SECTION 01
Overview概述
PicPocket ("we", "our" or "the extension") is a Chrome side-panel extension for designers and AI artists. It lets you save images from web pages, turn them into structured prompts with an AI model, keep a prompt library and generate images. This policy covers the extension and the optional hosted-quota service described in Section 04. PicPocket（以下简称“我们”或“本扩展”）是一款为设计师和 AI 创作者打造的 Chrome 侧边栏扩展，用于从网页收藏图片、借助 AI 模型把图片拆解成结构化提示词、管理提示词库以及生成图片。本政策适用于本扩展，以及第 04 节所述的可选托管额度服务。
Single purpose单一用途
PicPocket has one purpose: helping you collect visual inspiration and turn it into AI image prompts. We only use data to provide that feature.
PicPocket 只有一个用途：帮助你收集视觉灵感并把它变成 AI 生图提示词。我们只会为了提供这项功能而使用数据。
SECTION 02
What's stored on your device本地保存的数据
Everything PicPocket saves is kept in your browser, in IndexedDB or chrome.storage.local. We have no copy of it.
PicPocket 保存的所有内容都在你的浏览器里（IndexedDB 或 chrome.storage.local），我们没有任何副本。
| Data数据 | What it includes包含内容 | Stored in存储位置 | Leaves your device?是否离开设备？ |
|---|---|---|---|
| Saved images收藏的图片 | The image file, a thumbnail and its dimensions图片文件、缩略图及尺寸 | IndexedDB |
Only when you ask AI to analyze it or use it as a reference (Section 03)仅在你让 AI 反推或将其作为参考图时（见第 03 节） |
| Source page来源页面 | The URL and title of the page an image was saved from图片所在网页的地址和标题 | IndexedDB |
Never从不 |
| Prompts & library提示词与词库 | AI-generated prompts, your edits, tags, notes, folders, favorites and generated imagesAI 生成的提示词、你的修改、标签、笔记、文件夹、收藏以及生成的图片 | IndexedDB |
Only the prompt text you send to generate an image仅限你发送去生图的提示词文本 |
| API keysAPI 密钥 | Keys, endpoints and model names you configure你配置的密钥、接口地址和模型名称 | chrome.storage.local |
Only to the endpoint you configured仅发送到你配置的接口 |
| Redeem code兑换码 | The code you entered and its remaining quota你输入的兑换码及剩余额度 | chrome.storage.local |
Only to PicPocket's hosted service, when you use it仅在使用时发送到 PicPocket 托管服务 |
| Preferences偏好设置 | Language, theme, layout and feature toggles语言、主题、布局及功能开关 | chrome.storage.local |
Never从不 |
SECTION 03
When PicPocket goes online扩展何时联网
PicPocket doesn't send anything in the background. It only connects to the internet in these cases, each started by something you do: PicPocket 不会在后台发送任何数据。只有以下几种情况会联网，而且每一种都由你的操作触发：
- Analyzing or generating with your own key使用自己的 Key 反推或生图: the image (and any prompt text or reference image) is sent directly from your browser to the AI endpoint you configured, such as OpenAI, DeepSeek, SiliconFlow, StepFun or a custom OpenAI-compatible server. That provider handles it under its own privacy policy. PicPocket's servers are not involved.图片（以及提示词文本或参考图）会从浏览器直接发往你配置的 AI 接口，例如 OpenAI、DeepSeek、硅基流动、阶跃星辰或自定义 OpenAI 兼容服务。该服务商按其自身的隐私政策处理这些内容，PicPocket 的服务器不参与其中。
- Using hosted quota with a redeem code使用兑换码托管额度: if you choose this instead of your own key, the request goes through PicPocket's server. See Section 04.如果你选择使用兑换码而不是自己的 Key，请求会经过 PicPocket 的服务器，详见第 04 节。
- Saving an image收藏图片: PicPocket downloads the image from the website that hosts it, the same way your browser does when showing it.PicPocket 会从图片所在的网站下载该图片，和浏览器显示图片时的方式相同。
- Syncing the prompt library同步提示词库: when you click Sync, PicPocket downloads public prompt collections from GitHub and jsDelivr. Preview images in the library load from the public sites they are hosted on.点击“同步词库”时，PicPocket 会从 GitHub 和 jsDelivr 下载公开的提示词合集。词库中的预览图从其所在的公开网站加载。
