Shadowing Studio 隐私政策
适用版本：哔哩哔哩跟读实验版 0.1.1。生效日期：2026-09-04。
我们是谁
本扩展是由 Shadowing Studio 项目维护者提供的独立、非官方学习工具。项目主页：https://github.com/Lyra-ruolan/bilibili-shadowing-extension。与哔哩哔哩及其关联公司没有隶属或背书关系。
处理哪些数据，以及为什么处理
- 视频和网站内容：当前受支持 BV 页面的地址、BV 号、分P标识（CID、页码）、标题、时长、字幕轨道元数据、字幕正文和时间轴，用于识别视频、读取英文字幕、分句与分段及字幕导出。
- 播放器状态和操作：当前播放时间、播放/暂停状态、速度、选中的练习项，以及用户触发的播放和切换操作，用于同步字幕与控制练习。页面脚本会在受支持的视频页面加载时连接播放器，即使侧栏尚未打开；字幕加载和练习由侧栏交互触发。
- 本地偏好和有限的视频关联记录：播放模式、练习粒度、速度、视频信息区展开状态，以及最多 50 条以 BV 号与 CID 为键的字幕轨道选择。每条轨道选择含轨道标识、语言代码和更新时间，用于再次打开视频时恢复选择。轨道标识使用平台轨道 ID 或由轨道信息生成的标识；不会保存完整字幕 URL 作为该标识。
- 已有登录状态：播放器接口请求由浏览器附带适用的哔哩哔哩登录 Cookie。扩展不要求输入账号密码，不调用 Cookie 读取 API，也不把 Cookie 内容保存到扩展存储或发送给开发者。
扩展不申请浏览历史 API、麦克风、摄像头、定位、剪贴板或浏览器下载权限；这不代表它完全不处理浏览数据。上述当前视频地址和本地视频关联记录仍属于数据处理范围。
网络访问及接收方
内容脚本匹配 https://www.bilibili.com/video/*。清单中的网站权限为 https://www.bilibili.com/*，侧栏连接和练习针对受支持的普通 BV 视频。
播放器和分P接口通过 HTTPS 请求 api.bilibili.com，并使用浏览器已有登录状态。字幕文件仅允许来自 HTTPS 的 bilibili.com、hdslb.com 及其子域名；字幕文件请求使用 credentials: omit，不附带登录凭据。
哔哩哔哩及其字幕资源服务会收到完成请求必需的视频标识、资源地址和常规网络信息（例如 IP 地址、请求头及可能的来源信息）；播放器接口还会收到浏览器适用的登录 Cookie。它们的数据处理受各自政策约束。
扩展不会将字幕、视频关联记录或使用数据发送给 Shadowing Studio 开发者、广告商或第三方分析服务。扩展没有广告、遥测、分析 SDK、扩展账号或开发者运营的后台服务。所有执行代码随安装包提供，网络响应作为数据处理。
存储、保留及删除
字幕正文和当前播放状态在页面与侧栏的运行内存中处理，不写入 chrome.storage.local。关闭相关页面和侧栏后，这些运行状态不再保留为扩展的持久化记录。
偏好及最多 50 条轨道选择保存在当前浏览器配置文件的 chrome.storage.local 中，不使用 Chrome 同步存储。轨道记录按更新时间保留最近 50 条；它们没有固定的按天过期时间。本地数据依赖浏览器和操作系统提供的存储保护，扩展不另行加密这些设置。
可通过界面更改练习设置。卸载扩展会清除该扩展的本地存储；如需重新开始，可卸载后重新安装。用户主动导出的字幕文件由浏览器在本地生成，部分格式包含视频标题、地址、标识和导出时间；导出文件由用户管理，卸载扩展不会自动删除这些文件。
数据使用承诺
本扩展对用户数据的使用遵守 Chrome Web Store 用户数据政策，包括 Limited Use（有限使用）要求。上述数据仅用于提供本政策及商店介绍中说明的跟读、偏好恢复和字幕导出功能。我们不出售用户数据，不将其用于广告、信用评估或借贷，也不将其转移用于与扩展单一用途无关的目的。开发者无法通过本扩展远程查看本地字幕或轨道记录。
主动联系与第三方页面
一般问题和隐私问题请通过 GitHub Issues 联系项目维护者。Issues 是公开渠道，请勿提交密码、Cookie、登录令牌或不希望公开的字幕。你主动提交的用户名和问题内容由 GitHub 处理，并可被维护者及公众查看；这与扩展自动运行时的数据处理不同。GitHub 和哔哩哔哩各自的网站、账号及服务受各自隐私政策约束。
访问本项目的 GitHub Pages 介绍页或隐私政策页时，GitHub 会为安全目的记录访问者的 IP 地址。这是网页托管服务的数据处理，不是扩展向开发者上传使用数据。页面不另行添加分析脚本、广告或联系表单。
变更
数据处理方式发生实质变化时，我们会更新本政策的生效日期，并随对应版本披露。仅在法律和内容许可允许的范围内使用及导出字幕。本扩展不会绕过登录、付费或其他访问控制。
Shadowing Studio Privacy Policy
Applies to Bilibili Shadowing Experimental version 0.1.1. Effective date: 2026-09-04.
