增加隐私协议 (#227)

Author: chenx-dust

.vitepress/config/cn.ts

@@ -67,6 +67,7 @@ export const cn = defineConfig({
           { text: '性能测试', link: '/guide/perf' },
           { text: '路线图', link: '/guide/roadmap' },
           { text: '社区和贡献', link: '/guide/community-and-contribution' },
+          { text: '隐私条款', link: '/guide/privacy' },
           { text: '许可证', link: '/guide/license' },
           { text: '联系方式', link: '/guide/contact' },
         ],

.vitepress/config/en.ts

@@ -65,6 +65,7 @@ export const en = defineConfig({
           { text: 'Performance Testing', link: '/en/guide/perf' },
           { text: 'Roadmap', link: '/en/guide/roadmap' },
           { text: 'Community and Contribution', link: '/en/guide/community-and-contribution' },
+          { text: 'Privacy Policy', link: '/en/guide/privacy' },
           { text: 'License', link: '/en/guide/license' },
           { text: 'Contact', link: '/en/guide/contact' },
         ],

en/guide/privacy.md

@@ -0,0 +1,69 @@
+# EasyTier Privacy Policy
+
+**Effective Date: January 18, 2026**
+
+EasyTier is a simple, secure, decentralized tool for intranet penetration and remote networking. This Privacy Policy explains how we handle relevant privacy information during the installation and use of the EasyTier software.
+
+_This policy applies only to first-party software released by EasyTier and officially maintained servers, and does not apply to any third-party services or software._
+
+_The original version of this policy is written in Chinese. In the event of any discrepancies in interpretation, the Chinese version shall prevail._
+
+## 1. Information Related to Inter-Node Communication
+
+### 1.1 Node Discovery Information
+
+In networking scenarios other than “Standalone” mode, in order to enable interconnection between devices across networks and perform NAT traversal, EasyTier will access networking servers manually specified by the user. When initiating a network or searching for peer nodes, the client program sends connection requests to the server. Such requests may include, but are not limited to, the local node’s network configuration parameters and virtual IP address. Based on these requests, the server identifies and returns the client’s public-facing IP address and port information, and announces the necessary metadata to authorized peer nodes whose network configurations are compatible.
+
+### 1.2 Network Connection Information
+
+To optimize data transmission efficiency and automatically select the best paths, the software dynamically processes local network topology information during operation, including but not limited to peer node latency, connection path status, and packet loss rates, and announces this information to peer nodes. Such technical information is maintained in real time only in device memory, solely to ensure network stability and performance. It is not uploaded to any central server, nor is it persistently stored across sessions.
+
+### 1.3 Statement on Information Processing
+
+The data described in this section may contain information capable of identifying a user’s personal identity. For public servers and relay nodes, the client may transmit such data in plaintext. We do not take responsibility for the security of data during transmission; please be aware of the associated risks. For public servers provided by this software, we process such data only to the extent necessary for node discovery, connection establishment, and network maintenance. We do not persistently store the data, nor do we use it for any other purposes. For third-party servers, we do not control their data processing policies and assume no responsibility for them.
+
+## 2. Traffic and Security
+
+### 2.1 Data Encryption
+
+EasyTier uses industry-standard symmetric encryption algorithms (such as AES-GCM or ChaCha20-Poly1305) by default to protect all transmitted traffic. Users are required to configure a consistent pre-shared key (PSK) among networking nodes. All data transmitted through this software is encrypted before leaving the sender, ensuring that only legitimate nodes holding the correct key can decrypt and read the communication content. We do not possess your private keys and therefore cannot access any of your communication data.
