隐私政策
生效日期：2026 年 10 月 19 日
ZERO桌面（以下简称"本软件"）是一款运行在 Windows 电脑上的桌面效率工具，官网为 desk.zero365.cc。本政策说明本软件和官网会处理哪些数据、为什么处理、存放在哪里、保存多久，以及你如何删除它们。
简要说明：你的软件设置、桌面整理信息和 Gmail 邮件内容只保存在你自己的电脑上，开发者看不到。
开发者的服务器只保存运营必需的少量信息：官网的访问和下载记录、你提交的意见反馈，以及"一台电脑绑定一个 Gmail 账号"所需的 Gmail 地址和匿名设备标识。
本软件不展示广告，不出售任何数据。
1. 保存在你电脑上的数据
- 软件设置与桌面整理信息：收纳盒、快捷键、窗口位置、天气城市等，保存在
%APPDATA%\ZeroDesktop。
- 运行日志：用于排查问题的本地日志，不会自动发送给任何人。
- Gmail 登录令牌：使用 Windows 数据保护（DPAPI）加密保存，只有你当前的 Windows 用户能解密。本软件不会读取或保存你的 Google 密码。
- Gmail 邮件缓存：邮件列表摘要和你打开过的邮件正文，使用 DPAPI 加密保存在
%LOCALAPPDATA%\ZeroDesktop\gmail，用于加快显示和离线查看。
2. 开发者服务器保存的数据
开发者在自己的服务器（desk.zero365.cc、deskm.zero365.cc）上保存以下信息，只有开发者本人可以在管理后台查看：
| 数据 | 包含的内容 | 用途 | 保存多久 |
|---|
| 官网访问记录 | IP 地址、根据 IP 推算的国家、访问时间、停留时长、访问的页面、来源网址、浏览器信息 | 了解官网的访问量和访客来自哪些国家 | 12 个月后自动删除 |
| 安装包下载记录 | IP 地址、国家、下载时间、浏览器信息 | 统计下载量 | 12 个月后自动删除 |
| Gmail 账号绑定 | 你登录的 Gmail 地址、匿名设备标识、软件版本、最近一次使用的时间、IP 地址和国家 | 执行"一台电脑只能使用一个 Gmail 账号"的规则 | 直到绑定被解除，或你要求删除 |
| 意见反馈 | 你填写的反馈内容和联系方式（选填）、IP 地址、国家、提交时间；从软件提交时还包括软件版本和匿名设备标识 | 处理你的问题和建议；限制每人每天最多 5 次，防止滥用 | 直到你要求删除 |
- 匿名设备标识是用 Windows 机器标识和当前 Windows 用户标识计算出的 SHA-256 摘要，无法反推出原始信息，也不包含你的姓名、电脑名等。
- 国家信息由服务器上的离线 IP 数据库（DB-IP）推算，IP 地址不会发送给任何第三方。
- 官网不使用 Cookie，也不使用第三方统计或广告追踪工具。
3. Google 用户数据的访问与使用
只有你主动登录 Google 账号后，本软件才会访问你的 Google 数据。登录通过 Google 官方 OAuth 授权页面完成。本软件申请以下权限：
| 权限 | 用途 |
|---|
https://www.googleapis.com/auth/gmail.modify
读取、撰写、发送和管理 Gmail 邮件 |
在软件里显示邮件列表和正文；标记已读/未读、加星标、归档、移到回收站；发送邮件和保存草稿；新建、重命名、删除标签；判断哪些新邮件需要在桌面提醒你。 |
https://www.googleapis.com/auth/userinfo.profile
查看你的基本个人资料 |
在邮箱窗口左上角显示你的 Google 头像。 |
使用方式
- Google 用户数据只用于在本软件中向你本人提供上述邮件功能，邮件在你的电脑上处理和保存。
- 邮件内容（主题、正文、附件、联系人）不会发送到开发者的服务器，不会出售，不会用于广告，也不会用于训练人工智能或机器学习模型。开发者及任何其他人都不会阅读你的邮件。
- 发送到开发者服务器的只有你登录的 Gmail 地址，连同匿名设备标识一起，用于"一台电脑只能使用一个 Gmail 账号"的校验，不用于任何其他目的，也不提供给第三方。
- 翻译功能：只有你主动点击"翻译成简体中文/英文"时，当前这封邮件的主题和正文文字才会发送给 Google 翻译服务（translate.googleapis.com），只用于返回译文。
4. 其他联网功能
以下功能需要联网，发送的内容仅限于完成该功能所必需的信息，不包含你的身份信息或邮件内容：
- 天气：向 Open-Meteo（open-meteo.com）发送你设置的城市名称或其经纬度，用于获取天气。
- 万年历节假日：从 jsDelivr / GitHub 以及 Nager.Date（date.nager.at）下载公开的节假日数据，只包含年份和国家。
