隐私政策Privacy Policy

本政策说明 Morromind（morromind.com）如何处理信息。它写的是网站今天实际的做法，数据处理方式改变之前会先更新。This policy describes how Morromind (morromind.com) handles information. It reflects how the site actually works today and will be updated before any change in data handling takes effect.

你在工具里使用的文字和文件Text and files you use with our tools

目前 55 个在线工具里的 51 个完全在你的网页浏览器里、用你设备上的 JavaScript 运行。你输入的文字和选择的文件在本地处理，不会上传到我们的服务器，也不会发给任何第三方。对大多数工具来说，关掉或刷新页面之后，这些输入就没有了。51 of the 55 live online tools run entirely in your web browser using JavaScript on your device. The text you type and the files you choose are processed locally and are not uploaded to our servers or sent to any third party. For most tools, that input is gone once you close or reload the page.

分享链接工具（链接识别、微信视频号链接助手、社交图片帖子助手）在你的设备上检查链接。目前没有平台接入数据来源，所以按下检查不会把任何东西发出去。The share-link tools (Link Detector, WeChat Channels Link Helper, Social Image Post Helper) check links on your device. No platform is connected to a data source yet, so pressing Check Link sends nothing anywhere.

唯一的例外是「Word 转 PDF」。这个工具需要排版引擎，所以会通过 HTTPS 把你选择的 .docx / .doc 文件上传到我们自己的服务器，用 LibreOffice 转换。文件只在内存和一个私有临时文件夹里停留，转换结束立刻删除（失败时也会删除）；这个接口不记录文件名和文件内容，不分析、不发给任何第三方；和其他请求一样，服务器的访问日志可能会记下这次请求（包括 IP 地址）。工具页面在你选文件之前和点击转换之前都会写明这一点。The one exception is “Word to PDF”. It needs a layout engine, so the .docx / .doc file you choose is uploaded over HTTPS to our own server and converted with LibreOffice. The file stays only in memory and a private temporary folder while converting and is deleted immediately afterwards (also if the conversion fails). This endpoint does not record file names or contents, and nothing is analysed or sent to a third party; like any other request, the server’s access log may record the request (including your IP address). The tool page says this both before you choose a file and before you press convert.

如果以后增加需要服务器或第三方处理的工具，页面会在你提供任何内容之前写清楚，包括数据去哪里、保留多久。本政策会同时更新。If we add a tool that needs server-side or third-party processing, its page will state this clearly before you provide any input, together with where the data goes and how long it is kept. This policy will be updated at the same time.

保存在你浏览器里的信息Information stored in your browser

为了显示收藏和最近使用的工具，网站会在浏览器的本地存储里保存一份很短的工具标识列表（例如 “word-counter”）。这份列表不包括你输入的文字或文件。还有两个工具会在这台设备上留一份草稿，方便你回来继续：压箔贺卡把卡片文字存在本地存储，照片墙把照片和说明存在这台浏览器的 IndexedDB。这些草稿留在你的设备上，不会上传。这两个工具上的分享链接标着「即将开通」，不会发送任何东西。另外，为了统计「火花」，浏览器里还会存一个随机生成的匿名编号（mm-anon）和当天已计数的工具标记，不包含任何个人信息。清除本站的网站数据就可以删掉这些内容。网站平时不设置 Cookie；只有你主动登录时，才会设置登录所需的 Cookie（见下方「登录」）。To show your favorite and recently used tools, the site saves a short list of tool identifiers (for example “word-counter”) in your browser’s local storage. That list does not include the text or files you entered. Two tools also keep a draft on this device so you can come back to it: Greeting Card stores the card text in local storage, and Photo Wall stores the photos and captions in this browser’s IndexedDB. Those drafts stay on your device and are not uploaded. The share-link control on those tools is marked “即将开通” and does not send anything. For counting “sparks”, the browser also keeps a randomly generated anonymous ID (mm-anon) and a note of which tools were already counted today; neither contains personal information. You can remove all of this by clearing the site data for this site. The site sets no cookies unless you choose to sign in; signing in sets only the cookies it needs (see “Sign-in” below).

分析、广告和追踪Analytics, advertising and tracking

网站不使用第三方分析服务、广告网络、社交媒体插件或其他追踪脚本。数据只存在我们自己的服务器上，不卖给任何人。The site does not use third-party analytics services, advertising networks, social media plugins or other tracking scripts. Data stays on our own server and is never sold to anyone.