+
+### 2.2 Data Handling in Relay Mechanisms
+
+In complex network environments where direct P2P connections cannot be established, encrypted traffic may be forwarded through relay nodes. Even in such scenarios, the traffic remains symmetrically encrypted. Relay nodes are responsible only for packet forwarding and routing, do not have decryption capabilities, and cannot access or analyze the encrypted original data content.
+
+## 3. Servers
+
+### 3.1 Public Servers
+
+To assist with NAT detection and hole punching, this software provides public EasyTier servers hosted by third-party service providers for user access. When the software interacts with these servers, your public IP address, port information, and basic network metadata may be exposed to those third-party service providers. The processing of such data is governed by the respective providers’ own privacy policies. We recommend that you review the relevant policies of those parties.
+
+### 3.2 Third-Party Servers
+
+This software allows users to specify and connect to networking servers or relay nodes operated by third parties. Users should be aware that connecting to such servers means that your connection metadata (such as IP address and network information) will be visible to the server operator. The developer assumes no responsibility for the security, data handling practices, or service stability of any third-party servers, nor any direct or indirect legal liability arising therefrom.
+
+## 4. Data Retention and Storage
+
+### 4.1 Local Configuration Storage
+
+This software stores network configuration files (including virtual IP addresses, pre-shared symmetric keys, node public/private keys, and peer addresses) on your local device. The software does not provide any form of cloud backup or synchronization services. Such sensitive configuration information will never be automatically synchronized or uploaded to any central server. Users are responsible for managing the security of their local configuration files.
+
+### 4.2 Logs and Analytical Data
+
+This software does not collect or transmit user operation logs, behavioral patterns, or traffic analysis data. All runtime data used to maintain network connections is stored only in local memory. Once the program is closed or the process terminates, such temporary data is immediately cleared and leaves no trace on local disks or remote servers.
+
+### 4.3 Server-Side Data Storage
+
+For official public networking servers provided by us, we temporarily maintain node discovery and network connection information in memory only when necessary. Such data becomes invalid as soon as a node goes offline or a connection is established. Unless explicitly required by laws, regulations, or regulatory authorities, we do not persistently store such data, nor do we use it for any purpose other than connection establishment. For third-party servers specified by users, we cannot control their data storage policies and assume no responsibility for their storage practices.
+
+## 5. Children’s Privacy Protection
+
+EasyTier is a network utility software and is not designed to attract or target children. As the software does not implement an account system and does not collect personal identity information by design, we do not knowingly collect, process, or store any personal data of children under the age of 13 (or the applicable age as defined by local laws).
+
+## 6. Policy Revisions
+
+As software features evolve or the legal environment changes, we may revise this Privacy Policy from time to time. Any revisions will be updated on this page and marked with a revised effective date. We recommend that you review this policy periodically to stay informed about our latest practices regarding technical data handling and privacy protection. Your continued use of the software after policy revisions indicates that you have read and accepted the updated policy.
+
+## 7. Contact Us
+
+If you have any questions about this Privacy Policy or EasyTier’s data handling practices, please contact us via [Contact Information](contact).

