隐私政策
本扩展不收集、不出售、也不共享你的个人信息。它只在你的浏览器里保存你自己的设置和收到的补货消息，并连接 host.xinai.ren 接收实时推送。
1. 关于本扩展
“VPS主机补货实时推送”（以下简称“本扩展”）用于接收 host.xinai.ren 发布的 VPS 主机补货通知，按你设置的商品标识和关键词筛选后，在网页右下角显示消息面板。本扩展没有账号体系，无需注册或登录，也不包含广告、统计分析或第三方跟踪代码。本政策同时适用于 Chrome 版和 Firefox 版。
2. 我们处理的数据
本扩展只处理下表中的数据，全部保存在你自己的浏览器里，开发者无法访问。
| 数据 | 内容 | 保存位置 | 用途 |
|---|---|---|---|
| 你的设置 | 是否启用、商品标识、关键词、最多显示消息数、外观模式 | 浏览器扩展同步存储（storage.sync） | 按你的设置筛选并显示消息 |
| 收到的补货消息 | 商家、商品、价格、优惠码、链接等公开的补货信息，以及是否未读 | 浏览器本地存储（storage.local） | 在网页面板中展示；关闭浏览器后仍保留 |
| 连接记录 | 最近几条连接事件（已连接、断开原因、后台启动）的时间与文字 | 浏览器本地存储（storage.local） | 在设置窗口显示连接状态，方便排查断线 |
设置窗口还会在自己的本地存储里记住两个界面偏好（外观模式、状态框是否收起），仅用于下次打开时保持原样。如果你开启了浏览器自带的同步功能，你的设置可能会由浏览器厂商按其自身的隐私政策同步到你的其他设备，开发者同样无法访问。
本扩展不会收集或读取：浏览历史、你访问的网址、网页内容、表单输入、密码、Cookie、剪贴板内容、位置或支付等信息。
3. 网络通信
本扩展只与一个服务器通信：host.xinai.ren，并且只用来接收消息，不上传你的设置或浏览数据。
- 接收推送：通过加密的 WebSocket（
wss://host.xinai.ren）订阅公开频道，接收服务器广播的补货消息。发往服务器的内容只有订阅请求和保持连接用的心跳，不含任何个人信息。 - 连接诊断：连接失败时，本扩展会向
https://host.xinai.ren/发起一次不带任何数据的检查请求，用来判断网站是否可访问，并把结果显示在设置窗口里。 - 筛选在本地进行：你的商品标识和关键词只用来在浏览器里过滤已收到的消息，不会发送给服务器。
与访问任何网站一样，建立连接时服务器会收到连接所必然带有的标准网络信息（例如 IP 地址、浏览器类型），并可能按常规做法写入访问日志，仅用于维持服务和保障安全，不用于识别你的身份，也不与任何账号关联。
本扩展不会下载或执行远程代码。收到的消息只以纯文字显示，消息里的链接只有在是 http 或 https 地址时才可点击。
4. 权限说明
本扩展只申请实现功能所必需的权限：
| 权限 | 用途 |
|---|---|
storage | 保存你的设置、收到的消息和连接记录，并在各个标签页之间同步消息列表和未读状态 |
alarms | 每 30 秒唤醒一次后台，检查连接是否正常，断开时自动重连，避免漏收消息 |
| host.xinai.ren（https 与 wss） | 连接该网站接收补货推送，并在连接失败时检查网站是否可访问 |
| 在所有网站上运行内容脚本 | 让右下角的“补货消息”面板能在你正在浏览的任意网页上显示 |
内容脚本只负责在页面右下角绘制消息面板，面板放在独立的容器里，不会读取、修改或上传该网页的任何内容。当你点击消息里的“优惠码”按钮时，本扩展会把该优惠码写入剪贴板，不会读取剪贴板里已有的内容。在设置中取消勾选“启用补货推送”后，本扩展会立即断开连接、停止重连，并隐藏网页上的消息面板。
5. 数据共享
我们不会出售、出租或向任何第三方披露你的数据，也不会把数据用于与本扩展功能无关的目的，更不会用于广告、画像或信用评估。
6. 数据保留与删除
- 点击面板里的“清空”，会立即删除所有标签页中已保存的消息。
- 卸载本扩展，会删除它保存在你浏览器里的全部本地数据。
- 已同步的设置，可通过浏览器的同步设置清除，或在卸载后由浏览器一并移除。
- 开发者不保存你的任何数据，因此没有需要另行删除的服务器端副本。
7. 儿童隐私
本扩展不面向儿童，也不会有意收集儿童的个人信息。
8. 政策变更
如果本扩展的数据处理方式发生变化，我们会更新本页面并修改页首的生效日期。继续使用本扩展，即表示你接受更新后的政策。
9. 联系我们
对本政策有任何疑问，请通过 https://host.xinai.ren/ 联系我们。
Privacy Policy
This extension does not collect, sell or share your personal information. It only keeps your own settings and the restock messages you receive in your browser, and connects to host.xinai.ren to receive real-time pushes.
