本政策说明 ZaFeed（以下简称「我们」）在你使用网站、会员中心与行情接口时收集哪些信息、如何使用与保存，以及你可以怎样管理。
1. 我们收集的信息
- 账户信息：邮箱、加密保存的密码（只保存不可还原的哈希）、会员 UID、界面与邮件语言、通知开关；使用 Google 或 GitHub 登录时，还会保存该平台账号的标识与邮箱。
- 登录与安全：登录时间、IP 地址、浏览器信息、登录会话；会员中心里的活动记录（登录、修改密码、下单等）。
- 订单与付款：订单内容与金额、付款地址、链上交易哈希。区块链上的转账记录本身是公开的。
- 接口使用：市场 Key 的调用次数、WebSocket 连接的建立与断开时间、来源 IP。用于计算用量、连接上限与安全检测。
- 客服与通知：你提交的工单内容、我们发给你的邮件记录。
- 公告订阅：如果你在公告页订阅更新，我们会保存订阅邮箱与确认状态。
2. 使用目的
- 提供与维护服务：登录、开通市场、生成与校验市场 Key、核对到账、发送验证码与到期提醒。
- 安全：识别异常登录、同一个 Key 在多个 IP 使用、频繁失败的请求，必要时停用 Key 或封禁 IP。
- 客服与对账：处理工单、退款与付款问题。
- 我们不会出售你的个人信息，也不会把它用于广告。
3. 浏览器存储
网站使用浏览器本地存储保存登录状态、明暗主题、界面语言等设置。我们没有使用第三方广告或统计追踪代码。
4. 共享与第三方服务
- 邮件服务：通过邮件服务商（如 Resend、阿里云邮件推送）发送邮件，会向其提供收件邮箱与邮件内容。
- 第三方登录：选择 Google 或 GitHub 登录时，由该平台完成身份验证。
- 区块链查询：通过公开的区块链数据接口查询收款地址的到账记录。
- 法律法规要求或有权机关依法要求时，我们会在必要范围内提供相关信息。
5. 保存期限
- 账户信息在账户存续期间保存。
- 注销账户后立即停止服务；30 天后邮箱改为匿名值，密码、第三方登录绑定、登录会话与活动记录删除。订单与付款记录按财务与法律要求继续保留。
- 邮件发送记录保存 90 天；数据库备份保存 14 天后自动删除。
6. 你的权利
- 在会员中心查看账户信息、订单、活动记录与在线设备；修改密码、登录邮箱、语言与通知设置；清空活动记录。
- 随时注销账户（会员中心「账户设置 → 账户」）。
- 退订公告邮件：每封公告邮件底部都有退订链接。
- 其他请求（例如导出或更正数据）请提交工单。
7. 安全
密码与验证码只保存哈希；全站使用 HTTPS；第三方服务的密钥加密保存；后台操作有记录，高危操作需要两步验证。没有任何系统能保证绝对安全，发现异常时请立即修改密码、轮换 Key 并联系我们。
8. 政策更新与联系
本政策更新时会修改本页日期，重要变化会通过公告或邮件通知。有任何问题，请提交工单或通过页面右侧的客服联系我们。
This policy explains what information ZaFeed ("we", "us") collects when you use the website, the Member Center and the API, how we use and store it, and how you can manage it.
1. Information we collect
- Account information: email address, password (we store only an irreversible hash), member UID, interface and email language, and notification settings. If you sign in with Google or GitHub, we also store that account's identifier and email address.
- Sign-in and security: sign-in times, IP addresses, browser information and sign-in sessions, plus the activity log in the Member Center (sign-ins, password changes, orders and so on).
- Orders and payments: order contents and amounts, payment addresses and on-chain transaction hashes. Transfers on the blockchain are public by nature.
- API usage: call counts for each market Key, when WebSocket connections are opened and closed, and source IP addresses. We use these to calculate usage and connection limits and for security checks.
- Support and notifications: the tickets you submit and records of the emails we send you.
- News subscription: if you subscribe to updates on the News page, we store the subscribed email address and its confirmation status.
2. How we use it
- To provide and maintain the service: signing in, activating markets, issuing and verifying market Keys, matching payments, and sending verification codes and expiry reminders.
- Security: detecting unusual sign-ins, a Key being used from many IP addresses, or repeatedly failing requests, and disabling Keys or blocking IP addresses when necessary.
- Support and reconciliation: handling tickets, refunds and payment issues.
- We do not sell your personal information or use it for advertising.
3. Browser storage
The website uses your browser's local storage to keep your sign-in state and settings such as the light or dark theme and the interface language. We do not use any third-party advertising or analytics tracking code.
4. Sharing and third-party services
- Email delivery: emails are sent through email providers (such as Resend or Alibaba Cloud DirectMail), which receive the recipient address and the email content.
- Third-party sign-in: if you choose to sign in with Google or GitHub, that platform verifies your identity.
- Blockchain lookups: we use public blockchain data services to check payments received at our payment addresses.
- When required by law or lawfully requested by a competent authority, we provide relevant information to the extent necessary.
5. Retention
- Account information is kept for as long as your account exists.
- When you delete your account, the service stops immediately. After 30 days your email address is replaced with an anonymous value, and your password, third-party sign-in links, sign-in sessions and activity log are deleted. Order and payment records are kept as required for accounting and legal purposes.
- Email delivery records are kept for 90 days. Database backups are deleted automatically after 14 days.
6. Your rights
- View your account information, orders, activity log and signed-in devices in the Member Center; change your password, sign-in email, language and notification settings; and clear your activity log.
- Delete your account at any time (Member Center → Settings → Account).
- Unsubscribe from news emails: every news email has an unsubscribe link at the bottom.
- For other requests (such as exporting or correcting your data), please open a ticket.
7. Security
Passwords and verification codes are stored only as hashes, the whole site uses HTTPS, keys for third-party services are stored encrypted, and admin actions are logged, with two-step verification required for high-risk operations. No system can guarantee absolute security. If you notice anything unusual, change your password, rotate your Keys and contact us right away.
8. Updates and contact
When this policy is updated, we change the date on this page, and important changes are announced in News or by email. If you have any questions, please open a ticket or contact support using the panel on the right side of the page.