guide/privacy.md

@@ -0,0 +1,69 @@
+# EasyTier 隐私政策
+
+**发布日期：2026 年 1 月 18 日**
+
+EasyTier 是一款简单、安全、去中心化的内网穿透和异地组网工具。本隐私政策说明了您在安装及使用 EasyTier 软件过程中，我们如何处理相关的隐私信息。
+
+_本协议仅适用于 EasyTier 发行的第一方软件及官方维护的服务器，不适用于任何第三方服务或软件。_
+
+_本协议原文为中文版本，如有任何理解上的差异，以中文版本为准。_
+
+## 1. 节点间通信相关信息
+
+### 1.1 节点发现信息
+
+在“独立”模式以外的组网场景下，为实现跨网络设备间的互联及 NAT 穿透，EasyTier 会访问由用户手动指定的组网服务器。在发起组网或寻找对端节点时，客户端程序会向服务器发送连接请求，该请求包含但不限于本地节点的网络配置参数、虚拟 IP 地址等信息。服务器将根据请求识别并返回客户端的公网出口 IP 地址及端口信息，并将这些必要元数据向经过授权且网络配置相符的合法对端节点进行公告。
+
+### 1.2 网络连接信息
+
+为了优化数据传输效率并自动选择最佳路径，本软件在运行期间会动态处理局部网络拓扑信息，包括但不限于对端节点延迟、连接路径状态及丢包率，并向对端节点公告。此类技术信息仅在设备内存中实时维护，用于保障网络连接的稳定性与性能，不会被上传至中央服务器，亦不会进行跨会话的持久化存储。
+
+### 1.3 信息处理声明
+
+本节所述数据可能包含能够识别用户个人身份的信息，对于公共服务器和中继节点，客户端可能采用明文传输此类数据，我们不对传输过程中的数据安全性负责，请知悉相关风险。对于本软件提供的公共服务器，我们仅在实现节点发现、连接建立和网络维护的必要范围内处理这些数据，不会对数据进行持久化储存，也不会将其用于其他目的。对于第三方服务器，我们不控制其数据处理政策，也不对其负责。
+
+## 2. 流量与安全性
+
+### 2.1 数据加密说明
+
+EasyTier 默认采用工业级对称加密算法（如 AES-GCM 或 ChaCha20-Poly1305）对所有传输的流量进行保护。用户需要在组网节点间配置一致的预共享密钥（PSK）。所有通过本软件传输的数据在离开发送端前均会完成加密，确保只有持有正确密钥的合法节点能够解密并读取通信内容。我们不持有您的私有密钥，因此无法查阅您的任何通信数据。
+
+### 2.2 中继机制中的数据处理
+
+在无法建立直接 P2P 连接的复杂网络环境下，加密流量可能通过中继节点进行转发。即便在此场景下，流量依然保持对称加密状态。中继节点仅负责数据包的透传与路由，不具备解密能力，无法获取或分析被加密的原始数据内容。
+
+## 3. 服务器说明
+
+### 3.1 公共服务器
+
+为了辅助 NAT 探测与打洞，本软件提供用户使用公共的架设在第三方服务商的 EasyTier 服务器。当软件向这些服务器发起交互请求时，您的公网 IP 地址、端口信息及基本网络元数据可能会暴露给这些第三方服务提供商。此类数据的处理流程受各服务商自身隐私政策的约束，建议您查阅相关方的政策说明。
+
+### 3.2 第三方服务器
+
+本软件允许用户自行指定并连接到由第三方运行的组网服务器或中继节点。用户需知晓，连接此类服务器意味着您的连接元数据（如 IP 地址、网络信息等）将对该服务器运行方可见。开发者不对任何第三方服务器的安全性、数据处理行为或服务稳定性负责，亦不承担由此产生的任何直接或间接法律责任。
+
+## 4. 数据保留与存储
+
+### 4.1 本地配置存储
+
+本软件会将网络配置文件（包括虚拟 IP 地址、预共享对称密钥、节点公私钥以及对端地址等）存储在您的本地设备中。本软件不提供任何形式的云端备份或同步服务，这些敏感配置信息绝不会被自动同步或上传至任何中央服务器。用户需自行负责本地配置文件的安全管理。
+
+### 4.2 日志与分析数据
+
+本软件不具备收集或外传用户操作日志、行为习惯或流量分析数据的功能。所有用于维护网络连接的运行时数据均仅保存在本地内存中。一旦程序关闭或进程结束，此类临时性数据将被立即清除，不会在本地磁盘或远程服务器上留下任何追踪痕迹。
+
+### 4.3 服务器端数据存储
+
+对于我们提供的官方公共组网服务器，我们仅在必要时于内存中临时维护节点发现与网络连接信息。此类数据随节点离线或连接完成即行失效。除非法律法规或监管部门有明确要求，我们不会持久化存储此类数据，也不会将其用于连接建立以外的任何目的。对于用户自行指定的第三方服务器，我们无法控制其数据存储策略，亦不对其存储行为承担任何责任。
+
+## 5. 儿童隐私保护
+
+EasyTier 是一款网络工具类软件，不以吸引或面向儿童为设计目标。由于本软件在设计上不设立账户系统且不收集个人身份信息，我们不会有意收集、处理或存储 13 岁以下（或当地法律规定的相关年龄）儿童的任何个人数据。
+
+## 6. 政策修订
+
+随着软件功能的迭代或法律环境的变化，我们可能会不时对本隐私政策进行修订。任何修订内容均会更新在本页面上，并通过版本日期进行标注。建议您定期查看本政策，以了解我们处理技术数据及保护隐私的最新做法。您在政策修订后继续使用本软件，即表示您知晓并接受更新后的政策内容。
+
+## 7. 联系我们
+
+如果您对本隐私政策或 EasyTier 的数据处理方式有任何疑问，请通过 [联系方式](contact) 联系我们。