Social Grabber 隐私政策
本扩展 Social Grabber（"本扩展"）由 Social Grabber（"我们"）开发。我们非常重视你的隐私。本扩展的设计原则是：一切处理都在你的浏览器本地完成，我们接触不到任何你的数据。
1. 我们不收集、也不上传任何数据
- 我们不收集、不上传你的任何个人信息、浏览记录或下载记录（"已下载"提示标记仅保存在你的浏览器本地，见第 2 节）。
- 本扩展没有任何服务器：不存在数据可以发往的地方。
- 本扩展没有广告、统计分析（Analytics）、埋点或第三方追踪代码。
- 按 Google 用户数据政策的定义，网页内容本身也算用户数据。本扩展在你浏览页面时，会在浏览器内存中读取该页面已加载的素材信息（媒体地址、标题、正文、作者），仅用于识别可下载的内容、并生成你点击后保存的文件。这些数据只留在你的设备上：不上传、不写入任何日志、离开页面后即失效。
2. 保存在你浏览器本地的信息
本扩展保存两类信息，全部只存在你自己的浏览器里，我们无法接触：
偏好设置（chrome.storage.sync，经由你自己的 Google 账户在你的浏览器之间同步）：
- 下载根目录名（默认
SocialGrabber）以及五个平台各自的子目录名 - 界面语言选择（中文 / English / 自动）
- 控制台诊断日志开关（默认关闭；只有你手动打开后，才会在浏览器开发者工具里输出排查信息。该选项在设置界面中默认不显示）
"已下载"标记（chrome.storage.local，只存在本机，不进入任何账户、不同步、不上传）：
- 你在本扩展里成功打包过的作品会记一条标记，内容只有：平台名、作品 id、时间、成功保存的文件数（最多保留最近 500 条）。它只用于在卡片和列表里提示"这个作品你已经下载过"，不含媒体地址与文件内容。
以上数据完全归属你本人：偏好设置经由你自己的 Google 账户同步，我们无法读取；"已下载"标记只存在本机。卸载扩展即全部删除。
3. 权限用途说明
| 权限 | 用途 |
|---|---|
downloads | 将你点击下载的媒体文件与文案 TXT 保存到你设定的下载目录；并在弹窗的下载列表里显示本扩展自己创建的下载任务及其状态；允许你清除这些记录（不会删除已保存到磁盘的文件） |
downloads.open | 在你点击弹窗下载列表里的已完成条目时，打开该文件所在的文件夹 |
storage | 保存上述偏好设置（目录名、语言、诊断日志开关）与本地"已下载"标记（见第 2 节） |
| 站点访问（抖音 / 小红书 / TikTok / Instagram / Pinterest 及其 CDN） | 在你浏览这些网站时，读取页面自身已加载的数据以识别当前作品的媒体地址；下载 CDN 上的媒体文件。解析与识别全部在你的浏览器本地完成，识别结果不上传 |
4. 第三方网站
本扩展在上述第三方平台上运行，但与其无任何隶属关系。你在这些平台上的活动受其各自隐私政策约束。除下载你主动点击保存的那些媒体文件（向该文件所在的 CDN 发起请求）之外，本扩展不会向这些平台或任何第三方发送任何请求。
5. 未成年人
本扩展不面向 13 岁以下儿童，也不收集任何能识别用户身份的数据。
6. 政策变更
如本政策发生变化，我们会在扩展更新说明与本页面同步公布变更内容。
7. 联系我们
Social Grabber Privacy Policy
This policy applies to the browser extension Social Grabber ("the extension") developed by Social Grabber ("we"). The extension is built on one principle: everything happens locally in your browser — we have no access to any of your data.
1. We do not collect or transmit any data
- We do not collect or transmit any personal information, browsing history or download history (the "downloaded" badge marks stay in your browser locally only — see Section 2).
- The extension has no server: there is nowhere for data to go.
- The extension contains no ads, analytics, tracking or third-party scripts.
- Under Google's user-data definition, website content itself counts as user data. While you browse, the extension reads the media information already loaded by that page in your browser's memory (media URLs, title, text, author) solely to identify what can be downloaded and to produce the files you choose to save. This data stays on your device: it is never uploaded, never written to any log, and is discarded when you leave the page.
2. Information stored locally in your browser
The extension keeps two kinds of data, both inside your own browser and beyond our reach:
Preferences (chrome.storage.sync, synced across your browsers through your own Google account):
- Download root folder name (default
SocialGrabber) and the subfolder name of each of the five platforms - Interface language (中文 / English / Auto)
- Console diagnostic-logging switch (off by default; it only prints troubleshooting output in your browser's DevTools if you deliberately turn it on, and this option is not shown in the settings UI by default)
"Downloaded" marks (chrome.storage.local, on this device only — never synced to any account, never uploaded):
- Each post you successfully pack through the extension records one mark containing only: platform name, post id, time, and the number of files saved (the 500 most recent are kept). It exists solely to show the "already downloaded" badge on the card and list; it contains no media URLs and no file content.
All of this belongs to you: preferences are synced through your own Google account, which we cannot read; "downloaded" marks never leave this device. Uninstalling the extension removes all of it.
3. Permissions
| Permission | Purpose |
|---|---|
downloads | Save the media files and caption .txt you choose to download into your configured folders; list the extension's own recent download tasks and their status in the popup; let you erase those records (files already saved on disk are not deleted) |
downloads.open | Open the containing folder when you click a completed entry in the popup's download list |
storage | Store the preferences listed above (folder names, language, diagnostic-logging switch) and the local "downloaded" marks (see Section 2) |
| Site access (Douyin / Xiaohongshu / TikTok / Instagram / Pinterest and their CDNs) | Read data already loaded by the page itself on these sites to identify media URLs of the post you are viewing; download media files from their CDNs. All parsing and identification happen locally in your browser; the results are never uploaded |
4. Third-party websites
The extension operates on the platforms listed above but is not affiliated with any of them. Your activity on those platforms is governed by their own privacy policies. The only outbound requests the extension itself makes are to fetch the media files you explicitly chose to save (requests to the CDN hosting that file); it sends no other request to these platforms or to any third party.
5. Children
The extension is not directed at children under 13 and collects no data that could identify any user.
6. Changes
Changes to this policy will be published on this page together with the extension update that introduces them.