Plotwith 隐私政策
最后更新：2026 年 6 月 15 日
1. 数据收集
Plotwith 要求使用邮箱注册账号。我们收集以下信息：
- 账号信息：您的邮箱地址用于账号认证和登录，密码经加密存储。昵称（可选）用于显示。
- 对话内容：您与 AI 角色的对话在服务端临时处理，用于生成 AI 回复。对话历史与您的账号关联存储。
- 加密密钥：Plotwith 使用 ECDH + AES-256-GCM 端到端加密。加密密钥在您的浏览器和服务端之间通过 Diffie-Hellman 密钥交换临时生成。
- 使用统计：我们记录事件（如页面访问、场景选择、消息数量）以改善服务质量。
- IP 地址：服务端在请求期间可见您的 IP 地址，用于防止滥用和安全防护。
2. Cookie 使用
Plotwith 使用 httpOnly Cookie 存储登录凭证（JWT），用于维持登录状态。我们不使用 Cookie 进行广告投放。
3. 第三方服务
- DeepSeek API：您的对话内容会发送至 DeepSeek 的 API 以生成 AI 回复。DeepSeek 受其自身的隐私政策约束。
- 支付服务商：会员与钻石购买由 Paddle、Stripe 或其他授权支付服务商处理。我们不会存储完整银行卡号；支付数据受其隐私政策约束。
4. 数据安全
所有通信均通过 HTTPS 加密传输。对话内容使用端到端加密（ECDH + AES-256-GCM），即使网络流量被截获也无法读取。
5. 儿童与青少年隐私
Plotwith 面向 16 岁及以上用户，不面向 16 岁以下儿童。我们不会故意收集儿童的个人信息。如果您认为未成年人向我们提供了个人信息，请联系 privacy@plotwith.com 删除。
6. GDPR 权利
如果您位于欧盟/欧洲经济区，您享有以下权利：访问权、更正权、删除权、限制处理权、数据可携带权。由于我们不存储个人数据，行使这些权利通常无需操作。如有疑问，请联系 privacy@plotwith.com。
7. 政策更新
我们可能不时更新本隐私政策。重大变更将在本页面上更新"最后更新"日期。
8. 联系我们
如有隐私相关问题，请联系：privacy@plotwith.com
Plotwith Privacy Policy
Last updated: June 15, 2026
1. Data Collection
Plotwith requires email registration to create an account. We collect the following information:
- Account Information: Your email address is used for authentication and login. Passwords are stored encrypted. Nickname (optional) is used for display.
- Chat Content: Your conversations with AI characters are processed on the server to generate AI responses. Chat history is stored in association with your account.
- Encryption Keys: Plotwith uses ECDH + AES-256-GCM end-to-end encryption. Encryption keys are generated temporarily through Diffie-Hellman key exchange between your browser and the server.
- Usage Statistics: We record events (such as page visits, scene selections, message counts) to improve service quality.
- IP Address: Your IP address is visible to the server during requests, used for abuse prevention and security.
2. Cookie Usage
Plotwith uses httpOnly cookies to store login credentials (JWT) for maintaining authentication state. We do not use cookies for advertising.
3. Third-Party Services
- DeepSeek API: Your conversation content is sent to the DeepSeek API to generate AI responses. DeepSeek is governed by its own privacy policy.
- Payment processors: Membership and diamond purchases are handled by Paddle, Stripe, or other authorized providers. We do not store full card numbers.
4. Data Security
All communications are encrypted via HTTPS. Conversation content uses end-to-end encryption (ECDH + AES-256-GCM), making it unreadable even if network traffic is intercepted.
5. Children & Teens
Plotwith is intended for users aged 16 and older. We do not knowingly collect information from children under 16. Contact privacy@plotwith.com to request deletion.
6. GDPR Rights
If you are located in the EU/EEA, you have the following rights: right of access, rectification, erasure, restriction of processing, and data portability. Since we do not store personal data, exercising these rights typically requires no action. For questions, contact privacy@plotwith.com.
7. Policy Updates
We may update this privacy policy from time to time. Significant changes will be reflected by updating the "Last updated" date on this page.
8. Contact Us
For privacy-related questions, contact: privacy@plotwith.com