1. 适用范围
本政策适用于大橘 FM（Orange Cat FM）网站、Chrome 扩展以及由我们提供的客户端。它说明我们为了提供网络电台搜索、播放、收藏、最近播放、账号同步和本地电台查询功能而处理的数据。
不会读取网页扩展不注入网页，不读取浏览历史或网页内容。
不出售数据我们不出售个人数据，也不用于广告、征信或放贷。
定位由用户触发仅在用户选择“本地电台”功能时读取设备位置。
Chrome 版不录音Chrome 扩展不提供录音和录音历史功能。
2. 我们处理的数据
账号与身份验证信息
- 注册或登录时提交的邮箱、昵称和密码。
- 密码通过加盐 PBKDF2-SHA256 哈希保存；服务端不保存明文密码。
- 登录令牌保存在浏览器扩展的本地存储中；服务端只保存令牌摘要、过期时间、客户端操作系统和版本信息。
个人电台数据与用户活动
登录后，我们会同步用户主动产生的收藏、收藏分组、最近播放、累计播放时长以及个人设置。原生客户端还可能同步用户设置的电台闹钟；Chrome 扩展不展示、创建或修改闹钟。
位置信息
当用户主动使用“本地电台”时，客户端会在获得系统授权后把经纬度和查询半径发送到大橘 FM API，用于返回附近电台。坐标不会写入账号资料或个人状态数据库，应用 API 日志也不记录详细查询参数。未提供精确位置时，服务可能根据公网 IP 查询国家代码；国家代码只在服务内存中短期缓存。
网络与播放信息
服务器、CDN 和安全服务会处理提供网络服务所必需的标准请求信息，例如 IP 地址、请求时间、浏览器或客户端类型。播放电台时，浏览器或客户端会连接所选电台的流媒体服务器，该服务器会收到标准网络请求信息。
3. 数据用途
- 创建并验证账号、保持登录状态；
- 同步收藏、最近播放和个人设置；
- 搜索、筛选和播放网络电台；
- 按用户选择的位置或国家查找附近电台；
- 保障服务安全、诊断故障并防止滥用。
4. 数据共享与第三方服务
我们不出售用户数据，不将数据用于个性化广告，也不为与大橘 FM 单一用途无关的目的使用或转移数据。为提供功能，数据可能由以下服务处理：
- Cloudflare：网站与 API 的 CDN、TLS 和安全防护；
- ipwho.is：在需要 IP 国家代码回退时处理公网 IP，并仅返回国家代码；
- 所选电台的流媒体提供方：在播放时直接提供音频流；
- 托管与网络基础设施提供方：运行大橘 FM 网站、API 和数据库。
我们也可能在法律要求、保护用户或服务安全所必需时披露信息。
5. 本地存储、保留与安全
扩展使用 chrome.storage.local 保存登录令牌、缓存、语言和设置。账号及同步 API 使用 HTTPS。部分电台只提供 HTTP 音频流，播放此类电台时不具备 HTTPS 传输保护。
账号资料和同步数据会在提供服务所需期间保留。退出登录会移除当前设备上的登录状态；卸载扩展或清除扩展数据会删除其本地存储。用户可在原生 App 的“我的 → 修改账号信息 → 删除账号”中永久删除账号和关联云端数据，也可通过账号删除页面提交请求；为安全、备份或法律义务而需要保留的有限记录可能延迟删除。
6. 用户选择与权利
- 可以拒绝定位并继续使用手动搜索和其他功能；
- 可以退出账号或清除/卸载扩展以删除本地数据；
- 可以在 App 内永久删除账号，或通过账号删除页面联系我们申请删除；
- 可以联系我们申请访问或更正服务端账号数据。
7. Chrome Web Store 有限使用声明
我们对从 Chrome 扩展 API 获得的信息的使用，遵守 Chrome Web Store 用户数据政策，包括有限使用要求。我们不会在获准用途之外出售或转移用户数据，不会将用户数据用于与扩展单一用途无关的目的，也不会将其用于确定信用资质或放贷。
8. 儿童隐私、政策变更与联系
大橘 FM 不以 13 岁以下儿童为目标，也不会故意收集其个人信息。政策发生重要变化时，我们会更新本页及页面顶部日期。隐私相关问题或数据请求，请联系：[email protected]。
1. Scope
This policy applies to the Orange Cat FM website, Chrome extension, and client applications provided by us. It explains the data handled to provide internet-radio discovery, playback, favorites, recent stations, account synchronization, and local-station discovery.
2. Data we handle
Account and authentication data
Registration and sign-in may process an email address, nickname, and password. Passwords are stored as salted PBKDF2-SHA256 hashes, not as plaintext. The extension stores the session token locally; the server stores only its digest, expiry, client operating system, and client version.
Radio activity and settings
For signed-in users, we synchronize favorites, favorite groups, recent stations, accumulated play time, and personal settings. Native clients may also synchronize radio alarms. The Chrome extension does not display, create, or modify alarms and does not provide recording or recording history.
Location
When the user actively selects the local-stations feature and grants system permission, the client sends coordinates and a search radius to our API to return nearby stations. Coordinates are not stored in the account profile or synchronized state, and detailed query parameters are not written to application API logs. If precise location is not supplied, the service may use a public IP address to obtain a country code, which is cached temporarily in memory.
Network and playback data
Servers, CDN, and security providers process standard request information needed to deliver the service, such as IP address, request time, and client type. Playing a station connects the client to the selected stream provider, which receives standard network-request information.
3. How we use data
We use data only to authenticate accounts, synchronize personal radio data, search and play stations, find nearby stations, operate and secure the service, diagnose failures, and prevent abuse.
4. Sharing and service providers
We do not sell user data or use it for personalized advertising. Data may be processed by Cloudflare for CDN, TLS, and security services; by ipwho.is for country-only IP lookup when required; by the selected station's streaming provider during playback; and by our hosting and network infrastructure providers. We may also disclose information when required by law or necessary to protect users and the service.
5. Storage, retention, and security
The extension uses chrome.storage.local for the session token, caches, language, and settings. Account and synchronization APIs use HTTPS. Some stations provide only HTTP audio; playback of those streams is not protected by HTTPS.
Account and synchronized data are retained while needed to provide the service. Signing out removes the current device's local session state; uninstalling or clearing extension data removes its local storage. Users may permanently delete the account and associated cloud data in the native app under “Me → Edit account → Delete account,” or submit a request through the account-deletion page. Limited records may be retained for security, backups, or legal obligations.
6. User choices
Users may decline location access and continue using manual search, sign out, clear or uninstall the extension, permanently delete an account in the app or through the account-deletion page, and contact us to request access to or correction of server-side account data.
7. Chrome Web Store Limited Use disclosure
The use of information received from Chrome extension APIs complies with the Chrome Web Store User Data Policy, including the Limited Use requirements. We do not sell or transfer user data outside approved use cases, use or transfer it for purposes unrelated to the extension's single purpose, or use it to determine creditworthiness or for lending purposes.
8. Children, changes, and contact
Orange Cat FM is not directed to children under 13, and we do not knowingly collect their personal information. Material changes will be reflected on this page and in the date above. For privacy questions or data requests, contact [email protected].
