Privacy Policy / 隐私政策
Effective date / 生效日期： 20 June 2026 / 2026年6月20日
Email alerts / 邮件提醒
GradWindow collects your email address and preferred interface language only when you request application-opening alerts. Subscription requires confirmation through a link sent to that address.
仅当你主动订阅申请开放提醒时，GradWindow 才会收集你的邮箱地址和界面语言。 订阅必须通过发送至该邮箱的链接再次确认。
How email addresses are protected / 如何保护邮箱
- Email addresses are encrypted before storage using AES-GCM. / 邮箱使用 AES-GCM 加密后保存。
- A keyed, irreversible hash is used for lookup and deduplication. / 查询和去重仅使用带密钥的不可逆摘要。
- Emails are not stored in GitHub, public site files, analytics, or browser storage. / 邮箱不会进入 GitHub、公开网站文件、访客分析或浏览器存储。
- Confirmation and unsubscribe tokens are single-purpose and time-limited where applicable. / 确认和退订令牌仅用于单一用途，并在适用时设置有效期。
- GradWindow does not sell subscriber information. / GradWindow 不会出售订阅者信息。
Processors / 服务提供方
Cloudflare Workers and D1 process and store subscription records. Resend processes email addresses when delivering confirmation and alert emails. Email open and click tracking must remain disabled.
Cloudflare Workers 和 D1 负责处理及保存订阅记录；Resend 在发送确认邮件和提醒邮件时 处理邮箱地址。邮件打开和链接点击追踪必须保持关闭。
Feature voting / 功能投票
The feature-voting page creates a random browser identifier. Before it reaches the database, that identifier is transformed with a keyed, irreversible hash. The hash is used only to enforce one vote per idea from the same browser. No account, email address, or browser history is required to vote.
功能投票页面会生成随机浏览器标识。该标识在写入数据库前会转换为带密钥的不可逆摘要， 仅用于限制同一浏览器对同一想法重复投票。投票不要求账号、邮箱或浏览历史。
To limit automated abuse, the Worker may derive a separate keyed hash from the request IP address and retain only short-lived rate-limit counters. Raw IP addresses are not stored by GradWindow. Community suggestions are public after submission; do not include personal, sensitive, or confidential information.
为限制自动化滥用，Worker 可能从请求 IP 地址生成另一份带密钥摘要，并仅保留短期的频率 限制计数。GradWindow 不保存原始 IP 地址。社区建议提交后会公开显示，请不要填写个人、 敏感或保密信息。
Retention and deletion / 保留与删除
Unconfirmed subscriptions expire automatically. Unsubscribing disables future alerts immediately and removes the encrypted email value. A non-reversible suppression record may be retained for up to 30 days, then deleted. If you lose access to the unsubscribe link, open a GitHub issue without including your email address and request private contact instructions.
未确认的订阅会自动过期。退订后将立即停止提醒并删除加密邮箱值；不可逆的抑制记录 最多保留 30 天后删除。如果无法使用退订链接，请在不公开邮箱地址的前提下创建 GitHub issue，并索取私下联系方法。
What is not collected / 不收集的内容
GradWindow does not intentionally store raw IP addresses, browsing history, application choices, or university preferences. The roadmap service stores only the limited hashed identifiers described above. Cloudflare may process network metadata under its own terms to provide security and delivery.
GradWindow 不会主动保存原始 IP 地址、浏览历史、申请选择或学校偏好。路线图服务仅保存 上文说明的有限摘要标识。Cloudflare 可能依据其自身条款处理保障安全和传输所需的网络元数据。
Important / 重要说明
Alerts are informational. University websites remain authoritative and delivery is not guaranteed. This policy should be reviewed before a production launch and updated with the operator's private contact address and applicable legal jurisdiction.
邮件提醒仅供参考，大学官网始终是权威来源，且邮件送达不作保证。正式开放订阅前， 应补充运营者的非公开联系邮箱及适用法律管辖信息。