- Connecting an AI agent (optional)连接 AI Agent（可选）: if you turn on agent collaboration, PicPocket talks to a bridge running on your own computer (
127.0.0.1). You choose whether an agent such as Cursor or Claude Code may read your library, save prompts or generate images. What you let an agent read may then be sent to that agent's own AI provider.如果你开启 Agent 协作，PicPocket 只会连接运行在你本机（127.0.0.1）上的桥接程序。Cursor、Claude Code 等 Agent 能否读取灵感库、保存提示词或生图，都由你授权。你允许 Agent 读取的内容，可能会被该 Agent 发送给它自己的 AI 服务商。
SECTION 04
Hosted quota (redeem codes)托管额度（兑换码）
Some creators and beta testers get a redeem code that lets them analyze and generate images without their own API key. This is optional. If you only use your own key, this section doesn't apply to you. 部分创作者和内测用户会获得兑换码，无需自己的 API Key 也能反推和生图。这是可选功能；如果你只使用自己的 Key，本节与你无关。
How it works工作方式
- When you redeem a code, PicPocket checks it against our database, hosted on Supabase.兑换时，PicPocket 会在我们托管于 Supabase 的数据库中核验兑换码。
- Each analysis or generation request is sent with your code to our server (a Supabase Edge Function). The server checks the code and deducts one use from your quota.每次反推或生图请求都会带上兑换码发送到我们的服务器（Supabase Edge Function）。服务器核验兑换码，并扣除一次额度。
- The server forwards the request, including the image and prompt text, to an upstream AI provider (currently SiliconFlow for image analysis and most generation, and xAI for Grok image models), and returns the result to you.服务器将请求（包括图片和提示词文本）转发给上游 AI 服务商（目前反推和大部分生图使用硅基流动，Grok 生图模型使用 xAI），并把结果返回给你。
What we keep我们保留什么
- We keep the redeem code, its remaining quota, its expiry date and when it was last used.我们保留兑换码、剩余额度、有效期和最近使用时间。
- We don't store your images, prompts or the AI's responses. They pass through the server in memory and aren't written to our database.我们不保存你的图片、提示词或 AI 返回的结果。它们只在服务器内存中中转，不会写入我们的数据库。
- Supabase, our hosting provider, may keep standard request logs (such as IP address and time) for security and operations, under its own retention policy.我们的托管服务商 Supabase 可能会出于安全和运维目的保留常规请求日志（例如 IP 地址和时间），保留期限遵循其自身政策。
- The upstream AI provider processes the content under its own privacy policy.上游 AI 服务商按其自身的隐私政策处理请求内容。
SECTION 05
Chrome permissionsChrome 权限说明
These are the permissions PicPocket asks for and why: PicPocket 申请的权限及用途如下：
| Permission权限 | Why it's needed用途 | Limits限制 |
|---|---|---|
sidePanel |
Shows PicPocket in Chrome's side panel next to the page you're browsing.在 Chrome 侧边栏中显示 PicPocket，与当前网页并排。 | Only shows PicPocket's own interface.只显示 PicPocket 自己的界面。 |
storage unlimitedStorage |
Saves your library and settings locally, without the default size limit, so full-resolution images fit.在本地保存灵感库和设置，并解除默认容量限制，以便保存高清原图。 | Storage stays on your device.数据只存储在你的设备上。 |
activeTab |
Captures the visible part of the current tab when you use the snip tool.使用框选截图时，截取当前标签页的可见区域。 | Only after you start a capture.仅在你主动开始截图后。 |
contextMenus |
Adds "Collect to PicPocket" to the right-click menu on images.在图片右键菜单中加入“采集到 PicPocket”。 | Does nothing until you click it.点击之前不会做任何事。 |
Access to all sites访问所有网站<all_urls> |
Runs a small script on web pages that shows the hover pill over images and draws the snip selection. It also lets PicPocket download images you save and reach the AI endpoint you configure.在网页上运行一个小脚本，用于在图片上显示悬停采集胶囊和绘制框选区域；同时让 PicPocket 能下载你收藏的图片，并访问你配置的 AI 接口。 | The script only looks at the image under your cursor. It sends nothing until you click Save or Reverse, and the hover pill can be turned off in settings. It doesn't read form fields, change page content or record where you browse.脚本只关注鼠标下方的图片，在你点击“收藏”或“反推”之前不会发送任何内容，悬停胶囊也可以在设置中关闭。它不会读取表单内容、修改网页或记录浏览轨迹。 |
