隐私政策

01运营者与适用范围

本政策适用于 ZYCEONGAO 平台，包括 zyceongao.com、统一身份服务、账号中心，以及 @zyceongao.com 邮箱服务。平台运营者是本服务的提供方（下称“我们”）。 使用平台即表示你已阅读并理解本政策；如果你不同意，请不要注册或使用本服务。

02我们收集哪些信息

• 注册与账号信息：你拟使用的 @zyceongao.com 邮箱前缀、密码（以不可逆哈希保存）、用于防刷验证的手机号，以及你选择填写的姓名、显示名、生日、性别、头像。
• 登录与安全信息：登录时间、IP 地址、浏览器/设备标识（User-Agent）、会话标识、最近使用的应用、两步验证状态与安全事件记录。
• 邮箱服务信息：你通过 @zyceongao.com 收发的邮件内容、收发件地址、时间与投递状态，用于提供邮箱服务与反滥用。
• Google 登录信息（仅在你主动绑定后）：Google 账号的唯一标识（sub）、电子邮件地址/用户名、基本 Profile（显示名与头像）。
• Cookies 与本地存储：用于保持登录态的会话 cookie（HttpOnly、SameSite=Lax，生产环境启用 Secure）、最近登录账号、短期的第二因子待办票据，以及少量仅影响界面偏好的本地设置。

03我们如何使用这些信息

• 创建与维护你的账号，提供统一登录、账号中心与 @zyceongao.com 邮箱服务；
• 验证身份、维持会话、执行两步验证与单点登出；
• 识别并校验你绑定的 Google 账号，完成快捷登录；
• 发送账号安全通知（例如绑定/解绑第三方登录），以及你主动选择接收的服务通知；
• 防止恶意注册、垃圾邮件、欺诈与滥用，保护平台和其他用户；
• 排查故障、改进可靠性与安全性，并履行法律法规要求的义务。

我们不会出售你的个人信息，也不会把你的 Google 资料用于广告投放。

04Google 用户数据的访问、使用、共享与保护

为满足 Google API Services User Data Policy 的披露要求，我们逐项说明如下：

• 访问范围：仅在你主动发起 Google 绑定或登录时，通过 Google OAuth 读取 email、sub（Google 用户 ID）与基本 Profile（显示名/头像）。我们不访问 Gmail、通讯录、Google Drive、Calendar 或其他 Google 服务的数据。
• 使用目的：仅用于在 ZYCEONGAO 统一身份中心建立/识别账号关联，并完成登录验证。不用于广告、用户画像、信用评估、出售或出租，也不用于训练第三方模型。
• 共享与转让：我们不会向第三方出售、出租或转让 Google 用户数据。仅在提供/改进本应用功能所必需的基础设施服务商（托管、备份、监控）范围内处理，且受保密与数据处理协议约束；法律要求或司法/监管机构依法调取时除外。
• 保护机制：HTTPS 传输；Google 用户数据仅保存绑定关系（sub + 用户名/邮箱）；不保存 Google 的 access token 或 refresh token；最小权限访问；绑定/解绑发送安全通知；敏感数据不写日志明文。
• 保留与删除：绑定关系在你解绑 Google 或注销账号时删除；安全日志按最小必要期限保存；法律要求保留的除外。你可以随时在账号中心解绑，或联系 [email protected] 请求删除。

05Google 登录与账号绑定

Google 登录是已绑定账号的快捷通道，不是注册入口。我们不会仅凭一个 Google 账号 为你自动创建 ZYCEONGAO 账号；你必须先拥有平台原生账号，并在账号中心显式绑定。

绑定后，我们保存 Google 返回的唯一标识（sub）与用户名（Google 上通常是邮箱）， 用于识别“这个 Google 账号对应哪个平台账号”。你可以随时在账号中心解绑； 解绑后该 Google 账号不能再用于登录本平台。为避免账号被锁死，解绑前平台会检查 你是否仍有至少一种可用的登录方式。

