clashZ 隐私政策
生效日期：2026 年 10 月 8 日 · 联系邮箱：support@ainc.cc · English version
1. 适用范围
clashZ 是一款网络代理客户端。你可以导入自己的订阅链接，也可以输入服务识别码，登录支持的服务商账号，然后选择节点、连接和断开。本政策说明 clashZ 以及它依赖的服务器会处理哪些数据。clashZ 由 T.S. CHU ARCHITECTS LIMITED（以下称“我们”）运营。App 是配置和连接工具；部分快捷入口对应的服务由我们运营或管理，具体关系见第 4 节。
2. 保存在你设备上的数据
- 订阅链接、节点配置、相关访问令牌和 App 设置保存在设备上。通过服务识别码登录时，邮箱和密码保存在设备钥匙串中；登录过程也可能产生会话 Cookie 和网页缓存。登录、订阅更新和连接时，必要的凭据或配置参数会发送给所选服务，不会额外上传到 clashZ 配置接口。
- 需要代理的网络流量按配置经所选节点转发；其中部分节点由我们运营或管理。App 不会额外复制或上传浏览内容用于广告、统计或用户画像。节点侧的数据处理见第 4 节。
- App 会保存流量计数、最近最多 300 条内核日志及连接诊断记录，用于状态展示和排查故障。日志可能包含节点、目标域名或 IP、时间及错误信息；诊断文件和系统日志有各自的保存机制。当前客户端不会自动将这些诊断记录上传到配置服务。
3. clashZ 配置服务
- App 启动时会从 clashz.pannel.cc 读取服务商列表和客服设置。这个接口是公开的，不需要登录，App 不会向它提交账号、密码或订阅链接。
- 服务器访问日志会记录：你的 IP 地址、访问时间、请求地址、返回状态、数据量、来源页和客户端标识（User-Agent），用于排查故障和防止滥用。本网站的访问日志同样如此。
- 正常轮转的日志按天分割，保留约 7 天后自动删除，不做备份。历史日志的过渡安排见第 7 节。
4. 登录服务商账号时
App 中预置的快捷服务商里，GKD、棉花云、ofoNET、鹊桥、软件云、阿伟云、影子由我们运营或代为管理，适用本政策；Fancy 是独立的第三方服务商，你登录后的数据由它按自己的规则处理。
当你登录由我们运营或管理的服务时：
- 你输入的邮箱和密码会发送给该服务，用来登录并获取订阅。
- 服务会保存：账号邮箱、用于验证密码的凭据、订阅令牌、最近一次登录的时间和 IP 地址、流量用量（上传和下载总量，用来计算套餐余量）以及订单记录。
- 已核查的 soga 节点为执行套餐的设备数限制，临时记录在线账号与连接 IP 的对应关系，每分钟刷新覆盖。刷新覆盖不表示持续在线账号的对应关系必然在一分钟后消失。
- 已核查的香港 HKT soga 节点记录运行状态，日志保留 8 天；其他已检查的错误记录可能包含目标地址。日本 jp-home1 所承载节点的日志行为仍在核查，不能将单台节点的结果视为所有节点的保证。
- 本地诊断和节点错误记录可能包含目标域名或地址，因此本政策不作“所有环节均不记录访问地址”的承诺。尚未核查的节点，也不作不保存 DNS 查询历史的保证。
5. 我们不会做的事
- 不出售、不出租你的任何数据。
- 不把你的数据用于广告或用户画像。
- 不额外收集或查看浏览内容用于广告、统计或用户画像；为完成代理转发而处理网络通信的情况见第 4 节。当前原生客户端未接入广告、行为统计或自动崩溃上报 SDK。服务商网页可能使用其自身的组件。
6. 第三方服务与延迟测试
你主动测试节点延迟时，App 会通过所测节点请求 https://www.gstatic.com/generate_204，先预热再计时。检测地址运营方会收到请求及相应出口 IP，请求不主动附带服务商账号、密码或订阅链接。测试可能消耗套餐流量。
- Cloudflare：为我们的域名提供 DNS 解析，不经手你的代理流量；你发往 support@ainc.cc 的邮件经 Cloudflare 邮件转发服务转交给我们。
- 在线客服：目前没有启用。以后如果启用，我们会先更新本政策，说明聊天内容由谁保存。
- 服务器：配置服务和节点部署在多个国家和地区的云服务商机房。
7. 保存期限和删除
- 配置服务和网站访问日志：正常轮转约 7 天。2026 年 9 月 28 日以前的部分历史访问日志仍处于过渡清理阶段，预计在 10 月上旬随轮转删除；实际完成前，不应把约 7 天理解为所有历史日志已经满足的期限。生效日期本身不代表历史日志已经清理完成。
- 节点日志及在线设备记录：已核查范围与尚未核查的范围见第 4 节。
- 你可以在 App 中删除订阅记录、清空日志列表，但这不等于清除全部配置、钥匙串凭据、缓存、诊断文件或系统日志。卸载 App 不等于注销账号，钥匙串凭据也可能保留。
- 账号数据：账号存续期间保存。你可以发邮件到 support@ainc.cc 申请删除账号，我们会在收到申请后 7 个工作日内删除账号及相关数据；法律要求保留的除外。
8. 你的权利
你可以要求查看、更正或删除你的个人数据，也可以随时停止使用本服务。请发邮件到 support@ainc.cc。
9. 未成年人
本服务不面向 18 岁以下的用户。如果你发现未成年人向我们提供了个人数据，请联系我们删除。
10. 政策更新
政策变化时，我们会更新本页并修改生效日期。涉及数据处理的重大变化，会在实施前通过适当渠道告知，并在需要时取得同意。
clashZ Privacy Policy
Effective date: October 8, 2026 · Contact: support@ainc.cc
1. Scope
clashZ is a network proxy client. You can import your own subscription link, or enter a provider code and sign in to a supported provider account, then choose a server, connect and disconnect. This policy explains what data clashZ and the servers it relies on process. clashZ is operated by T.S. CHU ARCHITECTS LIMITED ("we"). The app is a configuration and connection tool. Some services available through its shortcuts are operated or managed by us, as described in section 4.