Who provides the extension
This independent, unofficial learning tool is maintained by the Shadowing Studio project maintainers. Project home: https://github.com/Lyra-ruolan/bilibili-shadowing-extension. It is not affiliated with or endorsed by Bilibili or its affiliates.
Data handled and purposes
- Video and website content: the supported BV page URL, BV identifier, part identifiers (CID and part number), title, duration, subtitle-track metadata, subtitle text and timestamps. These support video identification, subtitle retrieval, sentence/segment practice and export.
- Player state and interactions: playback position, playing/paused state, speed, the selected practice unit and user-triggered playback/navigation commands. These synchronize practice with the video. The page script connects to the player when a supported video page loads, including before the side panel is opened; subtitle loading and practice are triggered through the side panel.
- Local preferences and limited video-linked records: playback mode, practice granularity, speed, video-information expansion state and up to 50 subtitle-track selections keyed by BV identifier and CID. Each selection includes a track identifier, language code and update timestamp, allowing the selection to be restored. Track identifiers use a platform track ID or an identifier derived from track information; a full subtitle URL is not stored as the track identifier.
- Existing authentication state: the browser attaches applicable Bilibili login cookies to player API requests. The extension does not ask for passwords, call a cookie-reading API, save cookie contents in extension storage or send them to the developer.
The extension does not request the browsing-history API, microphone, camera, location, clipboard or browser downloads permission. This does not mean that no browsing data is handled: the current video URL and local video-linked records described above are still handled.
Network access and recipients
Content scripts match https://www.bilibili.com/video/. The manifest host permission is https://www.bilibili.com/; side-panel connection and practice target supported regular BV video pages.
Player and part-list API requests use HTTPS to api.bilibili.com with the browser's existing Bilibili session. Subtitle file URLs are limited to HTTPS on bilibili.com, hdslb.com and their subdomains. Subtitle-file requests use credentials: omit and do not attach login credentials.
Bilibili and its subtitle-resource services receive video identifiers, resource URLs and ordinary network information needed to serve requests, such as IP addresses, request headers and possible referrer information. Player APIs also receive applicable browser login cookies. Those services handle information under their own policies.
The extension does not send subtitles, video-linked records or usage data to the Shadowing Studio developer, advertisers or third-party analytics services. It contains no ads, telemetry, analytics SDK, extension account system or developer-operated backend. All executable code is bundled; network responses are processed as data.
Storage, retention and deletion
Subtitle text and current player state are processed in page/side-panel memory, not written to chrome.storage.local. Closing the relevant page and side panel does not leave those runtime states as persistent extension records.
Preferences and up to 50 track selections are kept in chrome.storage.local in the current browser profile, not Chrome sync storage. Track records retain the 50 most recently updated entries; they have no fixed age-based expiry. Local settings rely on browser and operating-system storage protection and are not separately encrypted by the extension.
You can change practice settings through the interface. Uninstalling the extension clears its local extension storage; uninstall and reinstall to start fresh. User-initiated subtitle exports are generated locally. Some formats include video titles, URLs, identifiers and export timestamps. Exported files remain under the user's control and are not automatically deleted by uninstalling the extension.
Data-use commitments
The extension's use of user data complies with the Chrome Web Store User Data Policy, including its Limited Use requirements. Data is used only for the described shadowing, preference restoration and subtitle-export features. We do not sell user data, use it for advertising, creditworthiness or lending, or transfer it for purposes unrelated to the extension's single purpose. The developer cannot remotely inspect local subtitles or track records through this extension.
Contact and third-party services
For general or privacy questions, contact the project maintainers through GitHub Issues. Issues are public: do not post passwords, cookies, login tokens or subtitles you do not want published. Usernames and issue contents you voluntarily submit are processed by GitHub and can be seen by maintainers and the public; this is separate from the extension's automatic operation. GitHub and Bilibili websites, accounts and services are governed by their own privacy policies.
When you visit this project's GitHub Pages introduction or privacy page, GitHub logs visitors' IP addresses for security purposes. This is data handling by the website host, not extension usage reporting to the developer. These pages add no analytics scripts, advertising or contact forms.
Changes
Material changes to data practices will be reflected in an updated effective date and disclosed with the corresponding version. Only use or export subtitles as permitted by applicable law and content licenses. The extension does not bypass login, payment or other access controls.