本機優先模式
Grower 會將收藏集寫入本機 `.tdf` 檔案，Player 亦會喺本機開啟呢啲檔案。擷取或者播放內容都唔需要 TDF 託管帳戶，亦唔需要我哋自己嘅收藏集伺服器。
檔案存喺邊度、點樣備份同分享，都由你決定。你選用嘅雲端同步、通訊、備份或者檔案託管服務，各自都有私隱政策。
TDF 目前會保存嘅內容
| 資料 | 目前嘅處理方式 | 分享風險 |
|---|---|---|
| 回應內容 | 會完全照瀏覽器收到嘅內容保存。Tree 唔會改動網頁、指令碼或者資料檔案。 | 可能包括帳戶頁面、個人資料、內嵌設定，或者網站傳返嚟嘅機密資料。 |
| 回應標頭 | Stored as the browser received them when they are part of a captured response. Tree may inspect a bounded set of header and cookie names to warn about likely signed-in activity, but it does not remove or replace their stored values. | Headers can contain session, account, identifying, or private values even when they are not visible on the rendered page. |
| URLs | Stored with their browser-observed values so the captured page has the same request identity during replay. | URLs can contain tokens, email addresses, IDs, search terms, signed values, or other private data. |
| 網頁標題同註釋 | 會保存喺封存檔入面。 | 可能透露研究主題、身份，或者整理者嘅備註。 |
| 請求標頭 | 唔會作為一般中繼資料封存。Range 資料可能會影響保存嘅請求索引鍵。 | 我哋唔會刻意保存 Authorization 同 Cookie 請求標頭，但網址或者回應內容仍可能有作用相同嘅機密資料。 |
唔會當作瀏覽器儲存資料擷取嘅內容
Grower 以回應內容為主。目前唔會將瀏覽器 Cookie 儲存區、local storage、session storage、IndexedDB 資料庫、密碼管理程式或者瀏覽記錄，另外匯出做封存檔物件。
呢點唔代表呢啲儲存區入面嘅值一定冇被收錄。網頁可能會喺擷取到嘅網址、標頭、HTML、JSON 或指令碼入面顯示或者傳返呢啲值。
What Grower warns about
Grower preserves captured URLs and response-header values for replay. It does not remove or replace likely private values. Instead, it can warn when a bounded set of header or cookie names suggests that a page may have been captured while signed in.
Grower does not inspect or change page contents. A page, script, image or data file is stored exactly as the site sent it. If that content contains private information, the private information stays in the archive.
Privacy Review looks only at a limited number of header and cookie names to warn that signed-in activity occurred. It does not keep their values. It ignores ordinary analytics and advertising cookie names. An outside resource creates a warning only when its own headers clearly indicate a sign-in or session.
Versions before 2.1 replaced recognised secrets in textual bodies with [REDACTED], and 2.1 replaced selected URL and response-header values. Those changes could break replay. Archives made by those versions keep their replacements; Tree 2.2 does not make new replacements.
Open Privacy Review in Grower to see whether limited header-name checks suggest signed-in activity and which page origins may be affected. The report does not display passwords, cookies, tokens, or other credential values. If you were not signed in, the warning may be a false alarm. You can suppress future automatic reminders and still open Privacy Review manually.
Privacy Scan is not currently offered in the Grower menu. Its experimental offline implementation is retained for possible future work, including explicit remedial actions, but Tree 2.2 does not present it as a protection users should rely on.
擷取、保留、備份同分享乜嘢，都由你決定。TDF 可以只係私人工作封存檔。登入狀態下擷取嘅資料，請當作私人資料處理。密碼保護會加密整個 TDF，只有知道密碼嘅人先可以開啟；你可以用嚟私人保存、備份或者受控分享。不過，檔案開啟之後，入面嘅敏感資料仍然存在。
Grower 授權啟用
啟用時，未綁定嘅授權 Token、裝置公開金鑰、由金鑰衍生嘅裝置識別碼、伺服器一次性隨機挑戰及其簽署，以及產品識別碼，都會傳送到 DOSAYGO 授權服務。已啟用嘅 Token 會保存在本機，平時使用時會離線檢查。
當 Grower 檢查訂閱有冇包括更新，或者續訂之後更新 Token 時，亦會將已啟用嘅 Token 同版本號傳送到授權服務。兩個應用程式都會去 TDF 發布位置（trees.dosaygo.com，GitHub 作後備）檢查新版本，亦可能查詢公開時間伺服器核對裝置時鐘。呢啲請求唔會包括你嘅瀏覽記錄、擷取內容或者收藏集。
停用電腦時，Grower 會傳送相同嘅 Token 同裝置證明；在線時亦至少每 60 日續期一次。為咗偵測複製嘅啟用，服務會為每次啟用保存裝置識別碼同公開金鑰、啟用時間，以及最近一次續期嘅時間同網絡（IP）地址。裝置識別碼由你裝置上嘅金鑰衍生，所以我哋會當佢係關於該裝置嘅資料，而唔係匿名資料。
購買 Grower 時，我哋會保存你嘅電郵地址、授權同訂閱日期、你接受嘅 EULA 版本、結帳時同意嘅聲明及同意時間，以及 Stripe 客戶、訂閱同付款識別碼。付款由 Stripe 處理；我哋唔會收到完整卡號。授權有效期間會保存呢啲記錄，之後亦會因應帳務記錄、稅務同法律責任、爭議處理及防止詐騙所需而繼續保存。
我哋嘅服務供應商包括 Stripe（付款）、Mailjet（授權電郵）、Hetzner（授權服務託管）、Cloudflare（本網站同發布下載）以及 GitHub（發布下載）。我哋唔會出售個人資料。
呢份私隱通知由美國懷俄明州公司 DOSAYGO 提供，地址係 9450 SW Gemini Dr #44162, Beaverton, OR 97008-7105, USA（「DOSAYGO」）。如有問題，或者喺法律容許嘅情況下想查閱、更正或刪除授權服務資料，請電郵去 support@dosaygo.com。