火花（工具使用计数）Sparks (tool usage count)

首页「热门」按「火花」排序：同一个人每天第一次真正用某个工具，这个工具记一个火花。只有页面可见几秒并且你确实操作了工具，浏览器才会向我们自己的服务器发送一次计数请求，内容只有工具名称、上面的随机匿名编号，以及证明不是脚本的简单校验。服务器把匿名编号和「IP 地址 + 浏览器标识」分别加上每天更换的随机盐做成不可逆哈希，只用来判断同一天是否已经算过；计数记录里不记你在工具里的内容。和其他请求一样，服务器的访问日志可能会记下 IP 地址（见下方「服务器日志」）。每天的盐两天后删除，之后旧记录无法再对应到任何人；计数记录 8 天后删除。公开的只有每个工具最近 7 天的总数。没有登录，这种去重只能尽力而为，可能有少量多算或漏算。Home 「热门」 is sorted by “sparks”: the first real use of a tool by one person on a day adds one spark. Only after the page has been visible for a few seconds and you actually used the tool does the browser send one count request to our own server, containing just the tool name, the random anonymous ID above and a simple anti-script check. The server turns the anonymous ID and “IP address + browser string” into one-way hashes with a random salt that changes every day, used only to tell whether today was already counted. The count records never include what you do in the tool. Like any other request, the server’s access log may record your IP address (see “Server logs” below). Each day's salt is deleted after two days, after which old records cannot be linked to anyone; count records are deleted after 8 days. Only each tool's 7-day total is public. Without sign-in this de-duplication is best effort and may be slightly off.

登录（即将开放）Sign-in (coming soon)

登录是可选的，所有工具不登录也能用。开放后可以用微信、支付宝或 Google 账号登录，不需要手机号和验证码。我们只保存这些平台给出的用户标识（例如微信 openid/unionid、支付宝用户 ID、Google 账号编号），用来认出同一个账号；不保存你的密码，平台发给我们的访问令牌用完即弃，不会留存。登录后浏览器会保存一个仅用于保持登录的 Cookie（HttpOnly、Secure），服务器只存它的不可逆哈希，30 天后失效，退出登录立即删除。Signing in is optional; every tool works without it. Once open, you can sign in with WeChat, Alipay or Google, with no phone number or code. We keep only the user ID each platform gives us (such as a WeChat openid/unionid, an Alipay user ID or a Google account ID) to recognise the same account. We never see your password, and access tokens from these platforms are used once and discarded. Signing in sets one cookie used only to keep you signed in (HttpOnly, Secure); the server stores only a one-way hash of it, it expires after 30 days, and signing out deletes it at once.

服务器日志Server logs

当你的浏览器请求一个页面时，我们自己的服务器会保留访问日志，记录常规技术信息，例如 IP 地址、浏览器类型、请求的页面和请求时间。这些日志只存在我们自己的服务器上，用于安全和维持网站运行，不卖给任何人。它们不包括你在工具里使用的文字或文件，因为那些内容不会离开你的设备。When your browser requests a page, our own server keeps access logs with standard technical information such as your IP address, browser type, the page requested and the time of the request. These logs stay on our own server, are used for security and to keep the site running, and are never sold to anyone. They do not contain the text or files you use with the tools, because those never leave your device.

儿童Children

网站不会故意收集任何人的个人信息，包括儿童。The site does not knowingly collect personal information from anyone, including children.

变更Changes

数据处理方式改变时，我们会更新这一页，并修改顶部的日期。We will update this page whenever the way we handle data changes, and revise the date at the top.

支付（草案）Payments (draft)

【草案，待确认】支付还没有开放。开放后，为了完成和核对付款，我们会保存每笔订单的订单号、商品、金额、币种、状态、支付方式、支付机构返回的交易号和时间，并和你的账号关联。银行卡号、银行账户和支付密码由微信支付、支付宝或 Stripe 处理，本站不接触、不保存。在微信里用微信支付时，为了发起支付，会向微信读取你在本站公众号下的 openid，只存放在你浏览器里一个带防篡改签名、24 小时后失效的 Cookie 中。Stripe 由境外公司运营，选择它付款时，付款信息会由 Stripe 在境外处理。订单记录按财务和税务法规要求的期限保存。[Draft, pending confirmation] Payments are not open yet. Once they are, to complete and reconcile a payment we keep each order’s number, item, amount, currency, status, payment method, the provider’s transaction ID and times, linked to your account. Card numbers, bank accounts and payment passwords are handled by WeChat Pay, Alipay or Stripe; this site never sees or stores them. When you pay with WeChat Pay inside WeChat, we ask WeChat for your openid under this site’s official account so the payment can start; it is kept only in a tamper-proof signed cookie in your browser that expires after 24 hours. Stripe is operated outside mainland China; if you pay with it, your payment details are processed by Stripe there. Order records are kept for as long as accounting and tax rules require.

联系Contact

隐私方面的问题，请看联系页。For privacy questions, see the contact page.