提供者与联系方式

本服务由 Dotway 开发者提供。有关隐私、访问、更正、删除或撤销授权的问题，请联系 tuyou@me.com。联系时请勿发送 Apple 密码、验证码、访问令牌或完整私人资料库。

何时读取收藏

仅在你主动通过 Apple 登录、点击“允许读取并连接”，并授权相应客户端后，该客户端才能请求读取你的 Dotway iCloud 收藏。连接时也会读取资料库以确认授权有效。Apple 密码与双重认证验证码只在 Apple 页面输入，Dotway 不接收或保存这些信息。

我们读取已同步记录，在服务器内存中处理，并把匹配的标题、摘要或正文、作者、标签、原始链接和收藏时间返回你授权使用的 AI 服务。同一账号可在 45 秒内复用已获授权的文本结果，撤销或更换授权后旧结果失效。个人感想默认排除，只有你另行勾选后才进入搜索与返回结果。本版不提供原始图片、视频、画布、合集或仅在本机存在的识别文本。

保存的数据与用途

Cloudflare 托管的服务器保存加密的 CloudKit 访问令牌、容器内用户标识、连接时间与个人感想授权选项，用于执行你授权的读取。账号由 Apple 验证后的容器内标识确定，不收集邮箱、Apple 密码或额外的 Dotway 密码。

服务器还保存 OAuth 客户端登记、授权范围、授权记录、用于验证令牌的记录，以及短期登录与授权会话。CloudKit 令牌和网页会话使用独立服务器密钥加密；OAuth 凭据由 Cloudflare 的 OAuth 组件处理。访问令牌不会进入插件包、工具参数或模型上下文。

我们不建立持久的收藏内容副本或搜索索引。读取时完整的相关同步记录会经过服务器内存，不能理解为服务器只接触最终返回的字段。

手动选择的显示语言会保存在本站的语言偏好 Cookie 中，最长保留一年。该 Cookie 只包含语言选项，不包含账号凭据或收藏内容。

服务商与跨地区处理

Apple 提供 iCloud 存储与身份验证，Cloudflare 提供服务器、加密记录存储和 OAuth 基础设施。你选用的 OpenAI 或其他 AI 服务会接收工具返回的收藏内容。以上服务可能在你所在国家或地区以外处理数据；本服务未承诺数据仅驻留某一个地区。

请参阅 Apple 隐私政策、Cloudflare 隐私政策和 OpenAI 隐私政策，并检查你所用 AI 账号的数据设置。

保留与撤销

• CloudKit 在线访问凭据自连接起最长保留 14 天；Apple 可能提前使其失效。到期通过存储清理机制移除，过期凭据不能继续用于读取。
• 网页会话最长 1 小时，临时登录与授权请求最长 10 分钟；OAuth access token 最长 10 分钟，refresh grant 最长 14 天。重新授权会产生新的有效期。
• OAuth 客户端登记用于识别应用，不含收藏内容；它会按组件的登记有效期清理，持续使用时续期。
• 在连接页点击“撤销 iCloud 访问”会删除在线 CloudKit 凭据并阻止旧访问令牌继续读取，包括此前正在进行的读取；不会删除你的 iCloud 收藏。重新连接需要重新向客户端授权。

退出网页登录只结束该网页会话。Cloudflare 的备份或恢复窗口可能保留历史密文，在线撤销不等于立即擦除所有历史备份。已发送到 AI 服务的内容不能由 Dotway 追回，其保留与删除按该服务的规则和你的账号设置执行。

日志与联系信息

应用日志只记录固定错误事件和随机请求标识，不记录访问令牌、Cookie、收藏内容或搜索词；当前未启用 Worker 持久请求日志。为限流，服务器在内存中对已验证的 MCP 请求按账号计数，对其他请求按来源 IP 计数（IPv6 按 /64），窗口为一分钟，不建立行为画像。Cloudflare 和 Apple 为网络、安全与运维处理的必要信息适用其自身政策。

你主动发送的支持邮件及附件用于答复和排查问题；可以通过同一邮箱提出删除请求。我们不把收藏内容用于广告或出售个人数据。

你的选择

可以拒绝连接、保持个人感想关闭、撤销访问或停止使用插件。CloudKit 凭据本身并非 Apple 强制的只读凭据；只读由本服务固定的 API 与三个读取工具保证。请仅向你信任的客户端授予权限，避免通过插件发送无权提供的个人信息。

本政策发生重要变化时，我们会更新日期与说明，并在新增数据处理需要时重新取得授权。本插件的说明补充 Dotway 应用隐私政策；原生应用的其他行为仍以其政策为准。

Provider and contact

This service is provided by the Dotway developer. For privacy, access, correction, deletion, or authorization questions, contact tuyou@me.com. Do not send Apple passwords, verification codes, access tokens, or your complete private library.

