Privacy Policy / 隐私政策

1. Account and sign-in information / 账户与登录信息

When you request an email code, we process the email address, delivery status, request timing, and short-lived verification state needed to send and validate the code. After verification, JIAN creates or restores your account and establishes a JIAN Session in Secure, HttpOnly, SameSite=Lax browser cookies. The account site does not place session credentials in page URLs, visible page content, localStorage, or sessionStorage.

当您申请邮箱验证码时，我们会处理邮箱地址、投递状态、请求时间及验证所需的短期状态。验证成功后，JIAN 会创建或恢复账户，并通过 Secure、HttpOnly、SameSite=Lax 浏览器 Cookie 建立 JIAN Session。账户网站不会把会话凭据写入网页地址、可见页面内容、localStorage 或 sessionStorage。

A language preference may be stored locally in your browser. It is not an authentication credential.

浏览器可能在本地保存语言偏好；该偏好不是登录凭据。

2. Device activation / 设备激活

Quest activation uses a short-lived code to match a request shown in the headset with the signed-in account that approves it. We process the code, request status, approval time, account association, and security records needed to prevent reuse or account mismatch. The browser does not receive the Quest device secret or the device’s session credential.

Quest 激活使用短期短码，把头显中显示的请求与网页上确认该请求的已登录账户进行匹配。我们会处理短码、请求状态、确认时间、账户关联及防止重复使用或账号错配所需的安全记录。浏览器不会获得 Quest 的设备密钥或设备会话凭据。

If you choose to connect your JIAN Account to passplayer, JIAN issues a short-lived, one-time code that you enter in the passplayer app. The app then uses a separate JIAN integration session directly with JIAN services. JIAN access and refresh credentials are handled by the passplayer app and JIAN services, not by the passplayer backend or this account webpage. This connection does not itself add passplayer activity to the JIAN product-usage analytics described below.

如果您主动将 JIAN 账户连接到 passplayer，JIAN 会签发短期、一次性的连接码，供您在 passplayer 应用中输入。随后，该应用直接与 JIAN 服务使用独立的 JIAN 集成会话。JIAN 访问与刷新凭据由 passplayer 应用和 JIAN 服务处理，不经过 passplayer 后端或此账户网页。此连接本身不会把 passplayer 活动加入下文所述的 JIAN 产品使用统计。

3. Account data and activity / 账户资料与活动

Depending on the features you use, we may process your display name, handle, linked sign-in methods, preferences, saved content, people you follow or like, experiences you like, and viewing or playback history. JIAN uses this information to synchronize your account across the website and Quest, deliver requested content, and protect the service.

根据您使用的功能，我们可能处理显示名称、用户名、已关联登录方式、偏好、收藏内容、关注或喜欢的人物、喜欢的体验以及观看或播放记录。JIAN 使用这些信息在网站与 Quest 之间同步账户、交付所请求的内容并保护服务安全。

Comments are paused in the formal version 1 release. The production Account Center does not display “My Comments” and does not request the comments API. JIAN is not representing comment posting as an active production feature. Any pre-existing test or earlier comment record is handled only under the retention, security, and deletion rules below.

评论功能在正式 v1 中暂停。正式 Account Center 不显示“我的评论”，也不请求评论接口；JIAN 不会把评论发布描述为当前已上线功能。此前测试或早期阶段已存在的评论记录，仅按下述保留、安全与删除规则处理。

4. Product usage analytics / 产品使用统计

In supported versions of JIAN, we record when you open content, when video playback actually starts, effective viewing time while video is presented, and activity while the app is in the foreground. Pauses, seeking, buffering, and background time are not counted as effective viewing time. These events help us understand content use and improve discovery, playback, and service reliability.

在支持此功能的 JIAN 版本中，我们记录您打开内容、视频实际起播、画面有效呈现期间的观看时间，以及应用在前台时的活跃情况。暂停、拖动进度、缓冲和后台运行时间不计入有效观看时间。这些事件用于了解内容使用情况，改进内容发现、播放体验和服务可靠性。

Analytics events include the relevant content, app and session context, timestamps, and a random app-generated installation identifier. If you are signed in, the server can associate those events with your JIAN Account through your validated session. For guests, the server stores a hashed key derived from the random installation identifier. This is pseudonymous, not completely anonymous; an installation count is not necessarily a count of people.

统计事件包含相关内容、应用和会话信息、时间，以及应用随机生成的安装标识。登录后，服务端可通过已验证的会话将事件关联至您的 JIAN 账户。游客事件在服务端以该随机安装标识生成的哈希键记录；这是使用假名化标识，并非完全匿名，安装数量也不必然等于人数。

The analytics event body does not contain your email address; email is still processed for sign-in as described in section 1. These analytics do not collect hardware or advertising IDs, precise location, or data for ad tracking.

统计事件正文不包含您的邮箱地址；邮箱登录仍按第 1 节所述处理邮箱。此项统计不采集硬件或广告标识、精确位置，也不用于广告追踪。

5. Technical, support, and Quest platform data / 技术、支持与 Quest 平台数据

We may process IP address, device and app version, request time, network and security events, and limited error information to operate, secure, and troubleshoot JIAN. If you contact support, we process the information you choose to send. Meta may provide a verified Meta Quest identifier and public profile information when you use a supported Quest identity flow.

