1. 本地数据与用途

收藏与足迹：应用在本机保存您收藏的街景、文件夹及名称，以及最近最多 100 处成功访问的街景记录。记录可包含所浏览地点的坐标、道路或地点名称、全景编号、影像来源与拍摄日期、观看朝向，用于收藏管理、浏览返回和再次打开原期影像。这些是虚拟街景浏览记录，不是对您现实出行轨迹的定位记录。

设置与缓存：画质、来源选择、环境声音等偏好，以及离线地名库、语音模型等运行资源保存在设备上，用于恢复设置和提供功能。收藏文件可能保留本地恢复副本或旧版本迁移备份。影像、检索结果及百科内容也会在运行期间用于显示和临时缓存。

诊断：本机引擎及系统日志可能包含设备或运行环境、错误、请求地址和网页地址，用于排查故障；应用不自动向我们上传诊断日志。仅当您主动提供支持邮件、日志或截图时，我们才会收到这些材料。

2. 地图、街景与其他联网服务

应用直接通过 HTTPS 连接内容服务及其资源服务器，不通过 FFSky Studio 的街景中转服务器。服务方会收到您的 IP 地址、请求时间、请求资源及请求头信息；这些信息可能被服务方记录。应用不会在地图或街景请求中附带您的百度／腾讯账号、登录 Cookie 或广告标识符。

百度地图与街景

提供底图、街景覆盖、查点、全景影像及历史影像。请求包含所浏览区域的地图瓦片位置、目标地点坐标、全景编号或影像块编号。即使选择腾讯街景，百度底图仍可能加载。参见百度地图隐私政策。

腾讯地图街景

提供查点、全景、相邻点及历史影像。请求包含目标地点坐标、全景编号或影像块编号。自动选择影像时，应用可能向百度和腾讯同时或先后查询，以比较可用影像与拍摄日期。参见腾讯隐私保护平台及产品指引。

地点搜索

中文地名匹配使用随应用提供的离线地名库；选择地点后，坐标仍需发送至地图或街景服务。英文搜索将您主动提交的地名文字发送至 OpenStreetMap Foundation 的 Nominatim 服务以获得候选地点。参见OSMF 隐私政策。请勿在搜索框输入身份证号、口令等无关敏感信息。

附近百科与原文网页

中文附近地点在本机匹配后，应用向 360 百科请求相关地名或文章；英文附近百科向 Wikimedia／Wikipedia 发送当前所浏览街景的坐标以查找附近文章。打开原文后，网站及其资源提供方会接收网页和资源请求。参见360 百科隐私政策及Wikimedia 隐私政策。

上述坐标是您选择、搜索或随机浏览的街景地点，不是从设备 GPS 读取的真实位置。IP 地址仍可能被网络服务用于推断大致地区。

内嵌网页：原文浏览器允许网页 JavaScript 和本地存储；网站可能使用第一方 Cookie 及其自身的数据处理机制。应用内浏览器阻止第三方 Cookie、网页摄像头／麦克风权限及文件上传；这不意味着第三方网页没有资源请求或其他数据处理。关闭阅读器结束显示；已存储的网站数据需通过清除应用存储删除。打开外部浏览器时，由该浏览器的设置管理网站数据。

各服务独立处理其收到的请求，其保存地点、期限及权利渠道以自身政策为准。使用境外服务（如 Nominatim、Wikipedia 或 Gmail）可能涉及在您所在国家或地区之外处理请求。您可以选择不使用相应搜索、百科或邮件功能。

3. 可选的离线语音

仅在您主动启用语音搜索并授予麦克风权限后，应用才采集本次语音，并使用随包 Vosk 模型在设备上识别。应用不保存录音文件，不上传录音，也不调用云端语音识别。录音用于本次识别，完成、取消或离开前台后停止。

识别文字先展示供您确认；确认后按照第 2 节所述语言和搜索流程处理文字或选定地点。离线识别不代表后续地点搜索和街景加载全部离线。您可以拒绝或在设备设置中撤销麦克风权限，继续使用键盘、地图和随机浏览。