SECTION 06
What we don't do我们不做的事
- No accounts or personal details不需要账号或个人信息: we don't ask for your name, email address, phone number or password.我们不会索取你的姓名、邮箱、手机号或密码。
- No browsing history不收集浏览记录: we don't collect the pages you visit, your searches or your cookies. The only page details PicPocket keeps are the URL and title of pages you save images from, and those stay on your device.我们不收集你访问的网页、搜索内容或 Cookie。PicPocket 唯一保留的页面信息，是你收藏图片时所在网页的地址和标题，而且只保存在你的设备上。
- No analytics or tracking没有统计或追踪: the extension contains no analytics, crash-reporting or advertising SDKs.扩展中没有任何统计分析、崩溃上报或广告 SDK。
- No selling or advertising不出售，不用于广告: we never sell your data, share it for advertising, or use it for credit or lending decisions.我们绝不出售你的数据，不为广告目的共享，也不将其用于信用评估或借贷决策。
SECTION 07
Your choices & deletion你的选择与删除
- Delete anything随时删除: remove any image, prompt, tag or folder in the side panel, one at a time or in bulk. It's deleted from your browser immediately.可在侧边栏中逐个或批量删除图片、提示词、标签或文件夹，数据会立即从浏览器中删除。
- Export a backup导出备份: download your library as a ZIP file whenever you like.随时可以把灵感库导出为 ZIP 文件。
- Turn features off关闭功能: disable the hover pill, and leave agent collaboration and hosted quota switched off if you don't want them.可以关闭悬停胶囊；不需要时，也可以不开启 Agent 协作和托管额度。
- Uninstall卸载: removing the extension makes Chrome delete everything PicPocket stored in your browser.卸载扩展后，Chrome 会删除 PicPocket 在浏览器中保存的全部数据。
- Redeem-code records兑换码记录: email us and we'll delete the record for your code. The code will stop working.给我们发邮件，我们会删除你的兑换码记录，该兑换码随即失效。
SECTION 08
FAQ常见问题
Can the developers see the images I save?开发者能看到我收藏的图片吗？
No. Your library is stored only in your browser and we have no access to it. If you use hosted quota, the image you analyze passes through our server on its way to the AI provider, but it isn't stored or viewed.
不能。你的灵感库只保存在你的浏览器里，我们无法访问。如果你使用托管额度，被反推的图片会经过我们的服务器转发给 AI 服务商，但不会被保存或查看。
Where is my API key stored?我的 API Key 保存在哪里？
In Chrome's extension storage (
chrome.storage.local) on your computer. It's only sent to the AI endpoint you configured, when you analyze or generate an image. It is never sent to PicPocket.
保存在你电脑上 Chrome 的扩展存储（chrome.storage.local）中。只有在你反推或生图时，才会发送到你配置的 AI 接口，永远不会发送给 PicPocket。
Why does Chrome say PicPocket can "read and change data on all websites"?为什么 Chrome 提示它能“读取和更改所有网站上的数据”？
That's Chrome's standard wording for extensions that work on any site. PicPocket needs it so the hover pill and snip tool work wherever you browse. It doesn't inject ads, change page content or log where you go.
这是 Chrome 对可在任意网站运行的扩展使用的标准提示。PicPocket 需要它，悬停胶囊和框选工具才能在你浏览的任何网站上使用。它不会注入广告、篡改网页内容或记录你的浏览轨迹。
SECTION 09
Changes & contact政策变更与联系
PicPocket's use of data follows the Chrome Web Store User Data Policy, including its Limited Use requirements. If we change how PicPocket handles data, we'll update this page and the date at the top before the change ships. PicPocket 对数据的使用遵守 Chrome 应用商店用户数据政策，包括其中的“限制使用（Limited Use）”要求。如果我们改变了数据处理方式，会在相关版本发布前更新本页面及顶部的日期。
Questions or deletion requests: [email protected]. 如有疑问或删除请求，请联系：[email protected]。