为运行、保护和排查 JIAN，我们可能处理 IP 地址、设备与应用版本、请求时间、网络与安全事件及有限的错误信息。您联系支持时，我们会处理您主动提交的信息。使用受支持的 Quest 身份流程时，Meta 可能向 JIAN 提供已验证的 Meta Quest 标识与公开资料信息。

6. Hand tracking, spatial input, and passthrough / 手势、空间输入与透视

Raw hand-tracking input, raw spatial data, and raw passthrough camera imagery are processed in real time on the Quest device for interaction and presentation. JIAN does not upload those raw inputs to our servers.

原始手势追踪输入、原始空间数据与原始透视相机画面在 Quest 设备上实时处理，用于交互与呈现；JIAN 不会将这些原始输入上传到我们的服务器。

7. Service providers / 服务商

• Meta provides the Quest platform, app distribution, and applicable platform identity services.
• Resend delivers JIAN email verification messages and processes recipient and delivery metadata needed for that delivery.
• Render hosts the JIAN website, application services, APIs, and databases used by the service.
• Cloudflare and Cloudflare R2 provide network, security, media delivery, and object-storage services.

Meta 提供 Quest 平台、应用分发与适用的平台身份服务；Resend 负责投递 JIAN 邮箱验证码，并处理投递所需的收件地址与投递元数据；Render 托管 JIAN 网站、应用服务、API 与数据库；Cloudflare 与 Cloudflare R2 提供网络、安全、媒体分发与对象存储服务。

These providers process information for the functions described above under their applicable terms. We do not sell personal information or use it for targeted advertising.

这些服务商依据其适用条款，为上述功能处理信息。我们不会出售个人信息，也不会将其用于定向广告。

8. Security and storage / 安全与存储

We use access controls, encrypted HTTPS transport, short-lived verification and activation state, server-side session validation, and restricted storage intended to protect information. No system is completely secure, so please protect access to your email and Quest and sign out on shared browsers. Never send passwords, verification codes, session cookies, or Quest device secrets to support.

我们使用访问控制、HTTPS 加密传输、短期验证与激活状态、服务端会话校验及受限存储来保护信息。任何系统都无法保证绝对安全，请妥善保护邮箱与 Quest，并在共用浏览器上退出登录。请勿向支持人员发送密码、验证码、会话 Cookie 或 Quest 设备密钥。

9. Retention, account closure, and deletion / 保留、账户关闭与删除

Verification codes and activation requests expire after a short period. Sessions are retained only for their configured lifetime or until revoked. Account profile and synchronized activity remain while the account is active and as reasonably necessary to provide, secure, and troubleshoot JIAN. Security, fraud-prevention, backup, legal, and dispute records may be retained for a limited period when necessary.

验证码与设备激活请求会在短期内失效。会话仅在配置的有效期内或撤销前保留。账户资料与同步活动在账户有效期间，以及为提供、保护和排查 JIAN 所合理需要的期限内保留。安全、防欺诈、备份、法律与争议处理记录可能在必要时限内继续保留。

Accepted raw product-usage events have a 90-day retention period measured from server receipt. Cleanup runs when a later event batch is successfully accepted, so physical deletion may be delayed during periods of low traffic. Derived viewing and app-session state, daily activity records, and content-level daily totals have a 25-month retention period, with cleanup also triggered by a later accepted batch. Signed-in viewing and activity state can remain linked to an Account during that period; guest activity remains linked to a pseudonymous installation key. Content-level daily totals contain no Account, installation, event, or viewing-session identifier.

已接收的原始产品使用事件，自服务端接收时起保留 90 天。清理在后续事件批次成功接收时触发，因此低流量期间的实际物理删除可能延后。衍生的观看与应用会话状态、每日活跃记录和按内容汇总的每日统计保留 25 个月，清理同样由后续成功接收的批次触发。在此期间，已登录用户的观看和活跃状态仍可能与账户关联；游客活跃记录仍与假名化安装键关联。按内容汇总的每日统计不含账户、安装、事件或观看会话标识。

You may request account closure or deletion through JIAN Support. After reasonable verification, we will delete or de-identify personal information associated with the account within 30 days, unless limited retention is required for law, security, fraud prevention, or dispute resolution. Completing account deletion removes Account-linked analytics raw events, per-view daily records, viewing and app-session state, and Account-linked daily activity. Content-level daily totals without those identifiers may remain until their retention period ends.

您可以通过 JIAN 支持申请关闭或删除账户。完成合理核验后，我们会在30天内删除或去标识化与账户相关的个人信息；法律、安全、防欺诈或争议处理要求有限保留的情况除外。账户删除完成时，会清除与该账户关联的统计原始事件、逐次观看的每日记录、观看和应用会话状态，以及关联账户的每日活跃记录。不含上述标识的按内容每日汇总统计可保留至其保留期结束。

10. Age, choices, and contact / 年龄、选择与联系

JIAN is intended for users aged 13 or older, or the applicable minimum age in their region. Where applicable, you may request access, correction, deletion, restriction, or objection concerning your personal information.

JIAN 面向年满13周岁，或达到所在地区适用最低年龄的用户。在适用法律允许的范围内，您可以申请访问、更正、删除或限制个人信息处理，或提出异议。

For privacy questions or requests, email robert.ao.huang@gmail.com. We may update this policy as JIAN changes and will publish the revised date here.

如有隐私问题或权利请求，请发送邮件至 robert.ao.huang@gmail.com。JIAN 发生变化时，我们可能更新本政策，并在此发布新的更新日期。