- 邮件表情图片：从 Google 字体服务（fonts.gstatic.com）下载表情图片，只包含表情编码。
- 下载器：按你输入的链接下载文件；使用种子或磁力链接时，按 BitTorrent 协议与其他下载者直接连接，对方能看到你的 IP 地址。
- 电脑管家"联网搜索"：会在浏览器中打开搜索引擎，搜索你选中的软件名称。
上述第三方服务按各自的隐私政策处理你的请求。
5. 数据的保留与删除
- 退出 Google 账号：在邮箱窗口点头像 → "退出账号"。本软件会向 Google 撤销授权，并删除电脑上的登录令牌和该账号的全部邮件缓存。
- 在 Google 一侧撤销：你也可以随时在 Google 账号 → 第三方应用和服务 中移除 ZERO桌面的访问权限。
- 服务器上的数据：访问和下载记录 12 个月后自动删除。需要解除 Gmail 绑定、删除你的反馈或服务器上与你有关的其他记录，请发邮件到 itorzhang@gmail.com，我们会在 30 天内处理。
- 卸载软件：卸载时可以选择同时删除个人设置；你也可以手动删除
%APPDATA%\ZeroDesktop 和 %LOCALAPPDATA%\ZeroDesktop 两个文件夹。
6. 数据安全
本软件与 Google、与开发者服务器之间的通信全部通过 HTTPS 加密。电脑上的登录令牌和邮件缓存使用 DPAPI 加密，绑定你的 Windows 用户账号。服务器上的数据只有开发者可以通过需要登录的管理后台查看。
7. 儿童隐私
本软件不面向 13 岁以下儿童，也不会有意收集儿童的个人信息。
8. 政策变更
如果本政策有变化，我们会更新本页面并修改顶部的生效日期。重大变化会在软件新版本中提示。
9. 联系我们
对本政策或你的数据有任何问题，请发邮件到 itorzhang@gmail.com，或使用 意见反馈。
Privacy Policy
Effective date: October 19, 2026
ZERO Desktop ("ZERO桌面", "the app") is a desktop productivity tool for Windows; its website is desk.zero365.cc. This policy explains what data the app and the website handle, why, where it is stored, how long it is kept, and how you can delete it.
In short: your settings, desktop layout and Gmail message content stay on your own computer and are not visible to the developer.
The developer's server keeps only a small amount of operational data: website visit and download logs, feedback you submit, and the Gmail address plus an anonymous device identifier needed for the "one Gmail account per computer" rule.
The app shows no ads and never sells data.
1. Data stored on your computer
- Settings and desktop layout (boxes, shortcuts, window positions, weather city), stored in
%APPDATA%\ZeroDesktop.
- Local logs used for troubleshooting. They are never sent automatically.
- Gmail sign-in token, encrypted with Windows Data Protection (DPAPI) so only your Windows user can decrypt it. The app never sees or stores your Google password.
- Gmail cache: message summaries and the bodies of messages you opened, encrypted with DPAPI in
%LOCALAPPDATA%\ZeroDesktop\gmail.
