隱私權政策 / Privacy
生效日期：2026-11-13。
繁體中文
管理者：墨聽工程團隊。隱私聯絡信箱：[email protected]。本文件描述 M1 公開免費版；目前沒有帳號、付款、付費週額度或雲端書庫同步。
裝置上的資料
書籍、章節正文（包含手動修復前的備份）、標題、作者、來源網址、閱讀進度與時間、書籤及筆記存於此瀏覽器的 IndexedDB（moting-web-r1），不自動同步到其他裝置。localStorage 保存語音與閱讀設定、介面語言、最近開啟的書籍 ID、閱讀清單與完成時間、背景播放提示狀態，以及包含書籍 ID、位置和時間的播放復原紀錄。復原紀錄不含正文。
離線功能在 Cache Storage 保存程式資源；手機分享內容暫存在 moting-share，供程式讀取後刪除。尚未被讀取的分享可能留到再次開啟或清除網站資料。擴充功能只有在你按「送到墨聽」時才傳入目前頁面的可見文字或選取文字、標題及網址；這份匯入內容在裝置處理。TXT／EPUB／剪貼簿內容也在裝置解析。
網路處理與第三方
網址匯入會將你指定的 URL 送到墨聽的 Cloudflare Worker；Worker 檢查來源限制、DNS、robots.txt 與轉址，取得公開頁面後回傳瀏覽器。來源網站與網路服務可能看到請求資訊。墨聽不在伺服器建立、保存或散布書籍庫，不儲存匯入的整本書或章節正文；取得的 HTML 在請求中暫時處理。robots.txt 可暫存約 1 小時，驗證阻擋狀態可暫存約 30 分鐘。
免費版使用裝置／瀏覽器的 speechSynthesis。語音是否完全離線取決於你選用的系統語音及其供應者；部分系統語音可能使用網路服務，請另查其隱私說明。
管理者解鎖的網站 Azure 語音會把播放片段及語音參數經 Worker 送到 Microsoft Azure。現有功能可在 Cloudflare Cache API 以雜湊索引暫存產生的音訊，快取上限設定為 30 天（可能提前移除），不是公開書籍或音訊下載服務；每次讀取仍須授權。瀏覽器也在記憶體暫存播放音訊。自備 Azure 金鑰功能直接從瀏覽器向 Microsoft 傳送文字，金鑰不送到墨聽伺服器；只有選擇「記住」才在 IndexedDB 的 moting-key-vault 以 AES-GCM 加密保存金鑰及區域。瀏覽器內的程式仍能使用該金鑰，這不能防止同一瀏覽器使用者或惡意擴充功能濫用。
Cookie 與紀錄
通行碼驗證成功後會設定 moting_pass：HttpOnly、Secure、SameSite=Strict、路徑 /api/、180 天有效；剩餘不到 60 天時使用可續期。Cookie 包含到期時間與簽章，不含通行碼。舊版可能曾把通行碼存入設定；新版會在驗證／遷移後清除。匿名訪客無需此 Cookie。
Worker 以 IP 在執行個體記憶體中短暫計算速率限制，並記錄不含正文的錯誤階段、請求 ID、API 路徑與錯誤類型。Cloudflare 基礎設施仍可能處理 IP、請求時間、網址與安全／存取紀錄；實際啟用的紀錄種類、保存期間及可存取人員待管理者確認：（待公布）。第三方處理地點可能在境外，應一併確認供應者政策。
廣告與 Cookie
非閱讀器的公開頁面可能透過 Google AdSense 顯示第三方廣告。Google 與合作夥伴可能使用 Cookie 或裝置識別碼投放廣告及衡量廣告成效。你可透過 Google 廣告設定 管理廣告偏好，並參閱 Google 廣告技術政策。
匯入的書籍正文與閱讀進度保存在你的瀏覽器本機，絕不分享給廣告聯播網。閱讀器內不顯示廣告；語音服務所需的文字處理依前述網路處理說明辦理。
刪除與聯絡
設定可刪除書庫；閱讀清單、設定、離線快取與自備金鑰需分別清除，或透過瀏覽器清除本網站的所有資料。撤銷裝置授權會清除通行 Cookie。清除資料可能無法復原，請先自行匯出備份。若希望查詢、更正、刪除管理者持有的個人資料或提出申訴，請寄至 [email protected]；不要寄送通行碼、Azure 金鑰或整本受著作權保護的書。第三方紀錄的保存與刪除程序：（待公布）。
English
Operator: MOTING Engineering Team. Contact: [email protected]. Effective date: 2026-11-13. M1 has no accounts, payments, paid weekly quotas, or cloud library sync.
Data on your device
IndexedDB (moting-web-r1) holds books, chapter text and repair backups, titles, authors, source URLs, reading positions and timestamps, bookmarks, and notes. localStorage holds voice/reading settings, UI language, last book ID, reading plans and completion times, the background-playback hint, and a small recovery journal containing only a book ID, position, and time. These do not automatically sync between devices.
Cache Storage holds offline app resources. Mobile share text is temporarily placed in moting-share and removed when consumed; unread shares may remain until reopening or clearing site data. Clicking Send to MOTING passes visible/selected text, title, and URL from the current page for local processing. TXT/EPUB and clipboard imports are also parsed locally.
Network services
URL imports send the requested URL to a Cloudflare Worker, which checks source restrictions, DNS, robots.txt, and redirects, and returns public page content. Source sites and network providers may observe requests. MOTING does not keep or redistribute books or chapter text on its servers or operate a server library; HTML is processed transiently within a request. Robots rules may be cached for about one hour and challenge status for about 30 minutes.
Free playback uses browser/OS speechSynthesis. Some system voices use network services; their providers' privacy terms apply, and offline processing is not guaranteed.
Owner-only site Azure playback sends spoken text segments and voice settings through the Worker to Microsoft Azure. Generated audio can be cached under a hash in Cloudflare Cache API with a maximum configured lifetime of 30 days, subject to early eviction. This is not a public book/audio distribution service; access is checked before cache reads. Playback audio also resides temporarily in browser memory. Bring-your-own Azure sends text and credentials directly from the browser to Microsoft. Only an explicit remember choice stores the key and region encrypted with AES-GCM in moting-key-vault IndexedDB. Scripts in the browser can still use this credential; encryption does not protect against someone using that profile or a malicious extension.
Cookie, logs, and deletion
Successful owner verification sets moting_pass, an HttpOnly, Secure, SameSite=Strict cookie scoped to /api/, lasting 180 days and renewable on use when fewer than 60 days remain. It contains an expiry and signature, not the access code. Legacy settings may contain a code until migration/verification clears it. Anonymous users need no pass.
The Worker briefly counts requests by IP in isolate memory. Error logs contain a request ID, API path, stage, and error type, not book text. Cloudflare infrastructure may process IPs, times, URLs, and access/security logs. The owner must confirm enabled logs, retention, and access: (to be announced). Providers may process data internationally.
Advertising and cookies
Non-reader public pages may display third-party ads via Google AdSense. Google and its partners may use cookies or device identifiers for ad serving and measurement. Manage your ad preferences through Google Ads Settings and see Google advertising policies.
Imported book text and reading progress stay local in your browser and are never shared with ad networks. Ads do not appear inside the reader. Text processing for speech services follows the network-services disclosure above.
Deletion and contact
Delete books in Settings. Reading plans, preferences, offline caches, and personal Azure credentials require separate removal, or clear all site data in the browser. Revoke device access to remove the cookie. Export your own backup before deletion. Contact [email protected] for requests concerning personal data held by the operator; do not send credentials or complete copyrighted books. Third-party retention/deletion procedures: (to be announced).