本政策说明 Sce 浏览器（下称“本应用”）在提供网页浏览、扫码、下载、账号、云同步及可选 AI 助理功能时如何处理数据。本应用的开发者通过下方邮箱受理隐私问题。
我们处理哪些数据
- 设备上的浏览数据：浏览历史、搜索记录、书签、主页快捷网址、标签页及会话状态、下载记录和应用设置保存在您的设备上。无痕模式不新增浏览历史或搜索记录；隐匿模式使用独立的本地数据空间。
- 账号信息：注册、登录和找回密码时，我们会处理您的邮箱、密码及验证码，以验证身份并保障账号安全；同时保存账号标识、用户名、头像和登录状态，以提供账号及云同步功能。密码以哈希形式保存，不保存明文密码，也不会将明文密码或验证码写入日志。验证码仅可使用一次、10 分钟有效，设备上的登录令牌加密保存。
- 可选云同步数据：仅在您使用上传功能时，主页快捷网址、书签及菜单和底栏配置会上传至 Sce 服务端，并按普通与隐匿数据空间分别保存。浏览历史、搜索记录、下载文件及下载记录不会通过这项功能上传。
- 可选网页翻译数据：仅当您在当前网页中主动选择“网页翻译”和目标语言时，应用才会读取可见的普通文本并经 Sce 服务端转交腾讯云国际站 TokenHub 进行翻译。不会读取或发送表单当前值、密码、验证码、可编辑区域、脚本、样式或代码内容；普通、无痕及隐匿模式均可由您主动使用网页翻译，并共用本机已有的翻译授权。
- 可选语音输入：仅当您点击主页搜索框或 AI 输入框的语音按钮、并按住“按住说话”区域时，本应用才使用麦克风并调用 Android 系统语音识别服务。我们不保存、读取或上传录音音频；Android 12 及以上在设备提供时优先使用端侧识别。若端侧识别不可用，用户设备配置的识别服务可能依其自身政策处理音频或使用网络。识别出的文字只会在本机用于您发起的搜索，或在您已启用 AI 后作为您主动发送给相应 AI 服务商的消息内容。
- 可选 AI 助理数据：普通浏览期间不会上传页面内容。首次使用 AI 助理前，应用会在对话抽屉内说明数据范围并请您主动开启；此后您点击发送问题或继续任务时，应用默认尝试读取当前页的问题文字、网址、标题、截断后的可见正文、普通表单字段说明（如标签、类型和选项）及可访问链接的网址和短期标识。免费模式将这些数据经 Sce 服务端转交 OpenAI；如果您主动配置自己的 OpenAI、Claude、Gemini 或 DeepSeek API Key，则由设备直接发送至所选服务商，不经过 Sce 的 AI 服务端。AI 可在您的指令下搜索、打开已观察到的链接或填写普通字段；每次导航后会重新读取页面。不会读取或发送已填写的表单值，也不会操作密码、验证码、支付、证件、文件、提交或发送按钮；无痕及隐匿模式暂不提供 AI 助理。您可在对话抽屉内撤销相应模式的 AI 授权。网页正文可能包含您或他人的个人信息，请确认页面内容适合分享后再发送。
- 相机与文件：扫码时，在您授权后使用相机识别二维码；扫码画面不会上传到 Sce 服务端。下载功能把您选择的文件保存到设备，应用可读取和管理对应下载记录及文件。
- 服务运行信息：访问账号和同步接口时，服务端会处理完成请求所需的网络信息，例如 IP 地址、请求时间、请求路径和请求标识，用于安全防护、故障排查及维持服务运行。
数据的用途与对外传输
上述数据用于实现浏览、搜索、扫码、下载、账号登录、可选云同步、安全防护及故障排查。邮箱验证启用后，验证码邮件通过腾讯云邮件推送服务（SES）发送，因此收件邮箱地址及邮件内容会由腾讯云处理；发送到我们的联系邮箱的来信由相应邮箱服务商处理。您访问网页或使用搜索引擎时，网页地址、搜索词及网页请求会发送给相应网站、搜索服务和其使用的第三方；这些网站可能使用 Cookie 等技术，按其自身政策处理数据。点击主页推广链接同样会连接对应网站。本应用不向广告商出售您的账号或云同步数据。
使用网页翻译时，只有您主动选择翻译操作后，当时页面中可安全读取的普通文本会被发送至腾讯云国际站 TokenHub 的翻译服务；Sce 服务端不会保存该网页正文。请勿选择包含不适合向该服务商传输内容的页面进行翻译。
免费模式使用 AI 助理时，Sce 服务端会将您主动发送的文字及可安全读取的页面数据转交 OpenAI API，以生成答复或受限的下一步浏览操作。若您选择自带 Key 模式，设备直接请求您选定的 OpenAI、Claude、Gemini 或 DeepSeek，不向 Sce 服务端发送该模式的问题、页面内容或 API Key，相关 API 使用费用由您在相应服务商的账号承担。AI 功能不会自动上传您的浏览历史、书签、下载内容或整页表单输入；只有您主动发送或继续任务时，才会传输当时页面的有限快照。请勿在提问中输入密码、验证码或支付信息。所选 AI 服务商会处理您主动发送的请求内容；不使用 AI 助理时，我们不会因此向 AI 服务商发送页面内容。
保存、安全与删除
本地数据由您在应用内相应功能中删除，或通过卸载应用清除。账号及云同步数据在提供服务期间保留；您可在应用的个人信息页或网页删除入口验证账号密码后，直接删除账号、两套云同步数据及服务端登录令牌。退出登录仅清除设备上的登录状态，不等于删除账号。网络传输使用 HTTPS，服务端密码以哈希形式保存，设备上的登录令牌采用加密存储。
AI 对话内容仅在本次应用会话的内存中展示，Sce 服务端不把提问或答复正文写入数据库。服务端仅针对免费模式保存不含对话正文的用量记录以实施额度及防止滥用，记录在 35 天后自动删除；删除账号时也会清除该账号的用量记录。各服务商的自带 API Key 使用 Android Keystore 支持的加密存储保留在设备上，不参与云同步；您可在 AI 设置浮窗中单独移除密钥，退出或删除 Sce 账号时也会清除。移动设备被攻破时，本地密钥仍可能泄露。
网页翻译的页面正文不会由 Sce 服务端写入数据库或应用日志。服务端仅保存不含正文的字符数与请求次数，以实行每日额度和防止滥用；该记录 35 天后自动删除，并会在账号删除时清除。
重置密码后，使用同一 GameSce 账号的应用需要重新登录。删除 Sce 数据不会删除您的 GameSce 账号或其他应用的数据；如果您希望删除 GameSce 账号及所有关联应用的数据，可通过下方联系邮箱提出申请，我们通常在 30 日内处理。设备上的本地数据及 Google Play 订阅需分别清除或取消。
