隐私政策
1. 引言
Shadow Card（“我们”或“本服务”）非常重视您的隐私。本隐私政策旨在说明我们在您使用我们的网站及相关服务（统称为“服务”）时，如何收集、使用和保护您的个人信息。
2. 我们收集的信息
我们遵循“最小化数据采集”原则，仅收集提供服务所必需的信息。
2.1 您主动提供的信息
- 账户信息：当您注册时，我们可能会收集您的电子邮箱地址及认证信息（通过 Google 等第三方登录方案）。
- 用户内容：您为了生成名片而输入的数据，包括姓名、职位、公司、个人简介、社交媒体链接以及上传的头像图片。
2.2 自动收集的信息
- 使用数据：我们可能会收集有关您访问和使用服务的信息，例如设备类型、浏览器版本和访问的页面。
- 访问统计：我们使用 Google Analytics 统计网站的访问和功能使用情况。它会收集您访问的页面地址和标题、来源网站、大致地区、设备和浏览器类型，以及注册、登录、点击订阅、导出名片、使用 AI 功能、复制名片链接等操作的次数和类别（如登录方式、订阅周期）。页面地址只保留渠道来源标记（如
utm_source）和语言参数，其他参数会被去掉；公开名片页会记录名片的公开链接，但页面标题统一记为“Shadow Card”，不含名片主人的姓名。登录、密码重置和身份验证页面不发送统计；我们不会把您的邮箱、姓名、名片内容等账户信息发送给 Google Analytics。您可以安装 Google Analytics 停用浏览器插件（Google Analytics Opt-out Browser Add-on）或拦截分析脚本，停止被统计。 - 错误与性能监控：启用错误与性能监控时，我们会把经过过滤的诊断信息发送给 Sentry，包括错误类型与消息、出错的文件与行列位置、发生错误的页面路径（查询参数会被去掉，公开名片只记录为“名片页”）、请求方法、SDK 版本、环境名与发布版本；性能采样还包含浏览器名称与版本。我们不发送账户信息、Cookies、请求头或请求体、页面与名片内容，不录制会话回放，也不上报控制台日志。我们尽力过滤错误文本中的邮箱、令牌和验证码，但无法保证识别自由文本中的全部个人信息。您可以拦截监控脚本停止上报。
- Cookies：我们使用 Cookies 来管理用户会话和身份验证状态；Google Analytics 还会设置分析用的 Cookies（如
_ga），用于区分访问者和统计回访。分析 Cookie 只在本站点有效，有效期为最近一次访问后的 30 天，期间再次访问会顺延，不用于广告个性化。
3. 我们如何使用您的信息
我们收集的信息将用于以下用途：
- 提供服务：生成您的社交名片图片并管理您的账户数据。
- 改进服务：了解用户如何与工具交互，从而优化产品体验。
- 沟通交流：发送与您的账户或服务相关的重要通知（如密码重置、政策更新）。
4. 数据共享与披露
我们不会出售您的个人数据。但在以下情况下，我们可能会共享您的信息：
- 服务提供商：与协助我们运营服务的第三方供应商共享（如 Supabase 数据库托管、Lemon Squeezy 支付处理、Google Analytics 访问统计、Sentry 错误与性能监控）。这些供应商均受保密协议约束。
- 法律合规：如果法律要求，或为了响应公共当局的有效请求。
5. 数据安全
我们采取适当的技术和组织措施保护您的个人数据，防止未经授权的访问、篡改、披露或破坏。然而，任何互联网传输方法都无法保证 100% 的安全。
6. 您的权利
根据您所在地法律，您可能拥有以下权利：
- 访问、更正或删除您的个人信息。
- 反对或限制我们处理您的数据。
- 随时撤回您的同意。
如需行使这些权利，请通过下方提供的邮箱联系我们。
7. 第三方链接
我们的服务可能包含指向第三方网站的链接。我们不对这些外部网站的隐私惯例或内容负责，建议您查阅其各自的隐私政策。
8. 本政策的变更
我们可能会不时更新本隐私政策。任何变更都将通过在本页面发布新的隐私政策来通知您建议您定期查看本政策以获取最新信息。
9. 联系我们
如果您对本隐私政策有任何疑问，请联系我们：
电子邮箱： support@shadow.wang
Privacy Policy
1. Introduction
Shadow Card ("we," "our," or "us") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share information about you when you use our website and services (the "Service").
2. Information We Collect
We utilize a "minimal data collection" policy. We only collect what is necessary to provide the Service.
2.1 Information You Provide
- Account Information: When you register, we collect your email address and authentication details (via third-party providers like Google).
- User Content: Data you input to generate business cards, such as your name, job title, company, bio, social media links, and uploaded avatar images.
2.2 Automatically Collected Information
- Usage Data: We may collect information about how you access and use the Service, such as your device type, browser version, and pages visited.
- Analytics: We use Google Analytics to measure how our website and its features are used. It collects the address and title of the pages you visit, the referring website, your approximate region, your device and browser type, and the count and category of actions such as signing up, signing in, starting a subscription checkout, exporting a card, using AI features, and copying a card link (for example, the sign-in method or billing period). Page addresses keep only campaign source tags (such as
utm_source) and the language parameter; other parameters are removed. For public card pages, the card's public link is recorded, but the page title is recorded as "Shadow Card" without the card owner's name. Sign-in, password reset, and authentication pages do not send analytics, and we do not send your email address, name, card content, or other account details to Google Analytics. You can stop analytics by installing the Google Analytics Opt-out Browser Add-on or by blocking analytics scripts. - Error and performance monitoring: When error and performance monitoring is enabled, we send Sentry filtered diagnostic information: the error type and message, the file, line and column where it occurred, the page path where it happened (query parameters are removed, and public cards are recorded only as a "card page"), the request method, the SDK version, the environment name and the release version; sampled performance data also includes the browser name and version. We do not send account information, cookies, request headers or bodies, page or card content. Session replay is off and console logs are not reported. We try to filter email addresses, tokens and verification codes from error text, but we cannot guarantee that every piece of personal information in free text is recognized. You can stop reporting by blocking the monitoring script.
- Cookies: We use cookies to manage user sessions and authentication status. Google Analytics also sets analytics cookies (such as
_ga) to distinguish visitors and count return visits. Analytics cookies work only on this site, expire 30 days after your most recent visit (each visit within that window extends it), and are not used for ad personalization.
3. How We Use Your Information
We use the collected information for the following purposes:
- To Provide the Service: To generate your social business card images and manage your account.
- To Improve the Service: To understand how users interact with our tool and enhance user experience.
- To Communicate: To send you important updates regarding your account or the Service (e.g., password resets, policy changes).
4. Data Sharing and Disclosure
We do not sell your personal data. We may share your information only in the following circumstances:
- Service Providers: With third-party vendors who assist us in operating our Service (e.g., database hosting via Supabase, payment processing via Lemon Squeezy, website analytics via Google Analytics, error and performance monitoring via Sentry). These providers are bound by confidentiality agreements.
- Legal Compliance: If required by law or in response to valid requests by public authorities.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the Internet is 100% secure.
6. Your Rights
Depending on your location, you may have the right to:
- Access, correct, or delete your personal information.
- Object to or restrict the processing of your data.
- Withdraw consent at any time.
To exercise these rights, please contact us at the email provided below.
7. Third-Party Links
Our Service may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review their privacy policies.
8. Changes to This Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page. You are advised to review this Privacy Policy periodically for any changes.
9. Contact Us
If you have any questions about this Privacy Policy, please contact us at:
Email: support@shadow.wang