1. About this extension
“VPS Restock Push” (the “Extension”) receives VPS restock notifications published by host.xinai.ren, filters them by the product IDs and keywords you set, and shows them in a small panel at the bottom-right of web pages. The Extension has no accounts, requires no sign-up or login, and contains no ads, analytics or third-party tracking code. This policy applies to both the Chrome and Firefox versions.
2. Data we handle
The Extension handles only the data listed below. All of it stays in your own browser and is not accessible to the developer.
| Data | Contents | Stored in | Purpose |
|---|---|---|---|
| Your settings | Enabled or not, product IDs, keywords, maximum number of messages, appearance mode | Browser extension sync storage (storage.sync) | Filter and display messages as you configured |
| Received restock messages | Public restock information such as merchant, product, price, promo codes and links, plus the unread state | Browser local storage (storage.local) | Shown in the on-page panel; kept after the browser is closed |
| Connection log | Time and text of the last few connection events (connected, disconnect reason, background start) | Browser local storage (storage.local) | Show connection status in the settings window and help troubleshoot disconnects |
The settings window also remembers two interface preferences (appearance mode and whether the status box is collapsed) in its own local storage, only to look the same the next time you open it. If you turn on your browser’s built-in sync, your settings may be synced to your other devices by the browser vendor under its own privacy policy; the developer cannot access them either.
The Extension does not collect or read: your name, email, accounts, browsing history, the URLs you visit, page content, form input, passwords, cookies, clipboard contents, location or payment information.
3. Network communication
The Extension communicates with a single server, host.xinai.ren, and only to receive messages. It does not upload your settings or browsing data.
- Receiving pushes: it subscribes to a public channel over an encrypted WebSocket (
wss://host.xinai.ren) and receives the restock messages the server broadcasts. The only things sent to the server are the subscription request and keep-alive heartbeats, which contain no personal information. - Connection diagnostics: when a connection fails, the Extension sends one data-free check request to
https://host.xinai.ren/to tell whether the site is reachable, and shows the result in the settings window. - Filtering happens locally: your product IDs and keywords are used only to filter received messages inside your browser and are never sent to the server.
As with visiting any website, when a connection is made the server receives the standard network information that every connection carries (such as your IP address and browser type), and may record it in routine access logs. This is used only to keep the service running and secure, not to identify you, and is not linked to any account.
The Extension does not download or run remote code. Received messages are displayed as plain text, and links in messages are clickable only when they are http or https addresses.
4. Permissions
The Extension requests only the permissions needed for its features:
| Permission | Purpose |
|---|---|
storage | Save your settings, received messages and connection log, and keep the message list and unread state in sync across tabs |
alarms | Wake the background every 30 seconds to check the connection and reconnect automatically after a drop, so restock messages are not missed |
| host.xinai.ren (https and wss) | Connect to the site to receive restock pushes, and check whether it is reachable when a connection fails |
| Content script on all websites | Let the bottom-right “restock messages” panel appear on whichever page you are viewing |
The content script only draws the message panel at the bottom-right of the page, inside its own isolated container. It does not read, modify or upload anything from the page. When you click a promo-code button in a message, the Extension writes that code to your clipboard; it never reads what is already on your clipboard. If you untick “Enable restock push” in settings, the Extension immediately disconnects, stops reconnecting and hides the on-page panel.
5. Data sharing
We do not sell, rent or disclose your data to any third party, and we do not use it for anything unrelated to the Extension’s features, including advertising, profiling or credit assessment.
6. Retention and deletion
- Clicking “Clear” in the panel immediately deletes the saved messages in all tabs.
- Uninstalling the Extension deletes all local data it stored in your browser.
- Synced settings can be cleared from your browser’s sync settings, or are removed by the browser after uninstalling.
- The developer stores none of your data, so there is no server-side copy to delete.
7. Children’s privacy
The Extension is not directed at children and does not knowingly collect personal information from them.
8. Changes to this policy
If the way the Extension handles data changes, we will update this page and the effective date at the top. Continuing to use the Extension means you accept the updated policy.
9. Contact
If you have any questions about this policy, please contact us through https://host.xinai.ren/.