隐私政策Privacy policy

Glossa（以下简称「我们」）由个人开发者运营。本政策说明购买网站和浏览器插件会处理哪些信息。

购买时

• 订单信息：订单号、付款邮箱、金额、付款状态和时间。付款由我们的经销商 Waffo（Waffo.com Limited，这笔订单的记录商户）处理，我们看不到你的银行卡号或支付账户；Waffo 如何处理你的付款信息见它的隐私政策。激活码会发到你的付款邮箱。
• 激活码：我们只保存激活码经过单向加密后的值，不保存明文。

激活和使用时

• 登录邮箱：激活时你会用邮箱收验证码登录，或者用 Google 登录。我们会记录你登录用的邮箱地址（用 Google 登录时还包括这个账号的唯一 ID），用来确认购买关系、在你换设备时恢复使用。验证码邮件通过邮件发送服务发出，你的邮箱地址会交给它用于投递。我们不会获取你的邮箱或 Google 密码，也不会读取你邮箱或 Google 账号里的任何内容。
• 授权：只有在你登录、激活或在新设备上恢复授权时，插件才会联系我们的服务器，发送的只有登录邮箱、验证码或激活码，不发送任何聊天内容。插件不会定期联系服务器，也不会从服务器下载代码或配置。
• 聊天内容：只有当你主动发起旁注时，插件才读取你选中的段落、它所在的那条回答和你设置的少量上文，并在你当前所在的同一个网站上，用你已登录的账号提问。这些内容不会发到我们的服务器。
• 旁注对话：ChatGPT、Claude、Gemini、元宝上的旁注使用网站自带的临时或无痕对话，不进入你的历史记录。DeepSeek、Kimi、豆包没有临时对话，插件会在回答结束后立即删除这条旁注对话；如果中途关闭页面，下次打开该网站时再删除。插件只删除它自己创建的旁注对话，不会动你的其他对话。
• 模型选择：旁注可以使用与你当前对话不同的模型。插件会在提问前临时切换网站的模型选项，问完后恢复你原来的设置。
• DeepSeek 和 Gemini 嵌入：为了在页面内打开旁注用的隐藏窗口，插件只对「DeepSeek 页面嵌入 DeepSeek 自己」和「Gemini 页面嵌入 Gemini 自己」的请求，把禁止嵌入的响应头改为只允许同站嵌入。其他网站和其他请求不受影响。
• 旁注记录保存在你本机的浏览器里，卸载插件即全部删除。

我们不做的事

• 不使用统计、分析或广告追踪代码。
• 不出售、不出租、不向第三方分享你的信息，法律法规要求的情况除外。

保存期限与删除

订单和激活记录在你使用期间保存，用于售后和恢复授权。如需删除你的账号记录，请发邮件到 support@glossaai.app；删除后对应的授权将无法恢复。

Glossa (“we”) is run by an individual developer. This policy explains what the purchase site and the browser extension handle.

When you buy

• Order details: order number, checkout email, amount, payment status and time. Payment is processed by our reseller Waffo (Waffo.com Limited, the merchant of record for your order); we never see your card number or payment account. See Waffo’s privacy policy for how it handles payment data. Your activation code is sent to your checkout email.
• Activation codes: we store only a one-way hash of each code, never the code itself.

When you activate and use Glossa

• Sign-in email: when you activate, you sign in with a code sent to your email, or with Google. We record the email address you sign in with (and, with Google, that account’s unique ID) to tie the purchase to you and restore access on a new device. Sign-in codes are delivered through an email service, which receives your address for that purpose. We never receive your email or Google password, and we never read anything in your mailbox or Google account.
• Licensing: the extension contacts our server only when you sign in, activate, or restore your licence on a new device. It sends only your sign-in email, the sign-in code or the activation code, never chat content. It does not check in periodically and never downloads code or settings from our server.
• Chat content: only when you start a side note does the extension read the passage you selected, the answer it belongs to and the small amount of earlier context you configured, and ask about it on the same site you are on, with the account you are signed in to. None of this is sent to our servers.
• Side chats: on ChatGPT, Claude, Gemini and Yuanbao, side questions use the site’s own temporary or incognito chat, which stays out of your history. DeepSeek, Kimi and Doubao have no temporary chat, so the extension deletes the side chat as soon as its answer is in; if you close the page first, it is deleted the next time you open that site. The extension only ever deletes side chats it created itself, never your other chats.
• Model choice: a side question can use a different model than your conversation. The extension switches the site’s model option just before asking and restores your setting right after.
• DeepSeek and Gemini framing: to open the hidden side-question frame inside the site’s own page, the extension changes the anti-framing response headers to allow same-site framing, only for DeepSeek frames opened by DeepSeek and Gemini frames opened by Gemini. No other site or request is affected.
• Side-note history is stored in your browser on your computer; uninstalling the extension deletes it.

What we do not do

• No analytics, statistics or advertising trackers.
• We do not sell, rent or share your information, except where the law requires it.

Retention and deletion

Order and activation records are kept while you use Glossa, for support and to restore access. To have your records deleted, email support@glossaai.app; after deletion the licence cannot be restored.