Privacy Policy / 隐私政策
Effective date / 生效日期： 20 June 2026 / 2026年6月20日
Email alerts / 邮件提醒
GradWindow collects your email address and preferred interface language only when you request application-opening alerts. Subscription requires confirmation through a link sent to that address.
仅当你主动订阅申请开放提醒时，GradWindow 才会收集你的邮箱地址和界面语言。 订阅必须通过发送至该邮箱的链接再次确认。
How email addresses are protected / 如何保护邮箱
- Email addresses are encrypted before storage using AES-GCM. / 邮箱使用 AES-GCM 加密后保存。
- A keyed, irreversible hash is used for lookup and deduplication. / 查询和去重仅使用带密钥的不可逆摘要。
- Emails are not stored in GitHub, public site files, analytics, or browser storage. / 邮箱不会进入 GitHub、公开网站文件、访客分析或浏览器存储。
- Confirmation and unsubscribe tokens are single-purpose and time-limited where applicable. / 确认和退订令牌仅用于单一用途，并在适用时设置有效期。
- GradWindow does not sell subscriber information. / GradWindow 不会出售订阅者信息。
Processors / 服务提供方
Cloudflare Workers and D1 process and store subscription records. Resend processes email addresses when delivering confirmation and alert emails. Email open and click tracking must remain disabled.
Cloudflare Workers 和 D1 负责处理及保存订阅记录；Resend 在发送确认邮件和提醒邮件时 处理邮箱地址。邮件打开和链接点击追踪必须保持关闭。
Feature voting / 功能投票
The feature-voting page creates a random browser identifier. Before it reaches the database, that identifier is transformed with a keyed, irreversible hash. The hash is used only to enforce one vote per idea from the same browser. No account, email address, or browser history is required to vote.
功能投票页面会生成随机浏览器标识。该标识在写入数据库前会转换为带密钥的不可逆摘要， 仅用于限制同一浏览器对同一想法重复投票。投票不要求账号、邮箱或浏览历史。
To limit automated abuse, the Worker may derive a separate keyed hash from the request IP address and retain only short-lived rate-limit counters. Raw IP addresses are not stored by GradWindow. Community suggestions are public after submission; do not include personal, sensitive, or confidential information.
为限制自动化滥用，Worker 可能从请求 IP 地址生成另一份带密钥摘要，并仅保留短期的频率 限制计数。GradWindow 不保存原始 IP 地址。社区建议提交后会公开显示，请不要填写个人、 敏感或保密信息。
Accounts and school comments / 账号与学校评论
GradWindow accounts use email login codes instead of passwords. The Worker stores an encrypted email address, a keyed lookup hash, session hashes, optional profile fields such as display name, country/region, and target intake, plus synced favourite item keys.
GradWindow 账号使用邮箱验证码登录，不保存密码。Worker 会保存加密邮箱、带密钥的 查询摘要、会话摘要、可选资料字段（例如显示名称、国家/地区、目标入学季）以及同步收藏项。
School comments are public. Posting a comment requires signing in, and the public comment shows your display name rather than your email address. If you choose anonymous display, the public comment uses the name "good people" and the default avatar, but GradWindow still keeps the account association for moderation and abuse prevention. Do not post private contact details, confidential admissions information, or sensitive personal data.
学校评论是公开内容。发表评论需要登录，公开显示的是你的显示名称而不是邮箱地址。 如果选择匿名展示，公开评论会显示为 “good people” 和默认头像，但 GradWindow 仍会保留账号关联用于审核和防滥用。请不要发布私人联系方式、保密申请信息或敏感个人数据。
Retention and deletion / 保留与删除
Unconfirmed subscriptions expire automatically. Unsubscribing disables future alerts immediately and removes the encrypted email value. A non-reversible suppression record may be retained for up to 30 days, then deleted. Login codes expire automatically, and account sessions expire after 30 days. Public comments may remain visible unless hidden or deleted by the operator. If you need account deletion, use the contact page and do not include private details in a public issue.
未确认的订阅会自动过期。退订后将立即停止提醒并删除加密邮箱值；不可逆的抑制记录 最多保留 30 天后删除。登录验证码会自动过期，账号会话 30 天后过期。公开评论可能 持续显示，除非由运营者隐藏或删除。如需删除账号，请使用联系页面，不要在公开 issue 中包含私人信息。
What is not collected / 不收集的内容
GradWindow does not intentionally store raw IP addresses or browsing history. If you sign in, synced favourites and comments are stored as account data so the account features can work. Cloudflare may process network metadata under its own terms to provide security and delivery.
GradWindow 不会主动保存原始 IP 地址或浏览历史。如果你登录，同步收藏和评论会作为账号 数据保存，以便账号功能正常运行。Cloudflare 可能依据其自身条款处理保障安全和传输所需的网络元数据。
Important / 重要说明
Alerts are informational. University websites remain authoritative and delivery is not guaranteed. This policy should be reviewed before a production launch and updated with the operator's private contact address and applicable legal jurisdiction.
邮件提醒仅供参考，大学官网始终是权威来源，且邮件送达不作保证。正式开放订阅前， 应补充运营者的非公开联系邮箱及适用法律管辖信息。