隐私政策

朵米片单（DomiBuddy Lists）网站与朵米助手（DomiBuddy Helper）浏览器扩展 · 更新于 2026-11-12 · English

一句话

我们不收集、不出售任何个人信息。孩子的片单和观看记录默认只保存在你自己的浏览器里；只有你主动开启"多设备同步"时，片单才会加密后上传，我们无法读取内容。

朵米片单网站

• 视频片单、分组、家长密码（只存哈希值）、每日观看时长和观看进度，都只保存在本浏览器的本地存储（localStorage）里，不发送到我们的服务器。
• 不使用任何统计、广告或第三方追踪代码。
• 播放视频时，视频由 YouTube、哔哩哔哩等网站的官方播放器加载，这些网站按照它们自己的隐私政策处理播放数据。
• "分享片单"时，片单内容（视频编号、标题、封面、合集信息）会保存到我们的服务器，用来生成短链接和聊天软件里的预览卡片；不包含孩子的观看记录或任何家庭信息。我们只统计每个分享片单被打开和导入的次数。

多设备同步（可选）

• 默认关闭，由家长在设置里主动开启。不需要注册账号，不收集邮箱、姓名或其他身份信息。
• 片单、分组、家长密码（哈希）和家长设置在你的设备上用 AES-GCM 加密后才上传到 api.domibuddy.com。加密密钥只保存在你的设备里，我们无法解密。
• 为了让家长查看和移除设备，服务器会以明文保存：每台设备的名称（例如"iPad · Safari"，可以改名）、设备类型（家长 / 孩子）、加入时间和最近同步时间。
• 观看进度、每日已看时长和界面语言不会同步，只保存在各自设备上。
• 开启同步时会生成一个恢复码。服务器只保存"用恢复码加密过的同步密钥"和恢复码的哈希，没有恢复码无法解开；恢复码只在你的设备上显示。
• 家长可以随时移除设备（可选同时清空那台设备上的片单），或删除云端数据；删除后服务器上的密文、设备记录和恢复信息会一并删除。

朵米助手浏览器扩展

• 只在朵米片单的网址上工作（lists.domibuddy.com 等），其他网页上什么都不做。每个网址第一次使用时需要你确认允许。
• 它替朵米片单网页向视频网站（哔哩哔哩、YouTube、腾讯视频、优酷、百度网盘等）请求视频标题、封面、合集列表和播放地址。请求会带上你在这些网站上的登录状态（Cookie 由浏览器自动附带），扩展和网页都读取不到 Cookie 的内容。
• 请求结果只交给发出请求的朵米片单页面，不保存，也不发送给我们或任何第三方。
• 扩展只在本地保存一项设置：你已经允许过的朵米片单网址列表。
• 扩展不收集浏览记录、个人身份信息、位置、通讯内容、健康或财务信息，也不用于广告或信用评估。

儿童隐私

朵米片单由家长设置和管理。我们不向儿童收集姓名、年龄、照片、联系方式或任何其他个人信息，也不对儿童做任何画像或推荐。

联系我们

对隐私有任何疑问，请在 GitHub 上提交问题。

Privacy Policy (English)

DomiBuddy Lists (朵米片单) website and DomiBuddy Helper (朵米助手) browser extension · Updated 2026-11-12

In short: we don't collect or sell any personal information. Your child's lists and watch history stay in your own browser by default; only if you turn on multi-device sync is the list uploaded, encrypted, and we can't read it.

The website

• Video lists, groups, the parent PIN (stored only as a hash), daily watch time and progress are kept in this browser's local storage and are never sent to our servers.
• No analytics, advertising or third-party tracking code.
• Videos play in the official players of YouTube, Bilibili and other sites, which handle playback data under their own privacy policies.
• When you share a list, its contents (video IDs, titles, thumbnails, series info) are stored on our server to make a short link and chat preview card; never watch history or family information. We only count how often each shared list is opened and imported.

Multi-device sync (optional)

• Off by default; a parent turns it on in Settings. No account, and no email, name or other identity information is collected.
• The list, groups, parent PIN hash and parent settings are encrypted with AES-GCM on your device before upload to api.domibuddy.com. The key stays on your devices; we can't decrypt it.
• So parents can see and remove devices, the server stores in plain text each device's name (such as “iPad · Safari”, which you can rename), its type (parent / child), when it joined, and when it last synced.
• Watch progress, today's watch time and interface language are not synced; they stay on each device.
• Turning on sync creates a recovery code. The server keeps only the sync key encrypted with that code and a hash of the code; without the code it can't be opened. The code is shown only on your device.
• Parents can remove a device at any time (optionally clearing its list) or delete the cloud copy, which deletes the ciphertext, all device records and the recovery data.

The browser extension

• It runs only on DomiBuddy sites (such as lists.domibuddy.com) and does nothing on other pages. Each site must be allowed by you the first time.
• It requests video titles, thumbnails, collection lists and stream addresses from video sites (Bilibili, YouTube, Tencent Video, Youku, Baidu Netdisk and others) on behalf of the DomiBuddy page, using your own sign-ins on those sites. The browser attaches cookies automatically; neither the extension nor the page can read them.
• Results go only to the DomiBuddy page that asked for them. Nothing is stored or sent to us or any third party.
• The only thing the extension stores locally is the list of DomiBuddy sites you have allowed.
• It does not collect browsing history, personally identifiable information, location, communications, health or financial data, and is not used for advertising or creditworthiness.

Children's privacy

DomiBuddy Lists is set up and managed by parents. We do not collect names, ages, photos, contact details or any other personal information from children, and we do not profile children or make recommendations to them.

Contact

For any privacy question, please open an issue on GitHub.