政策更新与联系
如数据处理方式发生变化，我们会更新此页面及生效日期。有关隐私或数据访问的问题，请联系：gamescesupport@gmail.com。如果无法使用自助删除入口，也可通过此邮箱联系开发者。
This policy explains how Sce Browser (the “App”) handles data when providing web browsing, QR scanning, downloads, accounts, cloud sync, and the optional AI assistant. The developer of the App receives privacy enquiries at the email address below.
Data we handle
- On-device browsing data: Browsing history, search history, bookmarks, home shortcuts, tabs and session state, download records, and settings are stored on your device. Incognito mode does not add browsing or search history. Hidden mode keeps a separate local data space.
- Account information: During registration, sign-in, and password recovery, we process your email address, password, and verification code to verify your identity and protect your account. We also retain your account identifier, username, avatar, and sign-in state to provide account and cloud sync features. Passwords are stored as hashes, not plaintext; plaintext passwords and verification codes are not written to logs. Verification codes are single-use and valid for 10 minutes. Login tokens on your device are encrypted.
- Optional cloud sync data: Only when you use the upload feature, home shortcuts, bookmarks, and menu and bottom-bar configuration are stored on the Sce server. Regular and hidden data spaces are stored separately. Browsing history, search history, downloaded files, and download records are not uploaded by this feature.
- Optional webpage translation data: Only after you actively choose Webpage translation and a target language on the current page does the App read ordinary visible text and send it to the Sce server, which forwards it to Tencent Cloud International TokenHub for translation. It does not read or send form values, passwords, verification codes, editable content, scripts, styles, or code. You can actively use webpage translation in regular, incognito, and hidden modes, sharing the existing translation consent on this device.
- Optional voice input: The App uses the microphone and invokes the Android system speech recognition service only while you have tapped the voice button in the home search or AI input and are holding the “Hold to talk” area. We do not store, read, or upload recorded audio. On Android 12 and later, on-device recognition is preferred when provided by the device. When on-device recognition is unavailable, the recognition service configured on your device may process audio or use the network under its own policy. Recognized text is used locally for the search you initiate, or, after you have enabled AI, as message content you actively send to the selected AI provider.
