Privacy Policy隐私政策（Privacy Policy）
Summary: VidCube processes video filters, audio equalization, and playback parameters locally in your browser. We never collect or sell your browsing history. Google Sign-In is strictly optional and used solely to authenticate your email and sync your 7-day Pro trial or paid subscription.核心承诺：VidCube 的所有画面滤镜、音频均衡与播放控制均在您的浏览器本地实时完成。我们绝不收集、上传或出售您的网页浏览历史。Google 登录仅在您主动尝试解锁 Pro 试用或会员权益时触发，仅获取您的已验证邮箱以同步账户权益。
1. Data We Collect & Process1. 我们收集与处理的数据范围
- Local Preferences (Browser Only): Site playback speed, zoom, filter presets, and disabled-site lists are saved locally in chrome.storage.local on your device.本地偏好配置（仅保存在浏览器本机）：站点倍速、缩放、滤镜模板与禁用域名列表仅存储在您设备本地的 chrome.storage.local 中。
- Account & Entitlement Data (Optional Google Sign-In): When you click "Sign in with Google" to start a Pro trial, we use Chrome Identity API with the minimal scope (userinfo.email) to verify your Google account ID (subject) and email address, storing them in our encrypted database to manage your 7-day trial and subscription status.账户与 Pro 权益数据（可选 Google 登录）：当您主动点击「使用 Google 登录」开启 Pro 试用时，我们通过 Chrome Identity API 申请最小权限（userinfo.email），仅核验并保存您的 Google 唯一标识与邮箱地址，用于发放 7 天免费试用及同步订阅状态。
- BYOK AI Summary: If you configure your own third-party LLM API key, subtitle transcripts are sent directly from your browser to your configured API endpoint.自备密钥 AI 摘要：若您自行填写第三方大模型 API Key，视频字幕仅在您点击生成摘要时从您的浏览器直连发送至您指定的接口服务商。
2. Browser Permissions Disclosure2. 浏览器扩展权限最小化说明
storage: Persist per-site playback settings and local login session token.保存单站播放参数偏好与本地登录令牌。activeTab / scripting / tabs / webNavigation: Detect HTML5 video elements in active tabs and apply speed, filter, or PiP commands.定位当前页面的 HTML5 视频元素（含嵌套 iframe）并应用倍速、滤镜与画中画指令。downloads: Save user-triggered video screenshots and compliant open-web media files to your local disk.将用户手动触发的视频截图及公开合规媒体保存至本地磁盘。identity: Launch interactive Google OAuth sign-in flow when the user chooses to activate Pro trial or sync subscription.仅在用户主动点击登录时拉起 Google OAuth 授权窗口，用于核验账号与同步 Pro 权益。
3. Storage Security & Backups3. 数据安全与加密备份
Account records are transmitted exclusively over TLS 1.2/1.3 + mTLS and backed up using client-side asymmetric encryption (age). You may request complete account deletion at any time by emailing support@wenvo.app.账户数据全程经由 TLS 1.2/1.3 与源站双向 mTLS 加密传输，数据库备份采用 age 非对称公钥客户端加密存储。您可随时发送邮件至 support@wenvo.app 申请彻底注销并删除账户记录。