隐私说明 / Privacy
生效日期 / Effective: 2026-11-04
社区账户与内容
FRENIX 尾标素材社区提供图片和动画的预览、下载、收藏、评论和投稿。浏览和预览无需注册；原文件下载需要注册并登录。注册时保存用户名、加盐密码哈希及账户时间；不保存明文密码。登录使用有效期14天的必要会话 Cookie。语言偏好保存在本机浏览器。
投稿文件先暂存于香港服务器供管理员审核。你确认拥有发布权限并提交后，审核通过的文件、素材名称、描述与作者名称会向公众展示，注册登录后可下载原文件。已发布评论及其用户名同样公开。收藏与待审核投稿由登录权限保护。不要在投稿、评论或文件中包含不希望公开的个人信息。
邮箱验证与密码找回
你可以在登录后使用当前密码申请绑定邮箱。只有打开验证邮件并确认后，邮箱才成为账号找回方式；邮箱仅对账号本人及必要的后台处理可见，不在素材、评论或统计页面公开。邮件由管理员配置的 SMTP 服务商投递，会向该服务商提供收件地址和验证／重置链接内容。未配置邮件服务时不提供邮件找回。
一次性验证与重置链接有效期30分钟，服务器仅保存令牌哈希和有效期，过期后定期清理。完成密码重置会撤销该账号的全部现有登录会话。已验证邮箱保留至更换或账号删除。未绑定邮箱的旧账号需联系运营者核验身份，不凭用户名或 IP 直接重置密码。
国家与地区统计
从本次更新起，注册、登录及完整原文件下载时，服务器在本地将请求 IP 估算为国家／地区代码，用于了解社区用户与素材需求的地区分布。不会把访客 IP 发送给国家库提供商。国家统计库不保存原始 IP、城市、GPS 或精确地址，保存账号标识、注册国家、最近登录或下载的国家与时间，以及下载的素材标识、国家代码和时间。汇总结果仅供管理员查看，不向其他用户公开账号地区。
下载明细滚动保留365天，超期自动删除；账号地区记录保留至账号删除或不再需要服务时，删除账号会一并删除关联地区与下载明细。历史记录没有可靠地区信息时显示未知，不按界面语言推断国家。VPN、代理、旅行和漫游可能影响估算，不代表国籍、常住地或销量。可联系运营者申请查询、更正、删除或提出与统计处理有关的请求。
国家数据来自 IP Geolocation by DB-IP，采用 CC BY 4.0 许可，国家库供应商按月发布版本。
Google Drive 授权与文件
Google 授权仅用于管理员连接素材存储账户，访客无需提供自己的 Google 账户。网站请求 drive.file，管理本网站创建或由管理员逐个选择的文件；不请求读取整个网盘的权限。网站创建私有素材文件夹，上传官方素材与已审核投稿，并读取已发布素材供访客下载。Drive 文件本身不设为公开共享，公众通过社区获得已发布素材的内容。
网站保存客户端配置、离线刷新令牌及短期访问令牌，用于管理员离线后的正常文件服务。配置保存在受限服务器目录，不向访客返回。管理员检测连接时可读取账户显示名称及存储配额。Google 数据仅用于上述存储与社区功能，不出售、不用于广告画像、不用于训练通用人工智能模型。网站对 Google 数据的使用遵循 Google API 服务用户数据政策及适用的 Limited Use 要求。
服务器缓存、保留与删除
香港服务器保存社区数据库、预览及少量原文件缓存。原文件缓存上限256MiB，7天未使用后可清理，达到上限优先淘汰旧缓存。待审文件暂存上限128MiB，未提交的上传1小时后清理。为运行及防滥用，服务器处理请求 IP、时间、路径、状态等日志；社区访问日志不记录 OAuth 回调查询参数。
账户、投稿及互动记录在服务运行及内容管理需要期间保存。可联系运营者申请删除账户、内容或相关记录；受限备份中的副本可能保留到备份清理。管理员可在 Google 账户连接设置撤销授权，并移除服务器上的授权配置。撤销授权后，网盘读取和上传将不能继续，已有本地缓存可能暂时仍可下载。
原始素材由 Google Drive 存储并受 Google 的服务和隐私规则约束；数据库、审核及转发由香港服务器处理。除提供这些明确功能及必要的安全维护外，不向其他服务发送 Google 数据。
联系
账户、内容、隐私及删除请求：[email protected]。使用方式变化时会更新本页；如需新增 Google 数据用途或权限，将再次征求授权。
Accounts and community content
FRENIX Community offers badge images and animations, previews, downloads, favorites, comments and submissions. Browsing and previews are public; original-file downloads require a registered account and an active login. Accounts store a username, a salted password hash and account timestamps, never a plaintext password. A necessary session cookie lasts up to 14 days. Language preferences are stored in your browser.
