Ember Tab · 隐私说明 / Privacy
Ember Tab 隐私说明Privacy notice
更新：2026-10-01 · 适用于 Ember Tab 0.1.1。Ember Tab 是独立维护的 Aura Tab 非官方 Firefox 移植版。
Updated October 1, 2026. Applies to Ember Tab 0.1.1, an independently maintained, unofficial Firefox port of Aura Tab.
数据会去哪里 / Where data goes
Ember Tab 没有开发者运营的账号、分析、广告或错误报告服务器。但联网功能会直接向您选择的网站和下列服务传输数据。对方通常能看到您的 IP 地址、请求时间及浏览器网络请求信息；其保存期限由对方决定。
Ember operates no account, analytics, advertising or crash-report server. Network features contact the destinations below directly. Recipients normally receive your IP address, request time and browser request information; their retention policies apply.
搜索：您提交的搜索词发往所选搜索引擎，或交由 Firefox 默认搜索处理。
Search terms go to your selected engine, or Firefox's default search service, when you submit a search.
实时联想（默认关闭）：开启后，输入中的文字在短暂停顿后直接发往当前生效的联想服务：Google、Bing、百度、DuckDuckGo、Brave、Yahoo、Yandex 或 Naver。搜索框使用浏览器默认、搜狗或 Ecosia 时，由独立的“联想词来源”选择前五个服务之一；其他引擎跟随搜索框选择。只请求一家，不自动换服务，联想请求不携带网站登录 Cookie。联想词只在当前页面内短暂缓存，不保存到备份。关闭后取消请求；无痕窗口不请求联想。
Live suggestions are off by default. When enabled, typed text goes directly to the active service after a short pause: Google, Bing, Baidu, DuckDuckGo, Brave, Yahoo, Yandex or Naver. Browser default, Sogou and Ecosia use your separately selected source from the first five; other engines follow the search-box selection. Only one service is contacted, without site login cookies or automatic provider fallback. Suggestions are cached briefly in page memory and excluded from backups. Turning off cancels requests; private windows send none.
图标：自动获取图标时访问快捷链接网址、网站声明的图标和清单。回退服务 Vemetric、Google 收到网站域名；您填写的图片地址会直接访问图床。加载可能在打开新标签页或同步后发生；可把链接改为文字图标以避免该链接的图标请求。
Automatic icons contact saved websites and their declared icon/manifest URLs. Vemetric and Google fallback services receive the site domain. Custom image URLs contact their hosts, including after startup or sync. Choose a text icon to avoid icon requests for that link.
壁纸：选用在线来源后，Wallhaven 收到收藏集所有者用户名、收藏集 ID、筛选条件及可选 API 密钥；Bing 收到语言／地区参数；Pexels 收到 API 密钥与查询条件。各来源的图片服务器收到图片请求，自动更换会重复请求。默认使用本地壁纸。Unsplash、Pixabay 取图来源已移除；已有收藏或备份中的图片地址仍可能访问原图片服务器。
Wallhaven receives the collection owner, collection ID, filters and optional API key. Bing receives locale/region; Pexels receives credentials and query parameters. Image hosts receive image requests, repeated on automatic refresh. The default is local. Unsplash and Pixabay providers were removed; previously saved image URLs may still contact their original hosts.
书签：仅在您发起导入时读取；导入后的快捷链接可参与图标加载、Sync 和备份。主动检查链接有效性时会访问所检查的网站。
Bookmarks are read on import. Imported links can participate in icon loading, Sync and backup. Explicit link validation contacts the checked websites.
Firefox Sync：设置、快捷链接、图标地址及壁纸 API 密钥保存在 Firefox 的 sync 存储，启用账号同步时由 Firefox 传输。您上传的本地图片 Blob 不通过 Sync 同步；图片地址可能在另一设备重新下载。通过 Firefox 账号设置管理同步。
Settings, links, icon URLs and wallpaper API keys use Firefox sync storage. Firefox transfers them when account sync is enabled. Local image blobs are not synced; remote images may be fetched again on another device. Manage sync in Firefox account settings.
