hueflo · 虚实之间
隐私政策
hueflo（“本服务”，网址 hueflo.com）是一款在线照片局部风格化编辑工具，由 Ling Qin（“我们”）运营。本政策说明我们收集哪些信息、如何使用、与谁共享以及你拥有的权利。
1. 我们收集的信息
- Google 账号信息：你使用 Google 登录时，我们通过 Supabase Auth 获得你的 Google 账号邮箱、姓名和头像（OpenID、email、profile 基本范围），并生成一个账号 ID。我们不申请访问你的 Gmail、云端硬盘、通讯录或其他 Google 数据。
- 你上传与生成的内容：原图、风格参考图、蒙版、编辑说明与设置，以及生成结果和模型给出的观察、复核文字。
- 点数与付款记录：点数余额与变动记录、充值订单；Stars 付款的 Telegram 用户 ID、Stars 金额和 Telegram 付款编号；银行卡付款的 Creem 订单编号、金额、币种和付款状态。银行卡付款在 Creem 的付款页完成，Creem 会收集你的邮箱、姓名、账单国家和卡片信息；我们只收到上述订单信息，不接触银行卡或其他支付凭证。为方便填写，我们会把你的登录邮箱预填到 Creem 付款页。
- 访问统计：浏览器中保存一个随机访客 ID；服务器只保存它与密钥和日期一起哈希后的值，用于计算每日独立访客数。为防滥用，IP 地址仅以哈希形式用于短时频率限制，不保存原始 IP。我们还使用 Cloudflare Web Analytics 统计页面访问，它不使用 Cookie 追踪个人。
- 浏览器本地存储：界面语言、上述随机访客 ID 和登录会话保存在你的浏览器中。
2. 我们如何使用信息
- 登录、识别你的账号，并只向你本人展示你的图片与历史；
- 执行你发起的看图推荐、图片编辑、复核与修正；
- 扣除和退还点数、处理充值与付款支持；
- 防止滥用、控制成本、排查故障，以及统计整体访问量。
我们不出售你的个人信息，不用于广告，也不使用你的照片训练我们自己的模型。
3. Google 用户数据
通过 Google 登录获得的信息仅用于登录与账号识别，不会转让给第三方，但为提供本服务所必需的服务商（见第 4 条）、法律要求或经你同意的情况除外。本服务对 Google API 所获信息的使用和转移遵守 Google API 服务用户数据政策，包括其中的“有限使用”要求。
4. 服务提供商
- Cloudflare：网站托管、API、数据库（D1）、私有图片存储（R2）、任务队列与访问统计；
- Umami：不使用 Cookie 的网页访问统计，记录访问的页面、来源、浏览器与设备类型等汇总信息，以及使用步骤的事件（如开始登录、选择照片、提交生成、打开充值，附带所选范围、风格或套餐），不接收照片或账号信息；
- Supabase：Google 登录与会话管理；
- OpenRouter：你提交推荐、编辑或修正时，相关图片与说明经 OpenRouter 发送给模型提供方（目前为字节跳动 Seed 系列模型），用于看图、生成和复核。数据按 OpenRouter 及模型提供方各自的政策处理；
- Telegram：Stars 充值与付款支持；
- Creem：银行卡付款的经销商（Merchant of Record），负责收款、税费、退款与拒付处理。
这些服务商可能在你所在国家或地区以外处理数据。
5. 保存与删除
图片保存在不公开的私有存储中，只能由登录的本人通过本服务访问。账号与图片会保存至你要求删除为止。你可以随时在「我的作品」中删除单个作品，成片会立即从存储中删除，原图在不再被其他作品使用时一并删除。也可以发送邮件至 support@hueflo.com 要求导出或删除账号与图片，我们将在 30 天内处理。为满足财务与对账要求，点数账本与付款记录在删除账号后仍会保留必要的最少信息。
6. 安全
数据传输全程使用 HTTPS；图片不设公开链接；访问私有图片需验证登录身份与归属。任何系统都无法保证绝对安全，如发生影响你的安全事件，我们会依法通知。
7. 你的权利
依适用法律，你可以要求访问、更正、导出或删除你的个人信息，或撤回同意。你也可以随时在 Google 账号权限页面撤销本服务的访问权限。
8. 儿童
本服务不面向未满 13 周岁（或你所在地区规定的更高年龄）的儿童。如发现误收儿童信息，我们会删除。
9. 政策变更与联系
政策更新会在本页公布并更新生效日期；重大变更会在网站内提示。问题与请求请联系 support@hueflo.com。如中英文版本不一致，以中文版本为准。
Privacy Policy
hueflo (the “Service”, at hueflo.com) is an online studio for restyling parts of a photo, operated by Ling Qin (“we”). This policy explains what we collect, how we use and share it, and your choices.