4. VR 输入、设备权限与平台

VR 输入：应用通过 OpenXR 运行时处理头部与手柄姿态、按键，以及受支持设备上的手部关节和捏合手势，用于视角渲染、射线选择和界面操作。这些输入在本机处理，原始手部骨骼和动作跟踪数据不由应用保存或上传给我们，也不用于生物识别或广告画像。街景浏览朝向可能作为第 1 节所述本地浏览记录保存。

网络：用于获取地图、街景及您使用的联网内容；麦克风：仅用于您主动发起的离线语音搜索；手部追踪：在支持的平台上用于裸手显示和交互，可通过平台设置管理。应用不申请 GPS 定位、通讯录、摄像头录制或原始眼动追踪访问，也不拍摄或上传您的现实环境画面。

Meta、PICO 及设备系统独立提供商店、平台账号、运行时、系统键盘和设备服务，并可能按其政策处理购买、设备及诊断信息。我们不索取您的平台账号密码或好友列表。使用系统键盘时，输入还受系统及所选输入法的隐私设置约束。参见Meta 隐私政策与PICO 隐私政策。

5. 本页面与联系支持

本隐私页面读取浏览器语言，并仅在浏览器本地存储中保存语言偏好（chinawander-language）。页面不嵌入广告、统计追踪器或第三方字体；点击第三方链接后由对应网站处理请求。网站托管服务可能为提供页面和保障安全处理 IP、请求时间、浏览器信息及访问日志，保存期限取决于托管配置。清除本站数据可删除语言偏好。

当您发邮件给 ffskyteam@gmail.com 时，FFSky Studio 会收到您的邮箱地址、邮件内容及自愿提供的附件，用于答复、处理隐私申请和解决问题。邮件经 Gmail 服务处理，参见Google 隐私政策。请只提供处理请求所需的信息，不要发送口令或不必要的私人资料。

6. 保存、安全与披露

收藏和偏好保留在设备上，直至您删除、替换或清除应用存储；足迹随最近 100 处记录滚动更新。本地备份可能保留已修改或已移除的旧记录，完整删除方法见第 7 节。运行中的语音缓冲、姿态及临时内容在不再需要时释放；第三方网页的 Cookie／本地存储可能跨会话保留。

我们仅在处理支持或隐私请求所需的期间保留您主动提供的邮件材料；如适用法律要求继续保留，将限制其用途，并在不再需要时删除或匿名化。我们使用应用私有存储、HTTPS 传输和系统权限边界保护数据；本地收藏不承诺另行加密，设备的解锁和备份安全也会影响保护程度。

我们不出售个人信息，不将本地收藏、录音或原始动作数据提供给广告商。网络内容服务、平台服务、网站托管和邮件支持的数据流向已在上文说明。只有在履行适用法律义务、响应有效法律程序或保护合法权益确有必要时，我们才会依法披露实际持有且必要的信息。

7. 删除数据与行使权利

• 收藏：可在应用中取消或删除收藏。删除文件夹会将其中内容移至上一级，不等于删除其中的收藏。
• 完整本地数据：在设备系统设置中对 ChinaWander 执行“清除应用存储／清除数据”，或卸载应用以移除应用私有数据，包括收藏、足迹、偏好、本地备份及内嵌网页存储；仅清缓存不等于清除全部数据。桌面版关闭后可删除其用户数据目录 %APPDATA%\ChinaWander；系统重定向时以实际用户数据位置为准。自行另存或系统保留的备份需单独删除。
• 权限与网站数据：可在系统设置中撤销麦克风或管理手部追踪权限；本页面的语言偏好可通过浏览器的本站数据管理删除。
• 我们持有的信息：向 ffskyteam@gmail.com 发送主题为“ChinaWander privacy data request”的邮件，提出访问、更正、删除、撤回同意或其他适用法律赋予的请求。请说明应用名称和需处理的信息；我们可能要求必要的最小身份核验，并在适用法律规定的期限内处理。

无需注销 FFSky Studio 账号，因为应用不提供此类注册。我们无法远程读取或删除仅保存在您设备上的收藏和足迹。第三方独立保存的账号、请求日志或其他信息，请通过对应服务的隐私渠道处理。