2. Data stored on the developer's server
The developer keeps the following on their own server (desk.zero365.cc, deskm.zero365.cc). Only the developer can view it, through a password-protected admin console:
| Data | Contents | Purpose | Retention |
|---|
| Website visits | IP address, country derived from the IP, time, time on page, page, referrer, browser user agent | Understand website traffic and visitors' countries | Deleted automatically after 12 months |
| Installer downloads | IP address, country, time, browser user agent | Count downloads | Deleted automatically after 12 months |
| Gmail account binding | The Gmail address you sign in with, an anonymous device identifier, app version, last-used time, IP address and country | Enforce the rule that each computer can use only one Gmail account | Until the binding is removed or you ask us to delete it |
| Feedback | Your message and optional contact details, IP address, country, time; from the app also the app version and anonymous device identifier | Answer your questions and suggestions; limit submissions to 5 per person per day to prevent abuse | Until you ask us to delete it |
- The anonymous device identifier is a SHA-256 digest of the Windows machine ID and the current Windows user ID. It cannot be reversed and contains no name or computer name.
- Countries are derived with an offline IP database (DB-IP) on the server; IP addresses are not sent to any third party.
- The website uses no cookies and no third-party analytics or advertising trackers.
3. Access to and use of Google user data
The app accesses your Google data only after you sign in through Google's official OAuth consent screen. It requests these scopes:
| Scope | Purpose |
|---|
https://www.googleapis.com/auth/gmail.modify |
Show your message list and message bodies; mark read/unread, star, archive and trash messages; send email and save drafts; create, rename and delete labels; decide which new messages deserve a desktop notification. |
https://www.googleapis.com/auth/userinfo.profile |
Show your Google profile picture in the mail window. |
How the data is used
- Google user data is used only to provide these email features to you inside the app; messages are processed and stored on your computer.
- Message content (subjects, bodies, attachments, contacts) is never sent to the developer's server, never sold, not used for advertising, and not used to train AI or machine-learning models. Neither the developer nor anyone else reads your email.
- The only Google user data sent to the developer's server is the Gmail address you sign in with, together with the anonymous device identifier, solely to enforce the one-account-per-computer rule. It is not used for any other purpose and not shared with third parties.
- Translation: only when you click "Translate to Chinese/English" are the subject and text of that message sent to Google Translate (translate.googleapis.com), solely to return the translation.
ZERO Desktop's use and transfer to any other app of information received from Google APIs will adhere to the
Google API Services User Data Policy, including the Limited Use requirements.
4. Other network features
These features go online and send only what each feature needs. No identity or email content is included:
- Weather: your configured city name or its coordinates are sent to Open-Meteo (open-meteo.com).
- Calendar holidays: public holiday data is downloaded from jsDelivr / GitHub and Nager.Date (date.nager.at), requested by year and country only.
- Emoji images: downloaded from Google Fonts (fonts.gstatic.com), requested by emoji code only.
- Downloader: downloads the links you enter. With torrent or magnet links it connects to other peers over BitTorrent, who can see your IP address.
- "Search online" in the PC manager: opens a search engine in your browser for the selected program name.
Those third-party services handle requests under their own privacy policies.
5. Retention and deletion
- Sign out: click your avatar in the mail window → "退出账号" (Sign out). The app revokes its Google authorization and deletes the sign-in token and all cached email for that account from your computer.
- Revoke from Google: you can remove ZERO Desktop's access at any time at Google Account → Third-party apps & services.
- Server data: visit and download logs are deleted automatically after 12 months. To remove a Gmail binding, delete your feedback or any other server record about you, email itorzhang@gmail.com; we will act within 30 days.
- Uninstall: the uninstaller can remove your personal settings, or you can delete the
%APPDATA%\ZeroDesktop and %LOCALAPPDATA%\ZeroDesktop folders manually.
6. Security
All communication with Google and with the developer's server uses HTTPS. The sign-in token and email cache are encrypted on your computer with DPAPI. Server data is only accessible to the developer through a password-protected admin console.
7. Children
The app is not directed to children under 13 and does not knowingly collect their personal information.
8. Changes
If this policy changes, we will update this page and its effective date. Significant changes will be announced in a new version of the app.
9. Contact
Questions about this policy or your data: itorzhang@gmail.com, or use Feedback.
ZERO桌面