感谢使用 Oryx 浏览器助手（以下简称"本扩展"）。本政策说明本扩展如何处理信息。本扩展由 ProdMind-Ai（以下简称"我们"）开发运营。
本扩展是 Oryx 桌面客户端的受管浏览器组件，提供操作录制、影子学习、页面语义交互与受管浏览器自动化能力。本扩展不向任何远程服务器发送数据：所有连接均仅发生在本机（回环地址 127.0.0.1 / [::1] / localhost 或本地原生消息管道）。我们不收集、不出售、不共享您的个人数据。
仅在您通过 Oryx 桌面客户端授权并主动发起功能时，本扩展可能在本机处理以下信息：
| 信息类型 | 说明 | 处理方式 |
|---|---|---|
| 页面操作事件 | 点击、输入、导航、选择等操作的结构化元数据（元素类型、CSS 选择器、语义标签） | 仅在本机处理，用于录制与影子学习 |
| 表单字段信息 | 表单字段的类型、长度、值类型等元数据 | 敏感字段的值在捕获时即被脱敏替换为 [REDACTED]，仅保留元数据 |
| 剪贴板内容 | 您明确发起剪贴板读写指令时的一次性文本（纯文本 / HTML） | 一次性传递，不保留 |
| API 请求元数据 | 页面 API 请求的 URL、方法、状态（不含请求/响应体） | URL 经脱敏处理，分析/遥测类流量被过滤，不采集 |
| 页面上下文 | 当前页可交互元素的语义描述（ARIA 标签、占位符、可见文本） | 仅在本机处理，用于语义交互 |
本扩展内置捕获时脱敏管线（policy capture-privacy.v2）：
password/passwd/passcode/secret/token/api-key/csrf/otp 等字段值一律脱敏；eyJ…）等格式自动识别并脱敏；[REDACTED]；chrome.storage.session（会话级内存存储，浏览器重启即清空）保存：consentAt）；我们不共享、不出售、不转让您的任何信息给第三方。唯一的通信对象是您本机安装的 Oryx 桌面客户端（通过回环 WebSocket 或原生消息通道）。
本扩展不面向 13 周岁以下儿童，不有意收集儿童个人信息。
如本政策发生变更，我们将在本页面发布更新版本并标注生效日期。重大变更将通过扩展更新说明告知。
如对本政策有任何疑问，请联系：3145421132@qq.com ｜ China。
Thank you for using Oryx Browser Assistant (the "Extension"). This policy explains how the Extension handles information. The Extension is developed and operated by ProdMind-Ai ("we").
The Extension is the managed browser component of the Oryx desktop client, providing operation recording, shadow learning, semantic page interaction and managed browser automation. The Extension sends no data to any remote server: all connections occur only on your device (loopback addresses 127.0.0.1 / [::1] / localhost or the local native messaging pipe). We do not collect, sell or share your personal data.
Only when you authorize through the Oryx desktop client and actively invoke a feature, the Extension may process the following information locally:
| Type | Description | Handling |
|---|---|---|
| Page operation events | Structured metadata of clicks, input, navigation and selection (element type, CSS selector, semantic label) | Processed locally only, for recording and shadow learning |
| Form field information | Metadata of form fields: type, length, value type | Sensitive field values are redacted to [REDACTED] at capture time; only metadata is kept |
| Clipboard content | One-time text (plain text / HTML) when you explicitly issue clipboard read/write commands | Passed through once, not retained |
| API request metadata | URL, method, status of page API requests (no request/response bodies) | URLs are sanitized; analytics/telemetry traffic is filtered out |
| Page context | Semantic descriptions of interactive elements (ARIA labels, placeholders, visible text) | Processed locally only, for semantic interaction |
The Extension has a built-in redaction pipeline at capture time (policy capture-privacy.v2):
password/passwd/passcode/secret/token/api-key/csrf/otp values are always redacted;eyJ…) are auto-detected and redacted;[REDACTED];chrome.storage.session (in-memory session storage, cleared on browser restart) for:We do not share, sell or transfer any of your information to third parties. The only communication counterpart is the Oryx desktop client installed on your own device (via loopback WebSocket or the native messaging pipe).
The Extension is not directed at children under 13 and does not knowingly collect personal information from children.
If this policy changes, we will post an updated version on this page with a new effective date. Material changes will also be communicated via extension release notes.
For questions about this policy: 3145421132@qq.com ｜ China.