8. 未成年人

未成年人应在监护人指导下使用，并遵守所在地区法律及商店、设备平台的年龄要求。我们不以收集儿童个人信息为目的提供服务。如您认为儿童向我们提供了个人信息，请联系 ffskyteam@gmail.com，我们将核查并依法处理和删除相关信息。

9. 更新与联系

数据处理方式变化时，我们会更新本政策及日期，并在适用法律要求时另行通知或取得同意。中英文版本说明相同的应用与处理方式。隐私问题及权利申请均由 FFSky Studio 处理：ffskyteam@gmail.com。

1. Local data and purposes

Favorites and history: the app stores your saved street views, folders and names, and up to 100 recently visited street views on your device. Records may include the viewed location’s coordinates, road or place name, panorama identifier, imagery source and date, and viewing direction. This enables collection management, browsing back and reopening the original imagery. These are virtual street-view browsing records, not GPS records of your real-world travel.

Settings and cache: image quality, source selection, ambient sound preferences and resources such as the offline gazetteer and voice model are stored on your device to provide features and restore preferences. Collection files may retain recovery copies or backups from older formats. Imagery, search results and encyclopedia content are also processed for display and temporary caching during use.

Diagnostics: local engine and system logs may contain device/runtime information, errors, request URLs and webpage addresses for troubleshooting. The app does not automatically upload diagnostic logs to us. We receive support messages, logs or screenshots only when you choose to send them.

2. Maps, street views and online services

The app connects directly over HTTPS to content services and their resource servers, without an FFSky Studio street-view relay. Providers receive your IP address, request time, requested resources and request headers, which they may log. Map and street-view requests do not include your Baidu/Tencent account, login cookies or advertising identifiers.

Baidu Maps and street view

Provides the base map, coverage, location lookups, panoramas and historical imagery. Requests include map tile positions, target coordinates, panorama IDs or image tile IDs. The Baidu base map may still load when you select Tencent imagery. See the Baidu Maps Privacy Policy.

Tencent Maps street view

Provides lookups, panoramas, adjacent points and historical imagery. Requests include target coordinates, panorama IDs or image tile IDs. Automatic imagery selection may query both Baidu and Tencent, simultaneously or sequentially, to compare available imagery and capture dates. See the Tencent Privacy Protection Platform and product notices.

Place search

Chinese place matching uses the bundled offline gazetteer; selecting a place still sends its coordinates to map or street-view services. English search sends the place text you submit to the OpenStreetMap Foundation’s Nominatim service for candidates. See the OSMF Privacy Policy. Do not enter unrelated sensitive information, such as identification numbers or passwords.

Nearby encyclopedia and original pages

Chinese nearby places are matched locally, then related place names or articles are requested from 360 Baike. English nearby articles are requested from Wikimedia/Wikipedia using the coordinates of the street view you are browsing. Opening an original page sends webpage and resource requests to that website and its resource providers. See the 360 Baike Privacy Policy and Wikimedia Privacy Policy.

These coordinates describe the street-view location you selected, searched for or randomly explored, not your physical location read from device GPS. Network services may still infer an approximate region from your IP address.

Embedded webpages: the original-page browser enables website JavaScript and local storage. Sites may use first-party cookies and their own data practices. The in-app browser blocks third-party cookies, website camera/microphone permissions and file uploads; this does not prevent all third-party resource requests or data processing. Closing the reader ends display; clear app storage to remove persisted website data. If you open an external browser, that browser’s settings govern website data.

Providers independently handle received requests; their policies govern storage locations, retention and rights requests. Services such as Nominatim, Wikipedia or Gmail may process requests outside your country or region. You can choose not to use the corresponding search, encyclopedia or email features.

3. Optional offline voice recognition

The app captures speech only after you start voice search and grant microphone permission. Recognition runs on your device using the bundled Vosk model. The app does not save audio recordings, upload recordings or use cloud speech recognition. Audio is used for that recognition session; capture stops on completion, cancellation or leaving the foreground.

Recognized text is shown for your confirmation before the language-dependent search and place-selection flow described in section 2 processes the text or selected location. Offline recognition does not make subsequent place search or imagery loading entirely offline. You may decline or revoke microphone permission in device settings and continue using the keyboard, map and random exploration.