Submissions are staged on the Hong Kong server for moderation. After you confirm publishing rights and a moderator approves a submission, its file, title, description and author name become publicly viewable; original-file downloads require registration and login. Published comments and usernames are also public. Favorites and pending submissions are access-controlled. Do not submit personal information you do not wish to publish.
Email verification and password recovery
While signed in, you can request email linking using your current password. The address becomes a recovery method only after confirming the email verification link. It is not shown in materials, comments or statistics. The SMTP provider configured by the administrator receives the recipient address and verification or reset message contents. Email recovery is unavailable until a sender is configured.
Verification and reset links expire after 30 minutes. The server stores only token hashes and expiry times, with periodic cleanup. A successful password reset revokes all existing sessions for that account. Verified addresses remain until replaced or the account is deleted. Accounts without a verified address require operator identity verification; a username or IP address alone cannot reset a password.
Country and regional statistics
Starting with this update, registration, login and full original-file downloads resolve request IP addresses against a local country database to understand community regions and material demand. Visitor IP addresses are not sent to the database provider. The statistics database does not retain raw IP addresses, cities, GPS coordinates or precise addresses. Records contain an account identifier, registration country, most recent login or download country and timestamp, and download material identifiers, country codes and timestamps. Aggregated results are restricted to administrators; account regions are not public.
Download event records are automatically deleted after 365 days. Account region records remain until account deletion or until no longer needed for the service; deleting an account also deletes its associated region and download event records. Historical records without reliable region data remain unknown. UI language is not used to infer country. VPNs, proxies, travel and roaming can affect estimates, which do not establish nationality, residence or sales. Contact the operator for access, correction, deletion or requests relating to this statistical processing.
Country data: IP Geolocation by DB-IP, licensed under CC BY 4.0. The provider publishes monthly database releases.
Google Drive access
Only the administrator connects a storage account; visitors do not connect their own Google accounts. The site requests drive.file for files it creates or the administrator individually selects, without requesting access to the entire Drive. It creates a private storage folder, uploads official designs and approved submissions, and retrieves registered published files for community downloads. Drive sharing remains private; the community distributes the published file contents.
Restricted server storage holds the OAuth client configuration, offline refresh token and temporary access tokens to keep file services working while the administrator is offline. Credentials are never returned to visitors. Connection checks may read the account display name and storage quota. Google data is used only for these storage and community features. It is not sold, used for advertising profiles or used to train general-purpose AI models. Google data use follows the Google API Services User Data Policy, including applicable Limited Use requirements.
Storage, retention and deletion
The Hong Kong server stores the community database, previews and a limited original-file cache. The cache is capped at 256 MiB, with eviction after 7 days without use or when space is needed. Pending files are capped at 128 MiB; unsubmitted uploads expire after one hour. Operational and abuse-prevention logs process request IP addresses, timestamps, paths and status codes. Community access logs omit OAuth callback query parameters.
Account, content and interaction records are retained while needed for the service and moderation. Contact the operator to request account or content deletion. Restricted backup copies may remain until backup cleanup. Administrators may revoke access through Google account connections and remove the stored server configuration. Revocation stops further Drive uploads and retrieval; already cached files may remain temporarily available.
Google Drive stores originals under its own service and privacy rules. The Hong Kong server handles the database, moderation and file delivery. Google data is not sent to other services except for these disclosed functions and necessary security maintenance.
Contact
Account, content, privacy and deletion requests: [email protected]. This page will be updated if use changes. New Google data purposes or permissions will require renewed consent.