隐私政策
1. 我们是谁
XVDown 是一款在浏览器本地运行的免费 Chrome 扩展，用于帮助你把 X（Twitter）上的视频/GIF 保存到本机。
2. 单一用途
本扩展的唯一用途是：在你浏览 x.com / twitter.com 时，应你的主动点击，下载当前页面中的视频媒体并在本地保存与管理记录。我们不会将扩展用于广告追踪、挖矿或无关的数据收集。
3. 我们收集什么
默认情况下，我们（开发者服务器）不收集、不接收、不存储你的视频文件、推文内容或浏览历史。
- 仅存于你的浏览器本地：下载记录（推文元数据、文件路径/保管库引用）、语言设置、存储方式和可选的访问密码哈希。
- 私密保管库：视频文件保存在 Chrome 扩展的 Origin Private File System（本机），不会上传到我们的服务器。
- 访问密码：如你设置，仅以 PBKDF2-SHA256 哈希形式存在本地，我们无法获知明文。
4. 与第三方的通信
- video.twimg.com：下载你点击保存的视频文件（由 X/Twitter 的 CDN 提供）。
- Ko-fi 与 Buy Me a Coffee：官网赞助区域会加载第三方赞助组件；只有在访问官网相关区域时，相关服务商可能接收基本的网络请求信息。捐赠交易由对应平台处理，XVDown 不接触支付信息。
- 扩展不会向我们自建的分析或日志服务器上报使用数据。
5. 页面脚本说明（审核透明）
为识别视频地址，扩展在 x.com 页面主世界挂钩 fetch / XHR，只解析该站点已有的 GraphQL 响应中的媒体字段。我们不读取你的密码、不修改发帖内容、不代表你发起登录请求。
6. 权限说明
storage/unlimitedStorage：本地记录与保管库。downloads：可选的「普通下载」模式写入系统下载目录。alarms：下载过程保活。- 主机权限仅限视频 CDN（video.twimg.com）。
7. 数据删除
你可在扩展「设置」中清空记录与保管库，或移除访问密码。卸载扩展或在 Chrome 中清除扩展数据将删除本地全部 XVDown 数据。
8. 儿童
本产品不面向 13 岁以下儿童，我们不故意收集儿童个人信息。
9. 政策变更
更新会发布在本页面并调整「最后更新」日期。继续使用视为了解变更。
10. 联系
隐私相关问题请通过 Chrome 商店扩展页面的支持渠道联系开发者（上架后可见）。
Privacy Policy
1. Who we are
XVDown is a free Chrome extension that runs locally in your browser to help you save videos/GIFs from X (Twitter) to your device.
2. Single purpose
The extension’s sole purpose is: while you browse x.com / twitter.com, on your explicit click, download video media from the page you are viewing and manage those files/records locally. It is not used for ads, mining, or unrelated data collection.
3. What we collect
By default, we (the developer) do not collect, receive, or store your video files, tweet contents, or browsing history on our servers.
- Stored only on your device: download records (tweet metadata, file/vault references), language preference, save mode, and an optional access-password hash.
- Private vault: videos stay in the extension’s Origin Private File System on your machine and are not uploaded to us.
- Access password: if set, only a PBKDF2-SHA256 hash is stored locally; we never receive the plaintext.
4. Third-party communications
- video.twimg.com: to fetch the video file you chose to download (X/Twitter CDN).
- Ko-fi and Buy Me a Coffee: the website’s support area loads third-party sponsor components. When you visit that area, those providers may receive basic network request information. Donations are processed by the respective providers; XVDown does not handle payment details.
- The extension does not phone home to our own analytics or logging servers.
5. Page script transparency
To discover video URLs, the extension hooks fetch / XHR in the page’s main world on x.com and parses media fields already present in that site’s GraphQL responses. It does not read your passwords, alter posts, or perform login on your behalf.
6. Permissions
storage/unlimitedStorage: local records and vault.downloads: optional “normal downloads” mode to the system Downloads folder.alarms: download keep-alive.- Host permissions are limited to the video CDN (video.twimg.com).
7. Deletion
You can clear records/vault and remove the password in Settings. Uninstalling the extension or clearing extension data removes all local XVDown data.
8. Children
The product is not directed at children under 13. We do not knowingly collect their personal information.
9. Changes
Updates will be posted on this page with a new “Last updated” date. Continued use means you are aware of the changes.
10. Contact
For privacy questions, use the support channel on the Chrome Web Store listing once published.