PariRead：隐私与数据处理

何时向外部服务发送数据

划词翻译和快捷窗口手工输入翻译由你主动触发。整页翻译由你的操作或已启用的网站自动翻译规则触发。快捷窗口不读取网页选区，也不保存翻译历史。Popup 仅管理偏好和导航，不发起文本翻译。插件直接调用你配置或选择的翻译服务，没有扩展自有的中转服务器，也不提供遥测或广告追踪。模型候选目录随扩展打包，使用时不会向 Models.dev 查询。

网站自动翻译默认关闭。在阅读设置中开启并保存后，当前页面立即开始，后续访问同一精确主机名（当前子域）的页面也会自动翻译，将页面原文及必要上下文发送给所选服务。规则不扩展到主域、兄弟子域或更深的子域；IP、localhost 等按完整 origin 匹配。规则保存在本机，在对应网站可关闭；手动停止后本次文档保持暂停。样式预览使用内置示例，不调用 AI。

• 翻译请求可能包含选中原文、附近上下文、页面标题、页面地址、段落标题、术语及可确认的当前评论和最多两级父评论的有限原文等辅助信息。这些背景在内存中采集，不单独保存完整背景；本机翻译缓存保存背景指纹。整页翻译启动后会按阅读位置处理顶层页面及可注入 iframe 的正文、表格和开放 Shadow DOM，直到停止或离开页面；编辑区和隐藏内容会被排除。正常网页请求中的页面地址只保留源和路径，不包含查询参数或片段；路径本身仍可能包含私人信息。无法注入的 frame 不会翻译。
• AI 朗读会向选择的语音服务发送要朗读的文本、语言和音色设置。浏览器朗读使用 Chrome / 操作系统提供的音色；某些音色可能使用其提供方的在线服务，不能保证所有浏览器音色完全离线。
• API Key 用于向配置的翻译或语音服务鉴权。服务商能够处理请求内容及连接信息，并可能按其政策保留数据。请查阅所选服务商的政策；自定义网关也属于数据接收方。Ollama 默认请求本机服务，实际去向取决于你配置的地址及该服务的部署方式。
• 书面读音数据随扩展内置，按原文语言在本地查询，不单独联网获取读音；读音和原文语言检测结果不会作为词典数据发送给 AI。同一次划词仍可能独立发起 AI 翻译，不能把翻译卡片当作完全离线功能。

可能接收请求的服务 / Possible service recipients

仅你选择并使用的服务接收该次请求，不会同时向目录中所有服务发送内容。下表列出当前内置翻译目录的默认接口主机；你修改接口后，以设置中实际地址的运营方为接收方。使用 OpenRouter、SiliconFlow、Together AI 等托管或聚合服务时，所选模型可能由其下游模型服务处理，请同时核对该平台的路由与数据处理条款。

Only the service you select and use receives a request; the extension does not send it to every listed provider. These are the default API hosts. If you change an endpoint, its operator becomes the recipient. Hosted or aggregated services may route a chosen model to a downstream provider under their own terms.

在线语音可选择 Qwen（阿里云）、Azure Speech（Microsoft，使用你配置的区域接口）、OpenAI 或 Gemini（Google）。Qwen 播放还可能访问阿里云的音频资源主机。浏览器音色由 Chrome／操作系统及其音色提供方处理。自定义 OpenAI 兼容服务和你自行部署的 Ollama 由你配置的运营方处理。API Key 仅用于对应配置接口的认证，不发送给插件作者；连接测试也会访问该接口。

Online speech can use Qwen (Alibaba Cloud), Azure Speech (Microsoft, at your configured regional endpoint), OpenAI or Gemini (Google). Qwen playback may also access Alibaba Cloud audio hosts. Browser voices are handled by Chrome, the operating system and their voice providers. Custom OpenAI-compatible endpoints and self-hosted Ollama are handled by the operators you configure. API keys authenticate the corresponding endpoint, including connection tests; they are not sent to the extension author.

