心流摘录English隐私说明
适用于“心流摘录”浏览器扩展及其 Mac 本机通信组件。开发者为 ColaMono，联系邮箱 [email protected]。
处理哪些数据
用户触发摘录时，扩展处理所选文字、图片或当前可见标签页的截图、视频时间、网页标题和来源网址。为选择保存位置，扩展读取心流返回的目标名称及标识。
扩展在普通 HTTP(S) 网页显示摘录控件并读取用户选取的内容。截图由用户操作触发，不持续录制屏幕。扩展不申请浏览历史、Cookie、麦克风或摄像头权限，不读取 Cookie 值。
内容传到哪里
摘录内容通过浏览器本机消息通道发送到同一台 Mac 上获授权的心流插件，写入用户选定的位置。为取得图片，扩展可能向图片所属网站请求原图，该请求可能携带浏览器已有的网站登录凭据。
扩展不把摘录内容发送到开发者服务器，不含广告或使用情况分析模块，不出售内容。用户随后另行启用 MarginNote 同步、心流 AI 或其他服务时，适用对应服务的隐私规则；这些不是扩展本机摘录通道的自动行为。
本地保存与恢复
浏览器本地扩展存储保存配色、悬浮球位置、限定用途的本机连接凭据、待确认摘录请求、用户选择保留的恢复副本，以及最近一次保存结果。它不使用浏览器云同步来存储摘录。
摘录经心流原生保存确认和独立回读后，才移除待确认请求；用户选择保留的副本可能继续存于本机，以供恢复。更新不会要求清空旧备份。
撤销与删除
可在心流撤销浏览器连接，也可在浏览器移除扩展及其本地数据。随通信组件提供的卸载脚本只移除本机通信脚本和注册信息，不删除 MarginNote 卡片、学习稿或浏览器中的摘录备份。已经写入 MarginNote 的内容需在 MarginNote 中另行管理。
卸载扩展可能导致本地待确认请求和恢复副本丢失，请先核对原摘录是否已保存。扩展不提供跨设备恢复服务。
权限与代码
网站访问、当前标签页、脚本注入和右键菜单权限用于网页摘录与更新控件；本地存储用于设置和恢复；本机消息权限用于连接独立安装的通信组件。扩展代码随安装包提供，不下载远程可执行代码。
Privacy notice · English
Last updated: October 22, 2026. This notice covers XinFlow Web Clipper and its Mac native messaging component. Developer: ColaMono. Contact: [email protected].
Data and purpose
When you request a capture, the extension processes selected text, images or a visible-tab screenshot, video time, page title and source URL. It reads destination names and identifiers returned by XinFlow to let you choose a save location. Captures are user-initiated; there is no continuous screen recording. The extension does not request browsing-history, cookie, microphone or camera permissions, and does not read cookie values.
Local transfer
Content is sent through native messaging to your authorized XinFlow plugin in MarginNote on the same Mac. Source-image requests go to the image website and may include existing website credentials. The extension does not send captures to developer servers, sell content, show ads or include usage analytics. MarginNote sync, XinFlow AI and other services you separately enable are governed by their respective privacy policies.
Storage and deletion
Local extension storage holds appearance and floating-button settings, scoped connection credentials, unconfirmed capture requests, recovery copies you retain and the latest save result. It does not store captures in browser cloud sync. Pending requests are removed only after native save confirmation and independent readback; retained copies can remain locally for recovery.
Revoke a connection in XinFlow or remove the extension and its local data in your browser. The native component's uninstaller only removes its scripts and browser registrations; it does not delete MarginNote content or browser capture backups. Manage saved content in MarginNote separately. Check unconfirmed captures before uninstalling, as local recovery data may be lost. There is no cross-device recovery service. All executable extension code is bundled with the extension.