“阅赏” (Yueshang) is a source-available, unofficial browser extension. This policy applies to the Chrome, Microsoft Edge, Firefox, and Safari versions. Its webpage features run only on https://web.okjike.com/.

Data processed by the extension

To provide typography and layout improvements, repost/quote cards, profile hover cards, and image lightbox controls, the extension may process on the user's device:

• Public content and identifiers on the current page, such as post, user, image, video, and link information;
• Profile information returned by the target service, such as avatars, display names, biographies, gender, region, industry tags, and follow statistics;
• Authentication tokens and a device identifier already stored in the target website's own site storage; and
• Follow or unfollow actions explicitly initiated by the user.

At installation, the Firefox version uses the browser's built-in prompt to disclose the corresponding categories: authentication information, personally identifying information, location, public social posts, website activity, and website content. In this context, “transmission” includes direct communication with the target service needed to provide a feature; these categories do not mean that the developer receives the data.

The extension does not send this data to the developer or any developer-controlled server. It does not sell this data or use it for advertising, analytics, telemetry, credit assessment, or any purpose unrelated to the extension's user-facing features.

Use and transmission

• Data is processed only to provide the user-facing features described above.
• To retrieve profiles, supplement repost media, refresh the target-service session, and carry out a user-requested follow or unfollow action, the extension sends the required identifiers, request data, authentication token, or device identifier over HTTPS to the target service's API at https://api.ruguoapp.com/. Authentication information is sent only back to the target service that issued the session and is never sent to the developer.
• When the extension displays an image, video, or link preview returned by the target service, the browser may request that resource from a media or content host selected by the target service. The extension does not attach the target-service authentication token to those resource requests.
• The built-in offline feature demo uses only fictional content and local resources packaged with the extension and makes no network requests.
• The extension contains no advertising, analytics, telemetry, or user tracking.

Storage and retention

No user data is stored on developer servers, and the extension creates no separate user account. Some profile and media information may be cached temporarily in memory while a page is open and is cleared when the page is closed or reloaded. Authentication tokens remain in the target website's own site storage. If the target API refreshes a token, the extension may update the same site-storage entry, but it does not copy the token into extension-specific storage or elsewhere.

User controls and data rights

Users can revoke the extension's access to web.okjike.com, disable it, or uninstall it at any time from their browser's extension management page. Firefox users can also review the required data-transmission categories on the add-on's “Permissions and Data” page. Signing out of the target website or clearing its site data removes authentication tokens saved by that website. Follow and unfollow changes occur only after an explicit user action and can be changed again through the target website.

Because the developer neither receives nor retains user data, the developer has no server-side user-data copy to access, correct, or delete. Account data held by the target service should be managed through that service's own account and privacy controls.

Third-party services and independence

Use of the target website, its API, and media or content hosts selected by it is governed by the applicable services' own terms and privacy policies. “阅赏” is not affiliated with, authorized by, endorsed by, or sponsored by the operator of the target website.

Contact

For privacy questions, contact the developer through GitHub Issues.