When we read your collection

A client can request your Dotway iCloud collection only after you sign in with Apple, select “Allow access and connect,” and authorize that client. We also read the library during connection to verify access. Apple passwords and two-factor authentication codes are entered only on Apple’s pages; Dotway does not receive or store them.

We read synced records, process them in server memory, and return matching titles, summaries or saved text, authors, tags, original links, and collection timestamps to the AI service you authorize. The same account can reuse authorized text results for up to 45 seconds. Revoking or replacing the connection invalidates those results. Personal notes are excluded by default and are searched or returned only if you separately enable them. This version does not provide original images, videos, canvases, collections, or recognized text available only on your device.

Data stored and its purpose

The Cloudflare-hosted server stores encrypted CloudKit access tokens, the user identifier within the container, connection time, and your personal-notes permission to perform authorized reads. Accounts are identified by the container user identifier verified by Apple. We do not collect email addresses, Apple passwords, or a separate Dotway password.

The server also stores OAuth client registrations, scopes, grants, records used to validate tokens, and short-lived sign-in and authorization sessions. CloudKit tokens and web sessions are encrypted with a separate server key; OAuth credentials are handled by Cloudflare’s OAuth component. Access tokens are not included in the plugin package, tool arguments, or model context.

We do not build a persistent copy or search index of your collection. Complete relevant synced records pass through server memory during reads; this does not mean the server accesses only the fields ultimately returned.

Your manually selected display language is stored in a first-party preference cookie for up to one year. It contains only the language choice, not account credentials or collection content.

Service providers and processing locations

Apple provides iCloud storage and authentication. Cloudflare provides hosting, encrypted-record storage, and OAuth infrastructure. The OpenAI or other AI service you choose receives the collection content returned by tools. These services may process data outside your country or region; this service does not promise data residency in any single region.

See the Apple privacy policy, Cloudflare privacy policy, and OpenAI privacy policy, and review your AI account’s data settings.

Retention and revocation

• Online CloudKit access credentials are retained for up to 14 days from connection. Apple may invalidate them sooner. Expired credentials are removed by storage cleanup and cannot continue to be used for reads.
• Web sessions last up to one hour; temporary sign-in and authorization requests last up to 10 minutes. OAuth access tokens last up to 10 minutes, and refresh grants last up to 14 days. Reauthorization creates a new validity period.
• OAuth client registrations identify apps and contain no collection content. They are cleaned up according to the component’s registration lifetime and renewed with continued use.
• Selecting “Revoke iCloud access” on the connection page deletes online CloudKit credentials and blocks old access tokens from reading, including reads already in progress. It does not delete your iCloud collection. Reconnecting requires authorizing clients again.

Signing out ends only that web session. Cloudflare backup or recovery windows may retain historical ciphertext; online revocation does not immediately erase all backups. Dotway cannot retrieve content already sent to an AI service. Its retention and deletion follow that service’s rules and your account settings.

Logs and support information

Application logs record only fixed error events and random request identifiers, not access tokens, cookies, collection content, or search terms. Persistent Worker request logging is currently disabled. For rate limiting, the server counts authenticated MCP requests by account and other requests by source IP (IPv6 /64) in memory over a one-minute window and does not build behavioral profiles. Necessary information processed by Cloudflare and Apple for networking, security, and operations is covered by their own policies.

Support emails and attachments you choose to send are used to respond and investigate issues. You can request deletion through the same email address. We do not use collection content for advertising or sell personal data.

Your choices

You can decline connection, leave personal notes disabled, revoke access, or stop using the plugin. CloudKit credentials are not read-only credentials enforced by Apple; read-only access is enforced by this service’s fixed APIs and three reading tools. Authorize only clients you trust and avoid providing personal information you are not entitled to share.

For material changes to this policy, we will update the date and explanation and obtain renewed authorization when new data processing requires it. This plugin policy supplements the Dotway app privacy policy; other native app behavior remains governed by that policy.