本机保存的数据与删除方式

• 配置与密钥保存在 Chrome 扩展本地存储，不通过 Chrome 同步；本地 readingSettings 同时保存阅读模式、右键开关与网站规则。整页翻译期间，后台还会在仅受信任扩展上下文可读的会话存储中暂存所选服务商、模型、接口、目标语言及认证快照；停止、关闭标签页或替换顶层文档后清理。网页内容脚本和 iframe 只接收必要的非敏感偏好与会话标识，不能直接读取上述存储或密钥。密钥没有独立加密；具有本机系统或开发者工具访问权限的人仍可能读取。翻译密钥可在服务商设置中清除后保存，语音密钥可清空后保存。
• 划词历史包含原文、译文、页面标题、URL、附近文本和时间，URL 可能保留查询参数。历史保存在本机 IndexedDB，直到你在历史页逐条、按页删除，或在“数据与隐私”中清空全部划词历史。
• 沉浸式译文缓存保存在本机 IndexedDB，采用约 50 MB 的估算软上限和最近使用淘汰策略；清空划词历史不会清除此缓存。再次点击网页翻译按钮会停止任务、移除译文，但保留缓存。停止不会删除划词历史、读音或语音缓存。
• AI 音频缓存保存在本机 IndexedDB，软上限为 200 MB，30 天未访问过期，在访问或清理时执行。可在“数据与隐私”中独立删除。升级前导入的旧词典数据不再用于查询；如仍存在，可在同一页面清除。
• 卸载扩展会移除其本地数据。删除本地数据不会删除第三方服务商已经接收的数据，也不会取消已经发出的请求；相关删除请求需按服务商提供的渠道办理。

权限用途

网页访问用于显示翻译控件、读取你请求翻译的内容并插入译文；服务主机权限用于调用翻译、语音及本机模型接口。contextMenus 用于 HTTP(S) 页面的整页翻译／停止入口，不读取右键选中文字；commands 提供浏览器原生快捷键。storage 用于本地配置；favicon 用于历史记录图标；tts 与 offscreen 用于朗读及音频播放。本机字体访问仅在你主动选择该功能并授权时使用。

本机字体读取仅用于列出可选择的字体并保存你的字体选择，不上传字体列表或字体文件。复制功能仅在点击复制后写入剪贴板，不读取你的剪贴板。扩展不调用浏览器历史记录 API，不建立无关网页的访问清单。

数据使用限制与政策更新

PariRead 对用户数据的使用及转移遵守 Chrome Web Store 用户数据政策及 Limited Use 要求，仅用于上述用户可见功能。插件作者不通过扩展查看你的原文、历史或密钥。若你主动发送反馈，请只提供必要且已脱敏的内容；不要发送密钥或私人网页全文。第三方服务的保留、人工访问及删除方式由其条款约定，使用前请确认所选服务适合你要处理的内容。

功能或数据处理方式变化时，会同步更新本页日期、产品内说明和商店披露。这份政策随扩展分发；公开托管版本应与发布包一致。

发布者与隐私联系 / Publisher and privacy contact

发布者 / Publisher

alex

隐私联系邮箱 / Privacy contact email

PariRead@apexspacelabs.com

公开政策 HTTPS 地址 / Public HTTPS policy URL

https://pariread.apexspacelabs.com/

你可以通过上述邮箱咨询本政策、本地数据清理或反馈问题。主动发送的来信可能包含你的邮箱和正文，发布者会用其答复该次咨询；请勿提供 API Key、密码或不必要的私人内容。

Contact the address above about this policy, local data deletion or support. Messages you voluntarily send may include your email address and message content, which the publisher uses to respond to your inquiry. Do not send API keys, passwords or unnecessary private content.

政策网页托管 / Policy website hosting

本政策网页由 Cloudflare Pages 提供 HTTPS 托管。访问本页时，Cloudflare 会处理提供网页所需的 IP 地址及常规请求信息，具体处理见 Cloudflare 隐私政策。本页没有独立广告、分析或追踪脚本。插件翻译与语音请求仍直接发往你选择的服务。

Cloudflare Pages provides HTTPS hosting for this policy website. When you visit it, Cloudflare processes IP addresses and ordinary request information needed to serve the page under the Cloudflare privacy policy. This page has no separate advertising, analytics or tracking scripts. Extension translation and speech requests go directly to the service you select.

