一句话总结：这是一个私人自用的小平台，不投放广告、不做用户画像、不向任何第三方出售或共享你的数据。
收集的信息仅限于「让服务能跑起来」所必需的那几项。
1. 这个平台是什么
AL 综合平台（al.airliny.com）是一个个人搭建的远程访问门户，
用于让使用者在外出时通过浏览器访问自己家中的设备与若干自托管服务。
它不面向公众提供商业服务，也没有运营方在收集用户数据。
2. 收集哪些信息
只有下面这些，且都因为「不记录就没办法运行」：
- 身份标识：你登录时，本平台会通过统一登录平台
account.airliny.com 获取你的用户 ID、用户名、显示名、头像地址与邮箱，
以及邮箱是否已验证。本平台不接收也不保存你的密码。
- 会话凭据：登录成功后，服务端会签发一个会话令牌。
存放位置和有效期取决于你在登录时选的设备类型：
- 临时设备 —— 存在
sessionStorage，12 小时后失效，
关闭浏览器即消失。
- 普通设备 —— 存在
localStorage，不设自动过期，
关闭浏览器或重启电脑后仍然保持登录。
- 登录记录：为让你自己能发现账号被盗用，
本平台会为每个账号保存最近 20 次登录的时间、来源 IP 与浏览器标识。
这份记录只有你自己的账号可以读取，其他用户看不到。
- 访问日志：服务端记录请求时间、来源 IP、请求路径、状态码与处理耗时，
用于排查故障与发现异常访问。日志中的邮箱地址会被脱敏处理（例如
me***@airliny.com）。
- 你主动上传的内容：如果你使用文件功能，文件会存储在本平台的服务器上。
- 你创建的分享链接：当你把云盘里的文件生成分享链接时，
本平台会记录该链接对应的文件名、创建时间与有效期。
拿到链接的任何人都可以查看和下载这些文件，
不需要登录，也无法限制对方转发链接。你可以随时在「我的分享」里撤销。
3. 不收集哪些信息
- 不做访问统计、不接入任何第三方分析或广告脚本。
- 不采集设备指纹、不读取你的通讯录、相册、定位或剪贴板。
- 不使用 Cookie 做跨站追踪。平台仅在登录跳转过程中使用一个短期、
一次性、
HttpOnly 的 Cookie 来传递登录结果。
4. 一个特殊说明：动态验证码
如果你使用「动态验证码」功能，你添加的 TOTP 种子会上传到服务器保存，
以便你在任何设备登录后都能直接看到验证码，不需要再记一个主密码。
种子在服务器上是加密存储的（密钥与数据分开存放），
但服务器在为你生成验证码时会读取到明文。
请理解这意味着：如果服务器被完全控制，这些种子可能被读取。
5. 数据存在哪里
数据存放在中国香港的一台服务器上，以及你本人家中的设备上。
平台不会把数据传输到其他地方。
6. 数据会分享给谁
不会分享给任何人。平台不含广告、不含第三方统计、不与任何数据经纪方合作。
唯一的例外是：为提供登录服务，身份校验会与统一登录平台
account.airliny.com 交互；为提供网络访问，浏览器会与相应的目标网站通信。
7. 数据保留与删除
- 会话令牌：临时设备 12 小时后自动失效；普通设备不自动过期，
直到你主动退出、或使用「退出所有设备」使其立即失效。
- 登录记录：每个账号保留最近 20 条。
- 访问日志：由容器日志轮转策略控制，最多保留约 30MB 后自动覆盖。
- 你上传的文件：由你自行删除，删除后不可恢复。
- 想彻底清除自己的数据，请联系管理员。
8. 安全措施
- 全站强制 HTTPS，并启用 HSTS。
- 脚本仅从本站加载，不接受内联脚本，以降低跨站脚本攻击的风险。
- 你可以随时在「账号安全」中查看最近登录记录，或一键让所有设备下线。
- 登录走标准 OAuth 2.0 授权码流程，带 PKCE 与 state 校验。
- 不同功能之间做了来源隔离，第三方组件无法读取登录凭据。
- 敏感配置与密钥不进入代码仓库。
但请理解：没有任何系统能保证绝对安全。这是一个个人自建平台，
请勿在此存放高度敏感的信息。
9. 你的权利
你可以随时要求查看、更正或删除与你相关的数据，也可以要求注销账号。
联系管理员即可。
10. 政策变更
如有变更，会更新本页顶部的日期。继续使用即表示接受更新后的政策。
11. 联系方式
通过平台绑定的管理员邮箱联系即可。
The short version: this is a small, privately operated portal. No ads, no profiling,
no selling or sharing your data with anyone. Only the minimum needed to make the
service work is collected.