WebDAV：您点击测试、备份、列出、恢复或删除时，请求发送到所配置的 HTTPS 服务器，并携带认证信息。ZIP 包包含设置、快捷链接、图片及壁纸 API 密钥；不包含 WebDAV 配置。备份没有额外的文件加密。
Explicit WebDAV actions send credentials and backup data to your configured HTTPS server. ZIPs include settings, links, images and wallpaper API keys, but exclude WebDAV configuration. Backup files have no additional file encryption.
本地保存与控制 / Storage and control
搜索历史默认关闭，开启后最多保存 100 条在 Ember 搜索框提交的搜索，存储于本机扩展 local 数据中。支持逐项删除和清空；关闭后停止记录和展示，已有记录保留到您清空。历史与新的搜索功能开关／来源选择不参与 Firefox Sync、本地 ZIP、WebDAV 或迁移；恢复备份也不会导入历史或覆盖本机记录和开关。无痕窗口不读写历史。外部对整个浏览器配置目录的备份不由 Ember 控制。
Search history is off by default. When enabled, up to 100 searches submitted in Ember are stored in local extension storage. Delete individual entries or clear all. Turning off stops recording/display and retains existing entries until cleared. History and the new feature switches/source preference are excluded from Firefox Sync, ZIP/WebDAV backups and migration. Restoring a backup neither imports history nor overwrites this device's history or switches. Private windows do not read or write history. External backups of an entire browser profile are outside Ember's control.
历史与联想面板的不透明度、模糊强度属于普通外观设置，参与 Firefox Sync 和备份；这两项只保存数值，不含搜索词。
History/suggestion panel opacity and blur are ordinary appearance settings included in Firefox Sync and backups. They store only numeric values, without search terms.
WebDAV 用户名和密码保存在扩展本地存储；壁纸 API 密钥保存在 sync 设置中。图标和壁纸缓存保存在 IndexedDB。备份导出仅在您操作时创建，但其中可能含密钥，请妥善保管。浏览器存储不是密码保险库。
WebDAV credentials are stored in local extension storage; wallpaper keys are in sync settings. IndexedDB holds image caches. Exported backups can contain keys. Browser storage is not a password vault.
可以删除链接、图片、缓存和所保存凭据，停用在线壁纸与 Firefox 同步，并在服务器删除远端备份。卸载通常移除本地扩展数据，但不会撤回发出的请求，也不会删除您下载的文件或服务器备份；同步数据另由 Firefox 管理。
Delete links, images, caches and saved credentials, disable online wallpaper and Firefox sync, and remove remote backups on your server. Uninstalling normally removes local extension data, but does not retract requests or delete exported files and server backups. Firefox manages synced data separately.
权限与同意 / Permissions and consent
Firefox 140 及以上的安装提示声明认证信息、书签信息、浏览活动、搜索词和网站内容的传输；同意声明不代表每项功能已开启。网络访问权限支持任意 HTTPS 图床和 WebDAV，书签权限用于主动导入，存储权限用于设置与图片，定时权限用于您配置的刷新。本扩展不注入网页、不读取浏览历史数据库，也不采集使用统计。远端 HTTP 请求被阻止，HTTP 快捷链接本身仍可打开。
Firefox 140+ presents required transmission categories during installation: authentication information, bookmarks, browsing activity, search terms and website content. Consent does not enable every feature. HTTPS host access supports arbitrary image/WebDAV servers; bookmarks are for explicit import; storage is for settings/images; alarms are for configured refresh. Ember injects no website scripts, reads no browser history database and sends no usage analytics. Remote plaintext HTTP requests are blocked; HTTP links can still be opened.
问题与隐私反馈：Ember Tab 项目问题页。请勿公开密码、API 密钥或私人备份。
For privacy questions, use the project issue tracker without posting credentials or private backups.
上游 MIT 许可证 · 第三方声明 · Aura Tab 来源