小斗篷隐私政策

最近更新：2026 年 8 月

一句话概括：小斗篷不收集任何可识别个人身份的信息，不知道你管控了哪些 App，也无法读取你的笔记内容；服务器上只有一个匿名设备标识和"暂停到几点"。

留在手机上、从不上传的信息

笔记内容：仅存于本机，我们无法读取。
管控规则：受控 App、动作、时段等全部存在本机。所选 App 由 iOS 以不透明标识提供，开发者与应用本身都无从得知具体是哪些 App。
暗号：仅存散列值，不存明文，也不上传。

启用远程控制后，服务器上会有什么

远程控制默认关闭。只有你在应用内（控制台 → 远程控制）阅读收集说明并明确启用后，本机才会向服务器登记；未启用时应用不产生任何网络请求，也不注册推送。启用后服务器保存的仅有：

设备密钥的哈希值：用于识别是哪台设备，无法还原出密钥本身。
推送标识（APNs token）：用于唤醒设备读取指令。
临时放行的截止时间：即"暂停到几点"。
时间戳与指令版本号：登记时间、最近活跃时间与暂停指令的版本号，用于自动清理与指令同步。

服务器不保存：规则内容、受控 App、笔记、暗号、账号、手机号、邮箱、位置、设备型号或任何可识别个人身份的信息。我们不使用第三方分析或广告 SDK，不向任何第三方共享数据。

为防滥用与排障，服务器的访问日志会短期记录来源 IP 地址与请求路径（不含请求内容），最长保留 30 天后自动删除，不用于任何其他目的。

保留期限

超过 180 天未活跃的设备记录会被自动删除。你也可以随时手动删除（见下）。

撤回与删除你的数据

在应用内进入控制台 → 远程控制 → 停用并删除服务器数据，即可立即抹除服务器上与本机相关的全部记录、吊销密钥并停止一切数据上传——此后应用不再连接服务器，直到你再次明确启用（届时使用全新密钥）。你也可以直接请求：

DELETE https://cloak.qianyiyule.top/api/v1/devices/<你的设备密钥>

卸载应用即清除本机全部数据。

儿童

小斗篷是供家长在孩子设备上使用的管控工具，由家长完成设置。我们不向儿童收集任何信息。

联系我们

bytegm@gmail.com

LittleCloak Privacy Policy

Last updated: August 2026

In short: LittleCloak collects no personally identifiable information. We don't know which apps you manage, and we can't read your notes; the server only holds an anonymous device identifier and the pause deadline.

Stays on the device, never uploaded

Notes — stored locally only; we cannot read them.
Rules — managed apps, actions and schedules stay on the device. Selected apps are provided by iOS as opaque tokens, so neither the developer nor the app can tell which apps they are.
Passphrase — only a salted hash is stored, never the plaintext, and never uploaded.

What the server stores when remote control is enabled

Remote control is off by default. The device registers with the server only after you review the collection notice and explicitly enable it in the app (Console → Remote Control); until then the app makes no network requests and doesn't register for push. Once enabled, the server keeps only:

A hash of the device key — identifies the device; the key itself cannot be recovered from it.
A push token (APNs) — used to wake the device to fetch commands.
The pause deadline — i.e. "paused until".
Timestamps and a command revision — registration time, last-active time, and the pause command's revision number, used for cleanup and command sync.

The server does not store rules, managed apps, notes, passphrases, accounts, phone numbers, email addresses, location, device models, or any personally identifying information. We use no third-party analytics or advertising SDKs and share data with no one.

For abuse prevention and troubleshooting, server access logs briefly record the source IP address and request path (never request contents), kept for at most 30 days and used for nothing else.

Retention

Device records inactive for more than 180 days are deleted automatically. You can also delete yours at any time (below).

Withdrawing consent and deleting your data

In the app: Console → Remote Control → Disable & Delete Server Data erases every server-side record for your device immediately, revokes the key, and stops all uploads — the app no longer contacts the server until you explicitly enable remote control again (with a brand-new key). You can also call:

DELETE https://cloak.qianyiyule.top/api/v1/devices/<your device key>

Uninstalling the app removes all local data.

Children

LittleCloak is a parental tool set up by a parent on a child's device. We collect no information from children.

Contact