隐私政策

生效日期：2026 年 11 月 5 日

Sluice 是一款在你的 Mac 上本地运行的网络代理应用。本政策说明 Sluice 账户服务收集哪些信息、如何使用，以及你拥有的权利。

我们不接触你的网络流量

Sluice 应用在你的 Mac 上完成规则判定和代理连接。你访问的网站、使用的节点和订阅地址都只保存在本机，不会发送到 Sluice 的服务器。

我们收集的信息

• 邮箱地址：用于识别账户、发送验证码和安全通知。
• 账户密钥的哈希值：我们只保存经过 argon2id 处理的哈希和末尾 4 位字符，无法还原出密钥本身。
• 会话与设备：登录时间、最近使用时间；在 Sluice 应用中登录时，还有你设定的设备名称、Mac 型号和系统版本。
• 验证码：以哈希形式保存，10 分钟后或使用一次后即删除。
• 授权与订单：方案、设备名额、有效期，以及订单号、金额、付款方式和备注，用于开通授权和对账。
• 设备标识：由 Mac 硬件信息经单向哈希生成的标识，用于计算设备名额和每台 Mac 一次的试用，无法还原出硬件序列号。
• 访问记录：为防止滥用，服务器会短时间保留请求的 IP 地址用于频率限制，不与你的网络活动关联。

我们不收集的信息

• 不使用第三方统计、广告或跟踪脚本，不设置除登录会话以外的 Cookie。
• IP 地址只在内存中短暂用于限制请求频率，不写入数据库。
• 服务器日志只记录请求路径、状态和耗时，不记录邮箱、密钥、验证码或会话令牌。

信息的用途

上述信息只用于提供账户服务：验证身份、保持登录、在密钥变更或新设备登录时提醒你。我们不出售、出租或与第三方共享你的信息，法律要求的情形除外。邮件通过我们选用的邮件发送服务送达，该服务只接收发送所需的收件地址和邮件内容。

保存期限与删除

账户信息在你使用账户期间保存。你可以随时在「我的账户」页删除账户，删除会立即清除账户、会话、设备记录和未使用的验证码，密钥随之失效。数据库备份会在备份周期结束后自然覆盖。

安全

所有通信通过 HTTPS 加密；会话 Cookie 设置为 HttpOnly 与 Secure；登录、验证码请求均有频率限制。请妥善保管你的账户密钥——拿到邮箱和密钥的人即可登录你的账户。

你的权利

你可以查看账户信息、签发新密钥、移除设备或删除账户。如需导出数据或有其他请求，请联系 privacy@sluice.top。

政策变更

本政策如有重要变更，我们会在网站上公布，并通过邮件通知注册用户。

Privacy Policy

Effective 5 November 2026

Sluice is a network proxy app that runs locally on your Mac. This policy explains what the Sluice account service collects, how it is used, and your rights.

We never see your traffic

The Sluice app routes and proxies connections on your Mac. The sites you visit, the nodes you use and your subscription URLs stay on your Mac and are never sent to Sluice's servers.

What we collect

• Email address: identifies your account and receives codes and security notices.
• A hash of your account key: we keep only an argon2id hash and the last four characters; the key cannot be recovered from them.
• Sessions and devices: sign-in and last-use times; when you sign in from the Sluice app, also the device name you set, the Mac model and macOS version.
• Verification codes: stored hashed and deleted after 10 minutes or one use.
• Licenses and orders: plan, seats and expiry, plus order number, amount, payment method and note, to activate licenses and keep the books.
• Device identifier: a one-way hash of your Mac's hardware ID, used for seats and the one-trial-per-Mac rule; it can't be turned back into a serial number.
• Request records: request IP addresses are kept briefly for rate limiting and are never linked to your network activity.

What we don't collect

• No third-party analytics, advertising or tracking scripts, and no cookies other than the sign-in session.
• IP addresses are held briefly in memory for rate limiting and never written to the database.
• Server logs record paths, status codes and timings, never email addresses, keys, codes or session tokens.

How we use it

Only to run your account: to verify you, keep you signed in, and alert you when your key changes or a new device signs in. We do not sell, rent or share your information, except where the law requires it. Mail is delivered through our email provider, which receives only the recipient and the message.

Retention and deletion

Your account information is kept while you use the account. You can delete the account at any time on the My account page; this immediately removes the account, its sessions, devices and unused codes, and the key stops working. Database backups roll over at the end of their cycle.

Security

All traffic uses HTTPS; the session cookie is HttpOnly and Secure; sign-in and code requests are rate limited. Keep your account key safe — anyone with your email and key can sign in.

Your rights

You can view your account, issue a new key, remove devices or delete the account. For a data export or any other request, write to privacy@sluice.top.

Changes

We announce significant changes on this site and email registered users.