你与 Google 之间的账号关系、Google 对数据的使用，同时受 Google 自身服务条款与隐私政策约束。 我们仅在你主动发起绑定/登录时与 Google 交换认证所需的数据，不会在后台持续读取你的 Google 资料。

06Cookies 与会话

会话 cookie 只保存不透明的会话标识，不包含密码或长期令牌。浏览器不持有可自行续期的 refresh token；续期由服务端完成，登出会使会话失效。我们使用 cookie 的目的仅限于保持登录、 记住最近账号、完成第二因子与安全校验。你可以清除浏览器 cookie，但这会使当前登录失效。

07共享、委托处理与跨境传输

• 统一身份与登录由平台自建的身份系统提供，邮件由平台自建的邮件系统提供；它们作为我们的受托处理方，仅在提供服务所必需的范围内处理数据。
• 只有在你绑定 Google 后，我们才会与 Google 发生必要的认证数据交换。
• 我们可能使用云主机、备份与监控服务商；它们按我们的指示处理数据，并受保密与安全义务约束。
• 除法律要求、司法机关或监管机构依法调取外，我们不会向无关第三方披露你的个人信息。
• 若相关服务涉及境外基础设施或境外第三方（例如 Google），可能发生跨境传输；我们会按适用法律的要求采取必要措施。

08存储与保留

账号资料在账号存续期间保存；安全日志、登录记录与反滥用记录按最小必要期限保存； 邮件按邮箱服务的规则保存，直到你删除或账号注销。Google 绑定关系在解绑或账号注销时删除。 注销账号后，我们会删除或匿名化不再需要的信息；法律法规要求保留的记录，会在法定期限内隔离保存。

09你的权利

• 访问与更正：在账号中心查看并修改你的资料、登录名、邮箱、手机号与安全设置；
• 解绑第三方登录：在账号中心随时解绑 Google；为避免账号被锁死，解绑前平台会检查你是否仍有至少一种可用的登录方式；
• 删除与注销：你可以申请删除账号及相关数据；法律要求保留的除外；
• 撤回同意与投诉：你可以通过下方联系方式撤回同意或提出投诉，我们会在合理期限内答复。

10安全措施

我们采用 HTTPS 传输、HttpOnly/SameSite 会话 cookie、密码哈希、最小权限、审计日志与两步验证等措施保护数据。 互联网传输与存储不存在绝对安全；请妥善保管密码与验证设备，发现异常登录请立即修改密码并联系我们。

11未成年人

未满 14 周岁的未成年人不应自行注册本服务；如确需使用，应由监护人同意并陪同。 若我们发现违反此约定的账号，可能会限制或注销。

12政策更新

我们可能因服务变化或法律要求更新本政策。重大变更会在平台内显著提示； 更新后的政策自页面标注的生效日期起适用。

13联系我们

隐私相关问题与权利请求请联系 [email protected]。我们会在合理期限内处理。

1. Scope and Operator

This policy applies to the ZYCEONGAO app and website (zyceongao.com), including the unified identity service, the account center, and the @zyceongao.com mailbox service. The platform operator (“we”) is the provider of these services. By registering or using the service, you confirm that you have read and understood this policy.

2. Information We Collect

• Account data: your chosen @zyceongao.com mailbox prefix, password (stored as an irreversible hash), a phone number used for anti-abuse verification, and optional name, display name, birthdate, gender, and avatar.
• Login and security data: login time, IP address, browser/device identifier (User-Agent), session identifier, recently used apps, two-factor status, and security event records.
• Mailbox data: messages you send or receive through @zyceongao.com, their addresses, timestamps, and delivery status, processed to provide the mailbox service and prevent abuse.
• Google data (only after you explicitly link): Google account identifier (sub), email address/username, and basic profile (display name and avatar).
• Cookies and local storage: an HttpOnly, SameSite=Lax session cookie (Secure in production), recent accounts, a short-lived second-factor ticket, and minor UI preferences.