PariRead: Privacy and data handling

Updated October 13, 2026. PariRead translates webpages for reading, without a PariRead account. The extension does not transmit your webpage content, history or API keys to its author, sell or rent them, or use them for advertising, profiling, credit assessments or lending. Text you translate may contain names, contact details, personal communications, health or financial information; only translate content you are authorized to share with your chosen service. Translation starts from your action or an automatic website rule you enabled. The quick-translation window sends only text you enter, does not read the webpage selection and does not save translation history. The popup manages preferences and navigation only and does not initiate text translation. The extension calls your configured services directly; it has no intermediary server, telemetry or advertising tracking. The model catalog is bundled and is not queried from Models.dev at runtime. The recipient directory above identifies the configured service operators.

Automatic website translation is off by default. Enabling and saving a rule starts the current page and automatically processes future visits to the same exact hostname (the current subdomain), sending page text and necessary context to the selected service. Rules do not extend to the parent, sibling or nested subdomains; IP addresses and localhost use the full origin. Rules are stored locally and can be disabled from the corresponding website. A manual stop pauses the current document. Style previews use bundled samples without AI requests.

Translation requests may include source text, nearby context, page titles, page addresses, headings, terms and bounded source text from the current comment and up to two identifiable parent comments. This background is collected in memory and is not stored separately in full; local translation caches store its fingerprint. While whole-page translation is active, more paragraphs from the top page and injectable iframes are processed as you read, including tables and open Shadow DOM. Editors and hidden content are excluded; inaccessible frames remain untranslated. Normal webpage requests send only the origin and path, without query parameters or fragments; paths may still contain private information. AI speech sends the text to read, language and voice settings. Browser voices may use online services supplied by Chrome or your operating system.

API keys authenticate requests to configured services. Providers and custom gateways receive the request and connection information and apply their own retention policies. Check the policy of your selected provider. Ollama defaults to a local service; its actual destination depends on your configuration and deployment.

Written pronunciation data is bundled with the extension and looked up locally by source language. No dictionary package or separate pronunciation network request is needed. A selection can still independently trigger an AI translation.

Settings and keys use local extension storage, without Chrome sync. Local readingSettings also stores the display mode, context-menu preference and website rules. During whole-page translation, the background temporarily stores a snapshot of the selected provider, model, endpoint, target language and authentication in trusted-context-only session storage; it is cleared on stop, tab close or top-document replacement. Content scripts and iframes receive only necessary non-secret preferences and session identifiers and cannot directly read keys or that storage. Keys are not separately encrypted and remain accessible to someone with local system or developer-tool access. Clear translation keys in provider settings and save; erase speech keys in speech settings and save.

Selection history stores text, translations, titles, URLs (potentially including query parameters), surrounding text and timestamps in local IndexedDB until deleted. Delete individual or page records in history, or clear all selection history under Data and Privacy. Immersive translations use a separate cache with an estimated 50 MB soft limit and least-recently-used eviction; clearing selection history does not clear it. Clicking the page translation button again stops work and removes translations but retains this cache. Stopping does not remove selection history, pronunciation or audio caches.

AI audio is cached locally with a 200 MB soft limit and expiry after 30 idle days, enforced on access or cleanup. Clear audio separately under Data and Privacy. Legacy imported dictionary data is no longer used for lookup and can be cleared there if present. Uninstalling removes extension-local data. Local deletion does not cancel dispatched requests or erase copies already held by providers; use their respective deletion channels.

Webpage access supports translation controls, reading requested content and inserting results. Service host access enables API calls. The contextMenus permission provides whole-page translation / stop on HTTP(S) pages without reading right-click selected text; commands provides a native browser shortcut. Storage, favicon, tts and offscreen permissions support local settings, history icons and speech playback. Local font access requires your explicit action and browser permission; font lists and files are not uploaded. Copy only writes to the clipboard when you click it; the extension does not read the clipboard. It does not use the browser history API or build a list of unrelated visits.

PariRead's use and transfer of user data adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements, for the user-facing features described here. The author does not view your source text, history or keys through the extension. Send only necessary, redacted information when voluntarily requesting support, never API keys or full private pages. Third-party retention, human access and deletion are governed by the chosen provider's terms. Changes to data handling will update this policy, in-product disclosures and the store listing. The publicly hosted policy should match the released extension. Publisher and privacy contact details are listed above.