2. Data stored on your device
- Subscription links, server configurations, associated access tokens and app settings are stored on your device. When you sign in using a provider code, your email and password are stored in the device Keychain. Sign-in may also create session cookies and web caches. Necessary credentials or configuration parameters are sent to the selected service for sign-in, subscription updates and connections; they are not additionally uploaded to the clashZ configuration endpoint.
- Traffic requiring a proxy is relayed through the selected server according to your configuration. Some servers are operated or managed by us. The app does not make additional copies of or upload browsing content for advertising, analytics or profiling. Server-side processing is described in section 4.
- The app stores traffic counters, up to 300 recent kernel log entries, and connection diagnostics for status display and troubleshooting. Logs may include servers, destination domains or IP addresses, timestamps and errors. Diagnostic files and system logs have separate retention mechanisms. The current client does not automatically upload these diagnostics to the configuration service.
3. clashZ configuration service
- At launch the app reads the provider list and support settings from clashz.pannel.cc. This endpoint is public and requires no sign-in; the app does not send your account, password or subscription link to it.
- Server access logs record your IP address, time of access, requested URL, response status, bytes transferred, referrer and user agent, for troubleshooting and abuse prevention. The same applies to this website.
- Under normal rotation, logs are split daily and automatically deleted after about 7 days, without backups. Transitional handling of historical logs is described in section 7.
4. When you sign in to a provider
Among the built-in providers, GKD, 棉花云 (Kapok), ofoNET, 鹊桥 (XRocket), 软件云 (EXE), 阿伟云 (Awyun) and 影子 (Yingzi) are operated or managed by us and are covered by this policy. Fancy is an independent third-party provider and handles your data under its own terms.
When you sign in to a service operated or managed by us:
- The email and password you enter are sent to that service to sign you in and fetch your subscription.
- The service stores your account email, credentials used to verify your password, your subscription token, the time and IP address of your last sign-in, your traffic usage (total upload and download, used to calculate your remaining quota) and your order history.
- On the inspected soga server, a temporary mapping between online accounts and connecting IP addresses is refreshed every minute to enforce plan device limits. Refreshing this mapping does not mean that an active account’s mapping necessarily disappears after one minute.
- The inspected Hong Kong HKT soga server logs operational status and retains logs for 8 days. Other inspected error records may contain destination addresses. Logging on servers hosted by jp-home1 in Japan remains under review; findings from one server are not a guarantee for all servers.
- Local diagnostics and server error records may contain destination domains or addresses. This policy therefore does not promise that destination addresses are never logged at any stage. We also do not make a no-DNS-history guarantee for servers that have not yet been inspected.
5. What we do not do
- We do not sell or rent any of your data.
- We do not use your data for advertising or profiling.
- We do not additionally collect or inspect browsing content for advertising, analytics or profiling. Network processing needed for proxy forwarding is described in section 4. The current native client does not integrate advertising, behavioral analytics or automatic crash-reporting SDKs. Provider web pages may use their own components.
6. Third parties and latency tests
When you initiate a latency test, the app requests https://www.gstatic.com/generate_204 through each tested server, first for warm-up and then for measurement. The endpoint operator receives the requests and their egress IP addresses. These requests do not intentionally include your provider account, password or subscription link. Tests may count toward your traffic allowance.
- Cloudflare provides DNS for our domains and does not carry your proxy traffic. Emails you send to support@ainc.cc are delivered to us through Cloudflare Email Routing.
- Live chat support is currently not enabled. If we enable it, we will update this policy first and state who stores the conversations.
- The configuration service and servers are hosted with cloud providers in several countries and regions.
7. Retention and deletion
- Configuration service and website access logs: about 7 days under normal rotation. Some historical access logs predating September 28, 2026 remain in a transitional cleanup process and are expected to expire through rotation in early October. Until cleanup is verified, this is not a claim that all historical logs already meet the approximately 7-day period. The effective date alone does not confirm completion of cleanup.
- Server logs and online-device mappings: see section 4 for inspected and unverified scopes.
- You can remove subscription entries and clear the log list in the app. This does not erase all configurations, Keychain credentials, caches, diagnostic files or system logs. Uninstalling the app does not close your account, and Keychain credentials may remain.
- Account data: kept while your account exists. Email support@ainc.cc to request deletion; we will delete your account and related data within 7 business days of receiving the request, except where the law requires us to keep it.
8. Your rights
You may ask to access, correct or delete your personal data, and you may stop using the service at any time. Contact support@ainc.cc.
9. Children
The service is not intended for anyone under 18. If you believe a minor has given us personal data, contact us and we will delete it.
10. Changes
If this policy changes, we will update this page and its effective date. Material changes to data processing will be communicated through appropriate channels before implementation, with consent obtained where required.