- Optional AI assistant data: Page content is not uploaded during ordinary browsing. Before first use, the chat drawer explains the data involved and asks you to actively enable AI. When you tap Send or continue a task, the app attempts to read the current page and uses your question, safely readable URL, title, a shortened excerpt of visible text, descriptions of ordinary form fields (such as labels, types, and options), and URLs plus short-lived identifiers for accessible links. In free mode these are forwarded through the Sce server to OpenAI. If you actively configure your own OpenAI, Claude, Gemini, or DeepSeek API Key, the device sends them directly to the selected provider without using the Sce AI server. At your instruction, AI can search, open observed links, or fill ordinary fields, and re-reads the page after navigation. Filled form values are not read or sent, and AI does not operate passwords, one-time codes, payments, identity fields, files, submit, or send buttons. The AI assistant is not available in incognito or hidden mode. You can withdraw consent for the active AI mode in the chat drawer. Visible page text may contain your or another person's personal information; please check that it is appropriate to share before sending it.
- Camera and files: With your permission, QR scanning uses your camera to recognize codes. Camera frames are not uploaded to the Sce server. Downloads save files you choose to your device; the App can read and manage the related files and download records.
- Service operation data: When you use account and sync APIs, the server processes network information needed to handle the request, such as IP address, request time, path, and request identifier, for security, troubleshooting, and service operation.
Uses and transfers
We use this data to provide browsing, search, scanning, downloads, account access, optional sync, security, and troubleshooting. Once email verification is enabled, Tencent Cloud Email Sending (SES) sends verification messages and processes recipient email addresses and message contents; messages sent to our contact address are processed by the relevant email provider. When you visit websites or use a search engine, page addresses, search terms, and web requests go to the relevant sites, search providers, and their third parties. Those sites may use cookies and handle data under their own policies. Tapping a promoted home link also connects to its destination site. We do not sell your account or cloud sync data to advertisers.
When you use webpage translation, only ordinary page text that can safely be read at the time you actively choose translation is sent to Tencent Cloud International TokenHub. The Sce server does not store that page text. Do not select a page for translation if its content is not appropriate to send to that provider.
In free mode, the Sce server forwards the text you send and safely readable page data to the OpenAI API to generate a response or a restricted next browser action. In the optional own-key mode, your device calls the selected OpenAI, Claude, Gemini, or DeepSeek provider directly; Sce does not receive that mode's questions, page content, or API Key, and API charges are billed to your account with that provider. The AI feature does not automatically upload your browsing history, bookmarks, downloads, or filled form values; a limited snapshot is transferred only when you actively send or continue a task. Please do not enter passwords, one-time codes, or payment information in your questions. The selected AI provider processes the requests you actively send; when you do not use the assistant, we do not send page content to an AI provider for this feature.
Retention, security, and deletion
You can delete local data using the relevant App features or remove it by uninstalling the App. Account and cloud sync data are retained while the service is provided. In the App’s profile screen or on the account deletion page, you can verify your Sce username or email and password to delete your Sce account details, data in both cloud sync spaces, and Sce sign-in state. Your GameSce account and data in other apps are retained. Signing out clears the login state on your device and does not delete your account. Data is transmitted over HTTPS, server passwords are stored as hashes, and device login tokens are encrypted.
AI conversation content is shown only in memory during the current App session; the Sce server does not write prompts or responses to its database. For free mode only, the server keeps usage records without conversation text to enforce the allowance and prevent abuse. These records are deleted after 35 days and when the account is deleted. Your own provider API Keys are stored encrypted on this device using Android Keystore support and are not synced; you can remove each key from AI settings, and signing out of or deleting your Sce account also clears them. A compromised device may still expose a locally stored key.
The Sce server does not write webpage text used for translation to its database or application logs. It retains only non-content character and request counts to enforce daily allowances and prevent abuse; those records are deleted after 35 days and when the account is deleted.
After a password reset, apps using the same GameSce account require you to sign in again. Deleting Sce data does not delete your GameSce account or data in other apps. To request deletion of your GameSce account and data in all associated apps, contact us at the email address below; requests are normally handled within 30 days. Local device data and Google Play subscriptions must be cleared or cancelled separately.
Changes and contact
If our data practices change, we will update this page and its effective date. For privacy or data access questions, contact gamescesupport@gmail.com. If you cannot use self-service deletion, you may also contact the developer at this address.