1. What this is
AL Portal (al.airliny.com) is a personal, self-hosted remote access portal.
It lets its operator reach their own home machines and a handful of self-hosted services
from a browser while away. It is not a commercial service and no company operates it
for the purpose of collecting data.
2. What is collected
Only the following, each because the service cannot function without it:
- Identity: when you sign in, the portal receives your user ID, username,
display name, avatar URL, email address and whether that email is verified, from the
identity provider
account.airliny.com.
Your password is never received or stored.
- Session credential: after sign-in the server issues a session token.
Where it lives and how long it lasts depends on the device type you pick at sign-in:
- Temporary device — kept in
sessionStorage, expires after
12 hours, and disappears when the browser closes.
- Your own device — kept in
localStorage, with no automatic
expiry; you stay signed in across browser restarts and reboots.
- Sign-in history: so you can notice unauthorised access to your own account,
the portal keeps the time, source IP and browser identifier of your 20 most recent sign-ins.
Only your own account can read this record; no other user can see it.
- Access logs: request time, source IP, path, status code and duration,
used for troubleshooting and spotting abnormal access. Email addresses in logs are
masked (e.g.
me***@airliny.com).
- Content you upload: if you use the file features, files are stored
on this portal's server.
- Share links you create: when you turn drive files into a share link,
the portal records the file names, creation time and expiry behind that link.
Anyone holding the link can view and download those files without
signing in, and you cannot stop them forwarding it. You can revoke a link at any
time under "My shares".
3. What is not collected
- No analytics, no third-party tracking or advertising scripts of any kind.
- No device fingerprinting, no access to contacts, photos, location or clipboard.
- No cross-site tracking cookies. A single short-lived, one-time,
HttpOnly cookie is used during the sign-in redirect to hand back the result.
4. A special note on authenticator codes
If you use the authenticator (TOTP) feature, the seeds you add are
uploaded and stored on the server, so that signing in on any device shows
your codes without a second password to remember. Seeds are
encrypted at rest on the server (the key is kept separately from the data),
but the server reads them in plaintext when serving your codes.
Please understand what this means: if the server were fully compromised, those seeds
could be read.
5. Where data lives
Data is stored on one server in Hong Kong, China, and on the operator's own devices at home.
Nothing is transferred elsewhere.
6. Who it is shared with
Nobody. There is no advertising, no third-party analytics and no data brokerage.
The only external interactions are: the identity provider
account.airliny.com for sign-in, and whichever sites the browser connects to
on your behalf.
7. Retention and deletion
- Session tokens: temporary devices expire after 12 hours; your own device does not expire
automatically, until you sign out or use "Sign out everywhere".
- Sign-in history: the 20 most recent entries per account.
- Access logs: governed by container log rotation, roughly the most recent 30 MB.
- Files you upload: deleted by you, and irreversible once deleted.
- To have your data removed entirely, contact the administrator.
8. Security measures
- HTTPS enforced site-wide, with HSTS enabled.
- Scripts load only from this site; inline scripts are refused, which lowers the risk
of cross-site scripting.
- You can review recent sign-ins at any time under "Account security", or sign out
every device at once.
- Sign-in uses the standard OAuth 2.0 authorization code flow with PKCE and state validation.
- Feature origins are isolated so third-party components cannot read sign-in credentials.
- Secrets and credentials are kept out of the source repository.
That said, no system is ever perfectly secure. This is a self-hosted personal portal —
please do not store highly sensitive material here.
9. Your rights
You may request to view, correct or delete your data, or close your account, at any time.
Just contact the administrator.
10. Changes
Changes will update the date at the top of this page. Continued use means you accept
the updated policy.
11. Contact
Reach the administrator via the email address associated with this portal.