3. How We Use Information

• To create and maintain your account and provide unified login, the account center, and the mailbox service;
• To verify identity, maintain sessions, perform two-factor verification, and support single sign-out;
• To identify and verify a linked Google account for quick sign-in;
• To send security notices (for example, when a third-party login is linked or unlinked) and service notices you opt into;
• To prevent malicious registration, spam, fraud, and abuse, and to protect the platform and other users;
• To troubleshoot, improve reliability and security, and comply with legal obligations.

We do not sell your personal information and do not use Google data for advertising.

4. Google User Data: Access, Use, Sharing, Protection, and Retention

• Access: only when you initiate Google linking or sign-in, we read email, sub (Google user ID), and basic profile (display name/avatar) via Google OAuth. We do not access Gmail, contacts, Google Drive, Calendar, or other Google services.
• Use: solely to create/identify an account link in the ZYCEONGAO identity center and to authenticate sign-in. Not for advertising, profiling, credit assessment, sale, rental, or training third-party models.
• Sharing/transfer: we do not sell, rent, or transfer Google user data to third parties. It is processed only by infrastructure providers (hosting, backup, monitoring) necessary to provide or improve the app, under confidentiality and data-processing obligations, or when required by law or a competent authority.
• Protection: HTTPS in transit; only the link (sub + username/email) is stored; we do not store Google access or refresh tokens; least-privilege access; security notices on link/unlink; sensitive data is not written to logs in clear text.
• Retention/deletion: the link is deleted when you unlink Google or delete your account; security logs are kept for the minimum necessary period unless law requires longer. You can unlink at any time in the account center or request deletion at [email protected].

5. Google Sign-In and Account Linking

Google sign-in is a quick path for an already-linked account, not a registration channel. We do not create a ZYCEONGAO account solely from a Google authentication. You must first have a native account and explicitly link Google in the account center. You can unlink at any time; after unlinking, that Google account can no longer sign in to your ZYCEONGAO account.

6. Cookies and Sessions

The session cookie contains only an opaque session identifier, never a password or a long-lived token. The browser does not hold a self-renewable refresh token; renewal is performed server-side, and signing out invalidates the session. Cookies are used only to maintain sign-in, remember recent accounts, complete second-factor checks, and support security verification.

7. Sharing, Processing, and International Transfers

Unified identity and sign-in are provided by our self-built identity system, and mail by our self-built mail system; both act as processors only as necessary to provide the service. We exchange data with Google only for authentication when you link or sign in. Infrastructure providers process data on our instructions under confidentiality and security obligations. We do not disclose personal information to unrelated third parties except as required by law. If services involve overseas infrastructure or an overseas third party (such as Google), a cross-border transfer may occur, and we take measures required by applicable law.

8. Retention and Deletion

Account data is retained while your account exists. Security, login, and anti-abuse logs are kept for the minimum necessary period. Mail is retained under the mailbox service rules until you delete it or close your account. The Google link is deleted on unlink or account deletion. After account deletion, we delete or anonymize information no longer needed; records required by law are kept in isolation for the statutory period.

9. Your Rights

• Access and correction: view and update your profile, login name, email, phone, and security settings in the account center.
• Unlink third-party login: unlink Google at any time. Before unlinking, we check that at least one sign-in method remains so you are not locked out.
• Deletion: request deletion of your account and related data, except records we must retain by law.
• Withdraw consent or complain: contact us using the details below; we will respond within a reasonable period.

10. Security

We use HTTPS, HttpOnly/SameSite session cookies, password hashing, least-privilege access, audit logs, and two-factor verification. No transmission or storage is absolutely secure; please protect your password and verification devices, and contact us immediately if you notice unauthorized access.

11. Children

Children under 14 should not register on their own. If use is necessary, a guardian must consent and accompany the child. We may restrict or close accounts that violate this rule.

12. Changes and Contact

We may update this policy due to service or legal changes. Material changes will be prominently notified; the updated policy applies from the effective date shown on this page. For privacy questions or rights requests, contact [email protected].