Data processed on your device

本机处理的数据

To save and switch website login states, LoginFlip processes applicable cookies, localStorage for the current full website origin, the active tab URL, account names, and website aliases. This data may include sensitive credentials capable of signing in to an account.

LoginFlip 为保存和切换网站登录状态，在使用相关功能时读取适用网站的 Cookie、当前完整网站地址的 localStorage、标签页 URL，以及用户填写的账号名称与网站别名。这些内容可能含有足以直接登录账号的敏感凭据。

LoginFlip has no product account, developer server, cloud sync, telemetry, advertising, or third-party analytics SDK. Account data is not uploaded, sold, or shared with the developer or third parties. Websites still receive their own applicable cookies when Chrome opens or refreshes them; LoginFlip is not an anonymity tool.

当前版本没有产品账号、开发者服务器、云同步、遥测、广告或第三方分析 SDK。账号数据不会上传、出售或分享给开发者或第三方。Chrome 打开或刷新网站时，网站仍会按照自身规则接收适用 Cookie；LoginFlip 不是匿名浏览工具。

Why permissions are required

为什么需要这些权限

• cookies: capture, clear, restore, and verify applicable regular and current same-site partitioned cookies.
• storage: keep accounts, preferences, workflow state, and limited recovery data locally. LoginFlip does not use storage.sync.
• tabs: identify the current website, associate accounts with tabs, open websites, reload pages, and activate linked tabs.
• scripting: read and restore localStorage on an accessible page after checking its exact origin.
• http://*/* and https://*/*: support ordinary websites selected by the user and applicable parent-domain cookies. LoginFlip does not automatically capture every visited website.

• cookies：读取、清除、恢复和校验适用的普通 Cookie，以及当前顶层网站同站上下文的分区 Cookie。
• storage：在本机保存账号、设置、流程与有限恢复数据；不使用 storage.sync。
• tabs：识别当前网站、关联账号与标签页、打开网站、刷新页面和激活关联标签。
• scripting：核对网页完整 origin 后，在可访问页面中读取和恢复 localStorage。
• http://*/* 与 https://*/*：支持用户选择的普通网站及其适用父域 Cookie；LoginFlip 不会自动保存每个访问网站。

Storage and retention

保存位置与期限

• Saved accounts, names, aliases, and preferences remain in Chrome extension local storage until the user deletes them or uninstalls LoginFlip.
• At most one previous snapshot per account is retained and cleaned after 24 hours on a later initialization or write.
• At most one failed-switch recovery record is held in session storage for up to 24 hours and may disappear earlier when Chrome or the extension restarts.
• Pending workflows, drafts, search, and tab associations use session storage and are not guaranteed across a browser restart.
• An account explicitly saved from an incognito window remains in extension local storage after the incognito window closes.

• 已保存账号、名称、别名与设置保存在 Chrome 扩展本地存储中，直到用户删除或卸载 LoginFlip。
• 每个账号最多保留一份上一快照，并在 24 小时后于后续初始化或写入时清理。
• 切换失败恢复记录最多一份，保存在会话存储中不超过 24 小时；Chrome 或扩展重启后可能更早消失。
• 待处理流程、草稿、搜索和标签关联使用会话存储，不保证跨浏览器重启保留。
• 用户在无痕窗口中主动保存的账号，在无痕窗口关闭后仍会保留在扩展本地存储中。

Backup protection

备份保护

Password-encrypted backup is recommended. The passphrase is used locally for that operation and is not stored or uploaded. Holding an encrypted file still allows offline guessing of a weak passphrase, so use a unique long passphrase. A plain JSON backup may contain usable login credentials.

推荐使用口令加密备份。口令只在本机本次操作中使用，不保存、不上传。持有加密文件的人仍可离线猜测弱口令，因此请使用独特的长口令。明文 JSON 可能包含可直接登录的凭据。

Backup encryption does not add separate encryption to the live database in Chrome local storage and cannot protect browser data from malware or another party with device-level access.

备份加密不会给 Chrome 本地存储中的运行数据库额外加密，也无法防止恶意软件或具有设备级访问权限的其他人读取浏览器数据。

Deletion and user control

删除与用户控制

Users can delete one account, all accounts for a website, previous snapshots, or failure-recovery data from LoginFlip, and can disable or uninstall the extension. Exported backup files remain in the location chosen by the user and must be deleted separately.

用户可以删除单个账号、某网站的全部账号、上一快照或失败恢复数据，也可以停用或卸载扩展。导出的备份文件保留在用户选择的位置，需要单独删除。

Deleting local data does not sign out or revoke a server-side account. Use the website's own account-security controls when revocation is required.

删除本地数据不等于退出网站或撤销服务端账号；需要撤销时，请使用网站自身的账号安全功能。

Publisher, compliance, and contact

发布者、合规与联系

Publisher: qingtan, individual developer and non-trader. Privacy contact: xinning000@gmail.com.

发布者：qingtan，个人开发者、非交易者。隐私联系邮箱：xinning000@gmail.com。

LoginFlip's use of information received from Chrome APIs complies with the Chrome Web Store User Data Policy, including Limited Use requirements. LoginFlip does not sell user data or use it for advertising, credit decisions, or purposes unrelated to its single purpose, and it does not transfer login snapshots to third parties or developer-operated servers.

LoginFlip 对从 Chrome API 获得的信息的使用符合 Chrome Web Store User Data Policy，包括 Limited Use 要求。LoginFlip 不出售用户数据，不将其用于广告、信用评估或与扩展单一用途无关的目的，也不向第三方或开发者服务器传输登录快照。