请求编号、模型、用量和时间等技术字段，不保存帖子正文、草稿或聊天。浏览器未运行时，不保证过期记录精确到点清理；启动、读取、写入和定时维护会执行相应清理。

5. 你的控制

在设置中可暂停扩展、选择提供方、语言、模型和搜索开关，清除缓存或历史、关闭历史记录、移除 API Key 或断开 Grok。重新分析可以跳过分析缓存。凭据变更会影响相关任务及缓存，OAuth 身份不同的结果相互隔离。

回复只供你编辑和复制，扩展不自动发布；只有你点击复制时才写入剪贴板，不读取剪贴板内容。本机服务可能独立运行，断开浏览器连接不保证其已接受的任务立即停止；提供方已收到的数据及已发生的用量也不会因本机清除而撤销。

6. 有限使用承诺

SideLens 对用户数据的使用遵守 Chrome 应用商店用户数据政策及有限使用要求。数据仅用于扩展所明确提供的阅读核查、上下文追问和回复草稿功能；仅在实现该功能所必需的范围内传给你选择的提供方。不出售数据、不用于广告，也不用于信用、贷款或保险资格判断。

开发者没有常规读取用户输入的服务端通道。若你为排障主动提供资料，只会在你同意的具体范围内处理；法律义务或安全调查的适用情形除外。本承诺不替代独立第三方提供方对其服务的政策，也不承诺它们零保留。

7. 外链、变更与联系

社区 Logo 随扩展打包，点击社区按钮后才打开 nobiggie.xyz/chat。外部来源和社区网站按各自的服务规则处理访问。本隐私页面没有分析脚本；网站托管服务仍可能处理交付页面所需的常规网络请求信息。

如数据处理方式发生实质变化，会更新本政策及扩展中的相关说明，并在适用时先取得同意。问题、删除请求或你主动提交的排障资料，请通过 NoBiggie 社区支持联系发布者 Devilflasher；不要在公开群聊发送密钥、Token 或其他秘密。

English privacy policy

This policy applies to the Nobiggie SideLens browser extension, published by Devilflasher. SideLens helps you investigate selected X posts, ask contextual follow-up questions and prepare editable replies using your own Grok connection.

Information used

Scrolling does not automatically analyze the feed or record all posts. After your relevant action, the extension may process the selected post URL, author/account name, text, time, quotations, reply context, pictures and descriptions; unpublished drafts and selected attachments; your follow-up questions, earlier analysis, up to three recent exchanges and chosen reply preferences.

Recipients and purposes

Relevant content goes directly to the configured official xAI API / Grok subscription service or a user-enabled loopback Grok Build service. It is used for analysis, source search, follow-ups, question suggestions and reply drafting. Three question suggestions after an analysis and each follow-up answer consume additional provider usage. Reply drafts require an explicit click and do not perform new verification searches. Provider tools may retrieve sources, and pictures may involve the X image CDN. Provider account eligibility, charges, logs, retention and deletion policies still apply; store:false is not a promise of zero retention.

SideLens adds no developer-operated analysis relay, advertising or analytics endpoint. The developer does not sell, rent, aggregate-upload, target advertisements with, or train its own general-purpose models on your inputs.

Credentials and security

Depending on your connection choice, the extension handles an xAI API key, Grok OAuth access/refresh tokens or local Build connection details. Remembered credentials use AES-GCM and non-exportable IndexedDB keys. Runtime credentials can exist in restricted session storage or memory. Device compromise and copied browser profiles are outside the protection of local encryption. The extension does not read X passwords or authentication cookies. Authentication is handled by the corresponding official services, and credentials go only to their intended service.

Local storage and retention

Settings, the last X appearance and remembered credentials are local. Analyses and initial question suggestions share a cache limited to 24 hours, 160 records and approximately 4 MB. Optional history contains only posts explicitly opened for analysis and existing findings, limited to 24 hours, 1,000 records and approximately 6 MB. Post caches and history are unencrypted, are not synced, and can include non-public content you selected. Keep browser profiles and backups private.

Unpublished drafts and attachments, follow-up conversations, later suggestions containing discussion, and generated reply drafts stay in page/runtime memory and are not stored in persistent caches, history or diagnostic logs. Reload does not restore them. Necessary sanitized technical failure metadata can include status, request IDs, model, usage and time, but not post bodies, drafts or conversations. Expiry cleanup occurs during relevant startup/read/write and maintenance operations; a closed browser cannot guarantee deletion at an exact instant.

Controls and limited use

You can pause the extension, change connection/model/language/search settings, clear cache/history, disable selected-post history, remove a key or disconnect Grok. Analyze again bypasses the analysis cache. Account-specific results are isolated. Copies require a user click and only write the chosen draft to the clipboard. The extension does not read clipboard contents or automatically publish. A separate local service can keep accepted work running after browser disconnection; local deletion does not undo provider processing or charges.

SideLens follows the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only for the disclosed reading/checking, follow-up and reply-drafting features and is transferred only as needed to your configured service. It is not sold or used for advertising, creditworthiness, lending or insurance decisions. The developer has no routine server-side access to user inputs. Any support material you voluntarily provide is handled within your specific consent, subject to applicable legal or security obligations. Independent third-party provider policies still apply.

Links, changes and contact

The local community logo does not contact a remote site. Only clicking the community link opens nobiggie.xyz/chat. External websites follow their own policies; ordinary website hosting may process network information needed to deliver this static page. This page contains no analytics scripts. Material data-practice changes will be reflected here and in the extension, with consent where applicable. Contact publisher Devilflasher through NoBiggie community support; do not post credentials or secrets in public chat.