1. 我们是谁 | Who we are
本政策适用于 www.drowsyhse.com（品牌 CSP Daily Learning / 昏昏睡睡HSE）。数据控制者为本站运营者（独立经营者）；海外订单的支付环节由 Paddle.com 作为记录商户处理（见第 5 节）。联系邮箱：xiaohai5240@outlook.com。
This policy applies to www.drowsyhse.com. The data controller is the Site operator (sole proprietor); payment processing for overseas orders is handled by Paddle.com as Merchant of Record (see section 5). Contact: xiaohai5240@outlook.com.
2. 我们收集什么 | What we collect
| 数据Data | 目的Purpose | 存储Storage |
|---|---|---|
| 用户名、邮箱/手机号、微信号（任选其一注册） / Username, email or phone, WeChat ID (any one for registration) | 创建与登录账号、找回密码 / Account creation and sign-in, password recovery | 云数据库（仅本人可读写） / Cloud database (only you can read and write) |
| 注册时 IP、IP 归属地、浏览器 User-Agent、来源页面 / IP, IP location, browser User-Agent and referrer page at signup | 安全风控（防刷码/防爆破）、区域定价、数据统计 / Security and anti-abuse, regional pricing, statistics | 云数据库 / Cloud database |
| 学习进度（每天勾选状态） / Study progress (daily check-off state) | 多设备同步进度、统计连续打卡 / Cross-device progress sync, streak statistics | 云数据库 + 浏览器本地存储 / Cloud database + browser local storage |
| 兑换码与权益记录 / Redeem code and entitlement records | 验证付费权益、退款时撤销 / Verify paid entitlements, revoke on refund | 云数据库（码表不对用户开放） / Cloud database (code table not open to users) |
| 分享卡照片（仅当你主动上传） / Share-card photos (only if you upload them) | 生成你的个人分享卡 / Generate your personal share card | 仅存本机浏览器，不上传服务器Stored only in your browser, never uploaded |
| 课程页勾选、导出卡偏好 / Lesson page check-offs and export-card preferences | 离线可用与个性化 / Offline availability and personalization | 浏览器本地存储（localStorage） / Browser local storage (localStorage) |
We collect account credentials (username, email/phone/WeChat), signup IP/geo/user-agent for security and regional pricing, study progress for cross-device sync, redemption records for entitlements, and share-card photos which stay in your browser only.
3. 我们不收集什么 | What we do NOT collect
- 银行卡/支付凭据：支付全程由 Paddle 或面包多处理，我们看不到也无法存储你的卡号。Bank card / payment credentials: payments are handled entirely by Paddle or Mianbaoduo — we never see or store your card number.
- 不在站内投放广告跟踪、不卖数据、不建用户画像用于营销。 / No on-site ad tracking, no selling of data, no marketing user profiles.
We never see or store your card details (handled by Paddle/Mianbaoduo). No ad tracking, no data sales.
4. 本地存储与 Cookie | Local storage & cookies
本站不使用跟踪 Cookie。我们在你的浏览器使用 localStorage 保存登录快照、学习进度、上传照片与区域定价判定，你可以随时在浏览器设置中清除；清除后重新登录即可从云端恢复进度。
No tracking cookies. We use browser localStorage for sign-in state, progress, uploads and region detection; clearing it is safe — progress restores from the cloud after you sign in again.
5. 第三方处理者 | Third-party processors
- WorkBuddy 云服务：账号与进度数据库托管（已启用行级安全，仅本人可读写自己的数据）。WorkBuddy cloud services: hosting of the account and progress database (row-level security enabled — only you can read/write your own data).
- EdgeOne（腾讯云）：静态页面与图片的 CDN 分发，产生标准访问日志。EdgeOne (Tencent Cloud): CDN delivery of static pages and images, generating standard access logs.
- Paddle.com（海外订单记录商户）：处理支付、税务与退款，按其隐私政策处理支付信息。Paddle.com (Merchant of Record for overseas orders): handles payment, tax and refunds; payment info processed per its privacy policy.
- 面包多 mianbaoduo.com（中国大陆订单）：处理人民币支付。Mianbaoduo (mianbaoduo.com) (mainland China orders): processes CNY payments.
- 邮件服务商：仅在涉及账号/订单邮件时发送。Email provider: sends emails only for account/order matters.
Processors: WorkBuddy cloud (database), EdgeOne/Tencent Cloud (CDN), Paddle.com (Merchant of Record for overseas orders), Mianbaoduo (CNY payments), email delivery for account/order emails.
6. 保留期限 | Retention
账号与进度数据在你账号存续期间保留；注销请求处理完成后 30 天内删除或匿名化。兑换与订单记录按税务与争议处理需要保留最长 7 年（不含卡号等支付凭据）。风控日志保留 12 个月。
Account data is kept while your account exists and deleted/anonymised within 30 days after a deletion request. Redemption records may be kept up to 7 years for tax and dispute purposes. Security logs 12 months.
7. 你的权利 | Your rights
- 查询、更正、导出、删除你的个人数据；Access, correct, export or delete your personal data;
- 撤回同意（如清理本地存储、请求注销账号）；Withdraw consent (e.g. clear local storage, request account deletion);
- 欧盟/英国用户：依 GDPR 享有访问、可携带、被遗忘与反对处理等权利。 / EU/UK users: GDPR rights of access, data portability, erasure and objection to processing.
行使方式：发邮件至 xiaohai5240@outlook.com，我们 5 个工作日内响应。删除账号将同时删除云端进度与权益记录，且付费内容无法再访问（退款政策不因此改变）。To exercise your rights: email xiaohai5240@outlook.com (response within 5 business days). Deleting your account also deletes cloud progress and entitlement records, and paid content becomes inaccessible (refund policy unchanged).
You may access, correct, export or delete your data by emailing xiaohai5240@outlook.com (response within 5 business days). EU/UK users have GDPR rights. Deleting your account removes cloud progress and entitlements.
8. 儿童与安全 | Children & security
本站面向备考成人，不面向 14 岁以下儿童，也不会有意收集其数据。我们采用传输加密（HTTPS）、数据库行级权限与接口限速保护数据；如发生影响你权利的数据泄露，将依法通知你。
The Site is intended for adult exam candidates and is not directed at children under 14. We protect data with HTTPS, row-level database permissions and rate limits, and will notify you of any breach affecting your rights as required by law.
9. 政策变更与联系 | Changes & contact
本政策更新时会修改页首生效日期；重大变更在站内公告。问题与请求请发送至 xiaohai5240@outlook.com。
Changes take effect on the date above; material changes will be announced on the Site. Contact: xiaohai5240@outlook.com.