4. VR input, permissions and platforms

VR input: the app uses head/controller poses, buttons and, on supported devices, hand joints and pinch gestures supplied by the OpenXR runtime for rendering, pointing and interface interaction. These inputs are processed locally. The app does not store raw hand skeleton or motion-tracking data, upload it to us, or use it for biometric identification or advertising profiles. Street-view viewing direction may be retained in the local browsing records described in section 1.

Network: obtains maps, street views and online content you use. Microphone: used only for offline voice search you initiate. Hand tracking: displays tracked hands and enables interaction on supported platforms; manage it through platform settings. The app does not request GPS location, contacts, camera recording or raw eye-tracking access, and does not photograph or upload your physical surroundings.

Meta, PICO and device systems independently provide stores, platform accounts, runtimes, system keyboards and device services, and may process purchase, device and diagnostic information under their own policies. We do not ask for platform account passwords or friends lists. System keyboard input is also subject to system and selected input-method privacy settings. See the Meta Privacy Policy and PICO Privacy Policy.

5. This page and support

This privacy page reads your browser language and stores only a language preference in browser local storage (chinawander-language). It embeds no advertising, analytics trackers or third-party fonts. Following external links sends requests to those websites. The web host may process IP addresses, request times, browser information and access logs to serve and protect the site; retention depends on its configuration. Clear this site’s browser data to remove the language preference.

When you email ffskyteam@gmail.com, FFSky Studio receives your email address, message and voluntary attachments to respond, handle privacy requests and resolve issues. Email is processed through Gmail; see the Google Privacy Policy. Send only information needed for your request, without passwords or unnecessary private material.

6. Retention, security and disclosure

Favorites and preferences remain on your device until deleted, replaced or removed by clearing app storage. History rolls over at 100 recent street views. Local backups may retain older edited or removed records; section 7 explains full deletion. Live audio buffers, poses and temporary content are released when no longer needed. Third-party webpage cookies/local storage may persist across sessions.

We retain email material you provide only as needed to handle support or privacy requests. Where applicable law requires further retention, we restrict its use and delete or anonymize it when no longer needed. We use app-private storage, HTTPS and system permission boundaries to protect data. We do not promise additional encryption of local collections; device access and backup security also affect protection.

We do not sell personal information or provide local collections, recordings or raw motion data to advertisers. Content, platform, hosting and email service data flows are described above. Where necessary to meet applicable legal obligations, respond to valid legal process or protect lawful rights, we may disclose only necessary information we actually hold, in accordance with law.

7. Deleting data and exercising rights

• Favorites: unsave or delete favorites in the app. Deleting a folder moves its contents to the parent folder; it does not delete those favorites.
• All local data: use “Clear storage / Clear data” for ChinaWander in device settings, or uninstall the app to remove app-private data, including favorites, history, preferences, local backups and embedded website storage. Clearing cache alone does not remove all data. On desktop, close the app and remove its user data directory, %APPDATA%\ChinaWander, or the actual user data location if redirected by your system. Delete separately saved or system-retained backups separately.
• Permissions and website data: revoke microphone permission or manage hand tracking in system settings. Remove this page’s language preference through your browser’s site-data controls.
• Information we hold: email ffskyteam@gmail.com with the subject “ChinaWander privacy data request” to request access, correction, deletion, withdrawal of consent or other rights available under applicable law. Include the app name and information you want addressed. We may request minimal necessary identity verification and will respond within the time required by applicable law.

No FFSky Studio account closure is needed because the app offers no such registration. We cannot remotely access or delete favorites and history held only on your device. For accounts, request logs or other information independently held by third parties, use those providers’ privacy channels.

8. Minors

Minors should use the app with guardian guidance and follow local law and store/device age requirements. We do not provide the service for the purpose of collecting children’s personal information. If you believe a child has provided personal information to us, contact ffskyteam@gmail.com so we can investigate and handle or delete it as required by law.

9. Changes and contact

When data practices change, we will update this policy and its date, and provide additional notice or obtain consent where required by applicable law. Both language versions describe the same app and practices. FFSky Studio handles privacy questions and rights requests at ffskyteam@gmail.com.