Privacy and optional analytics / 隐私与可选统计

Optional browsing analytics / 可选浏览统计

Nothing is tracked for content analytics before you allow it. Consent permits first-party content identifiers, server-received times, content exposure and measurable video engagement. Signed-in activity is linked to your account only after account-specific consent. Guests use a random first-party cookie, not fingerprinting. Changing accounts requires consent again. No analytics is sent to a third-party platform.

同意前不采集内容统计。同意后记录本站内容 ID、服务端接收时间、内容曝光与可测量的视频参与情况。登录用户只有明确同意后才关联账号；游客使用随机的本站 Cookie，不使用设备指纹。切换账号需要重新同意。统计不发送到第三方分析平台。

Raw activity and analytics identifiers expire after 90 days; anonymous daily totals are retained for 1 year. Privacy preferences appear automatically only after the first successful sign-in in this browser, not on guest visits, refreshes or later sign-ins. You can change your choice below at any time. Withdrawal stops collection, removes this browser's raw records, and also removes a signed-in account's linked raw records. Already anonymous totals remain. Browser Global Privacy Control and Do Not Track disable optional collection. Administrators are excluded.

原始活动与统计标识保存 90 天，匿名日汇总保存 1 年。隐私偏好只在本浏览器首次成功登录后自动显示一次，游客浏览、刷新和后续登录不会重复弹出；可随时通过下方入口修改。撤回后停止采集并删除该浏览器的原始记录；登录撤回时也删除该账号的关联原始活动。已匿名化汇总继续保留。尊重浏览器 GPC、DNT 设置；不统计管理员。

Optional analytics is disabled on this website. No browsing analytics is collected; privacy preferences will become available when that service is connected.

Login security audit / 登录安全审计

Successful sign-ins, including the first registration sign-in, record account ID, sign-in method and server time for 90 days; anonymous daily sign-in counts are retained for 1 year. Session checks and failed sign-ins do not create success records. This necessary account-security audit is separate from optional browsing consent. Existing sessions are not retroactively treated as historical sign-ins.

登录成功（包括注册后的首次登录）记录账号 ID、登录方式与服务端时间，保留 90 天；匿名日登录次数保留 1 年。这是账号安全审计，与可选浏览统计分开。检查会话、失败登录不算成功登录；不补造启用前的历史记录。

What measurements mean / 统计口径

Counts cover consenting accounts/browsers, not all people or all traffic. Cross-device guests may appear separately. Opening a place's details records a view; passive content exposure requires at least 50% visibility for 2 seconds. Native video watch time excludes hidden, offscreen, paused, stalled and seek-jump intervals; progress uses actually watched coverage, not seeking to the end. Manual, automatic and programmatic starts are separate. TikTok iframe loading or opening its original link is not proof of playback; we do not invent its watch time or completion rate. Current bookmark counts describe the existing bookmark feature, not historical additions in the selected period.

统计覆盖同意的账号／浏览器，不等于全部实际人数；游客跨设备可能重复。主动打开景点详情记浏览；被动内容曝光要求至少 50% 可见且持续 2 秒。本地视频时长排除隐藏、离屏、暂停、卡顿与拖动跳跃；进度根据实际观看覆盖计算，拖到末尾不算看完。主动、自动与程序播放分开。TikTok 的播放器加载或原链接点击不等于播放，不伪造观看时长或完成率。当前收藏数来自必要的收藏功能，不代表所选期间新增收藏。

No passwords, tokens, full IP addresses, contact information, search terms, private itineraries or form notes are stored in content analytics. Only authenticated administrators can access reports and account-linked raw activity. Downloaded reports must be protected and deleted within the same retention policy. Existing account data, requests and credits retain their existing behavior; withdrawing analytics does not remove them.

内容统计不保存密码、令牌、完整 IP、联系方式、搜索词、私人行程或表单备注。仅已登录管理员可访问报表及账号原始活动；下载的报表应同样保护并遵守保留期限。撤回统计不会删除原有账号、需求、收藏或积分。