1. Information we collect
- Google account information. When you sign in with Google, we receive your email address, name and profile picture through Supabase Auth (basic OpenID, email and profile scopes) and create an account ID. We do not request access to Gmail, Drive, Contacts or any other Google data.
- Content you upload and create. Source photos, style references, masks, editing instructions and settings, generated results, and the model’s observation and review notes.
- Credits and payments. Credit balance and history, top-up orders, your Telegram user ID, the Stars amount and the Telegram payment charge ID for Stars payments; and the Creem order ID, amount, currency and status for card payments. Card payments happen on Creem’s checkout page, where Creem collects your email, name, billing country and card details; we receive only the order information above and never receive card or other payment credentials. We prefill your sign-in email on the Creem checkout for convenience.
- Usage statistics. Your browser keeps a random visitor ID; the server stores only a salted, date-scoped hash of it to count daily unique visitors. IP addresses are used only as hashes for short-lived rate limiting; raw IPs are not stored. We also use Cloudflare Web Analytics, which does not use cookies to track individuals.
- Browser storage. Your interface language, the random visitor ID and your sign-in session are stored in your browser.
2. How we use information
- To sign you in, identify your account and show your images and history only to you;
- To run the recommendations, edits, reviews and repairs you request;
- To charge and refund credits and to process top-ups and payment support;
- To prevent abuse, control costs, fix problems and measure overall traffic.
We do not sell personal information, do not use it for advertising and do not train our own models on your photos.
3. Google user data
Information received through Google Sign-In is used only to sign you in and identify your account. It is not transferred to others except to the service providers needed to run the Service (section 4), when required by law, or with your consent. hueflo’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
4. Service providers
- Cloudflare — hosting, API, database (D1), private image storage (R2), job queues and analytics;
- Umami — cookie-free page analytics recording visited pages, referrers, browser and device type in aggregate, plus usage-step events (such as starting sign-in, choosing a photo, submitting an edit or opening top-up, with the chosen scope, style or pack); it receives no photos or account data;
- Supabase — Google sign-in and sessions;
- OpenRouter — when you request a recommendation, edit or repair, the relevant images and instructions are sent through OpenRouter to the model provider (currently ByteDance Seed models) for analysis, generation and review. Data is handled under the policies of OpenRouter and the model provider;
- Telegram — Stars top-ups and payment support;
- Creem — reseller (Merchant of Record) for card payments, handling payment, tax, refunds and disputes.
These providers may process data outside your country or region.
5. Retention and deletion
Images are kept in private, non-public storage and can be accessed only by you, signed in, through the Service. Your account and images are kept until you ask us to delete them. You can delete any single creation in “My creations” at any time: its image is removed from storage immediately, and its original photo too once no other creation uses it. You can also email support@hueflo.com to request an export or deletion; we respond within 30 days. For accounting, we keep the minimum necessary credit ledger and payment records after an account is deleted.
6. Security
All traffic uses HTTPS, images have no public links, and every private image request checks your sign-in and ownership. No system is perfectly secure; we will notify you of incidents affecting you as required by law.
7. Your rights
Subject to applicable law, you may request access, correction, export or deletion of your personal information, or withdraw consent. You can revoke the Service’s access at any time from your Google Account permissions page.
8. Children
The Service is not directed to children under 13 (or a higher minimum age where you live). If we learn we collected a child’s information, we will delete it.
9. Changes and contact
We will post updates on this page and change the effective date; significant changes will be announced on the site. Questions and requests: support@hueflo.com. If the Chinese and English versions differ, the Chinese version prevails.