隐私政策
生效日期：2026 年 10 月 13 日 · 适用对象：CopiCat 浏览器扩展（Chrome / Chromium 内核）与 copicat.biz 网站
Effective date: October 13, 2026 · Applies to: the CopiCat browser extension (Chrome / Chromium) and copicat.biz
中文我们收集什么
| 数据 | 是否收集 | 说明 |
|---|---|---|
| 你在 binance.com 的登录态 Cookie （会话凭证）与相关请求头 | 是 | 这是扩展的唯一采集对象。用于同步到你自己的 CopiCat 实例，使你的实例能持续读取跟单信号并自动续期。 |
| 你在设置页填写的实例地址、配对码 | 是（仅存本机） | 保存在你浏览器的本地存储中，用于把登录态发送到你自己指定的服务器。 |
| 姓名、邮箱、证件号、地址 | 否 | 扩展不收集任何个人身份信息。 |
| API Key / API Secret | 否 | 扩展无法读取、也不处理任何 API 凭证。 |
| 资金、支付、交易记录 | 否 | 扩展没有下单、撤单、划转、提现能力，不接触你的资金。 |
| 位置、健康、个人通讯 | 否 | 完全不涉及。 |
| 浏览历史 / 网络记录 | 否 | 仅判断你是否打开了 binance.com 页面（用于决定何时续期），不保存你访问过哪些页面的列表。 |
| 统计、广告标识、用户画像 | 否 | 没有任何埋点、统计 SDK 或广告代码。 |
数据去向
- 采集到的登录态 只会发送到一个地方：你在设置中填写的实例地址（默认
https://copicat.biz）。 - 我们不会把任何数据出售、出租或传输给第三方，也不会用于与本扩展单一用途无关的任何目的（如统计、广告、画像）。
- 传输全程使用 HTTPS 加密。
数据保存与删除
- 登录态保存在你自己的实例中（按你的账户工作区隔离）。官方托管实例的保存位置与生命周期由该实例决定。
- 你可以在 CopiCat 控制台的「连接币安」页面随时清除已推送的登录态。
- 卸载扩展即停止一切采集；在币安退出登录或清除浏览器 Cookie 会让已同步的登录态立即失效。
- 在设置页修改或清空实例地址后，扩展不再向原地址发送任何数据。
安全边界（重要）
- 本扩展只做一件事：读取你本人在 binance.com 的登录态并同步到你自己的实例。
- 本扩展不含下单、撤单、划转、提现等任何资金操作能力。
- 本扩展不会读取你在其它网站的数据，也不请求访问与上述用途无关的站点。
政策变更
本政策如有实质变更，我们会在 copicat.biz 上更新本页面并修改生效日期。继续使用即表示你接受更新后的政策。
联系我们
如对本政策或你的数据有任何疑问，请通过 copicat.biz 控制台内的支持渠道与我们联系。
ENWhat we collect
| Data | Collected? | Details |
|---|---|---|
| Your login session cookies and related request headers on binance.com | Yes | This is the only thing the extension collects. It is used to sync the session to your own CopiCat instance so that instance can keep reading copy-trading signals and refreshing the session. |
| Instance URL and pairing code you enter in Settings | Yes (local only) | Stored in your browser's local storage, used to send the session to the server you specify. |
| Name, email, address, government ID | No | No personal identity information is collected. |
| API keys / secrets | No | The extension cannot read or handle API credentials. |
| Funds, payments, trade records | No | The extension has no ability to place orders, cancel orders, transfer or withdraw. It never touches your funds. |
| Location, health, personal messages | No | Not accessed at all. |
| Browsing history / web records | No | It only checks whether a binance.com page is open (to decide when to refresh) and does not keep a list of pages you visited. |
| Analytics, ad identifiers, profiles | No | No tracking, no analytics SDK, no advertising code. |
Where the data goes
- Collected session data goes to one place only: the instance URL you configured (default
https://copicat.biz). - We do not sell, rent or transfer your data to any third party, and we do not use it for any purpose unrelated to this extension's single purpose (no analytics, ads or profiling).
- All transmission is encrypted with HTTPS.
Retention and deletion
- The session is stored in your own instance, isolated per account workspace. For an officially hosted instance, retention is governed by that instance.
- You can clear the pushed session at any time from the "Connect Binance" page of your CopiCat console.
- Uninstalling the extension stops all collection immediately; logging out of Binance or clearing browser cookies invalidates any synced session right away.
- After you change or clear the instance URL in Settings, the extension sends nothing to the previous address.
Security boundaries (important)
- The extension does one thing only: read your own binance.com session and sync it to your own instance.
- It contains no capability for placing orders, cancelling orders, transfers or withdrawals.
- It does not read data from other websites, and it does not request access to sites unrelated to this purpose.
Changes to this policy
Material changes will be posted on this page at copicat.biz with an updated effective date. Continued use means you accept the updated policy.
Contact
For questions about this policy or your data, please use the support channel inside your copicat.biz console.