空境 隐私政策
生效日期：2026 年 10 月 21 日
空境（Kongjing）是一个浏览器新标签页扩展。我们的原则是：你的数据属于你，默认只保存在你的设备上。
1. 我们处理哪些数据
| 数据 | 来源 | 存放位置 |
|---|---|---|
| 书签（网址、标题、分组、图标） | 你主动添加或点击「收藏」时读取的当前网页网址和标题 | 你的浏览器本地存储 |
| 个人资料（昵称、头像） | 你自己填写或上传 | 你的浏览器本地存储 |
| 设置（主题、背景、搜索选项等） | 你自己设置 | 你的浏览器本地存储 |
| 搜索历史 | 你在空境搜索框中的输入 | 仅本机，永不同步、永不上传 |
空境不会读取你访问的网页内容，不会收集浏览记录，不含任何广告、统计或追踪代码。
2. 数据什么时候会离开你的设备
只有以下两种情况：
（1）实时配对（可选，默认关闭）
当你主动创建或加入配对组后，书签、设置和个人资料会在你的设备上用 AES-256-GCM 加密，再经由空境中转服务（kongjing.inc.re，运行在 Cloudflare 上）同步到你的其他设备。加密密钥只存在于你的设备上，中转服务无法解密。中转服务能看到的只有：随机的房间标识、密文、数据大小、时间，以及用于防滥用的请求 IP（只以加盐哈希的形式用于限流计数，不长期保存）。
180 天没有任何访问的配对组会被自动删除；你也可以随时在设置中「离开配对组」。
（2）书签图标查询
当浏览器本地没有某个书签网站的图标时，空境会把该网站的域名（例如 github.com，不含具体网址路径）发送给空境中转服务，由它获取公开的网站图标。这个请求不包含任何能识别你身份的信息，结果在服务端按域名缓存最多 30 天。
3. 我们不会做的事
- 不出售、不出租、不向任何第三方转让你的数据；
- 不把数据用于与「管理和同步你的书签」无关的目的；
- 不使用你的数据来判断信用或用于放贷。
空境对从 Chrome 扩展 API 获得的信息的使用，将遵守 Chrome 网上应用店用户数据政策（Chrome Web Store User Data Policy），包括其中的「有限使用」（Limited Use）要求。
4. 你的控制权
- 导出：设置 → 数据，可以导出文件或文本码；
- 删除：卸载扩展会删除本机全部数据；离开配对组后，你的设备不再上传任何数据；
- 第三方：中转服务运行在 Cloudflare 的基础设施上，Cloudflare 作为基础设施提供方，只接触上述加密数据和请求元数据。
5. 联系我们
如有疑问，请发送邮件至 vrhjio4405@gmail.com。
本政策如有变更，会在本页面更新，并修改上方的生效日期。
Kongjing Privacy Policy
Effective date: October 21, 2026
Kongjing is a new tab page extension for Chrome. Our principle: your data belongs to you and stays on your device by default.
1. Data we handle
| Data | Source | Where it is stored |
|---|---|---|
| Bookmarks (URL, title, group, icon) | Added by you, or the current page's URL and title read when you click "Save" | Your browser's local storage |
| Profile (nickname, avatar) | Entered or uploaded by you | Your browser's local storage |
| Settings (theme, background, search options, etc.) | Set by you | Your browser's local storage |
| Search history | What you type into Kongjing's search box | This device only; never synced or uploaded |
Kongjing does not read the content of the pages you visit, does not collect your browsing history, and contains no ads, analytics or tracking code.
2. When data leaves your device
Only in these two cases:
(1) Live pairing (optional, off by default)
After you create or join a pairing group, your bookmarks, settings and profile are encrypted on your device with AES-256-GCM and synced to your other devices through the Kongjing relay (kongjing.inc.re, running on Cloudflare). The encryption keys exist only on your devices; the relay cannot decrypt your data. The relay can only see random room identifiers, ciphertext, data sizes, timestamps, and the request IP address used for abuse prevention (only as a salted hash for rate limiting, not stored long-term).
Pairing groups with no activity for 180 days are deleted automatically, and you can leave a pairing group at any time in Settings.
(2) Bookmark icon lookup
When your browser has no cached icon for a bookmarked site, Kongjing sends that site's domain name only (for example github.com, without the page path) to the Kongjing relay, which fetches the site's public icon. The request contains no information that identifies you; results are cached per domain for up to 30 days.
3. What we never do
- We do not sell, rent or transfer your data to any third party.
- We do not use your data for purposes unrelated to managing and syncing your bookmarks.
- We do not use your data to determine creditworthiness or for lending purposes.
The use of information received from Chrome extension APIs will adhere to the Chrome Web Store User Data Policy, including the Limited Use requirements.
4. Your choices
- Export: Settings → Data lets you export a file or a text code.
- Deletion: uninstalling the extension removes all local data; after you leave a pairing group, your device no longer uploads anything.
- Third parties: the relay runs on Cloudflare's infrastructure. As the infrastructure provider, Cloudflare only handles the encrypted data and request metadata described above.
5. Contact
Questions: vrhjio4405@gmail.com
If this policy changes, we will update this page and the effective date above.