隐私政策
适用于网站 nolookupwords-app.pages.dev 与 Google Play 上的「不查单词」App（com.nolookupwords.app）。更新于 2026-09-24。
一句话
不用注册，不要邮箱、手机号、姓名。你导入的书不会整本上传，只在你自己的设备上处理（朗读时只发出正在读的那一句，见下文）。没有广告，没有第三方统计或追踪 SDK，不卖任何数据。
留在你设备上的
- 你导入的 PDF / 电子书、从中挑出的生词和词组、阅读位置。
- 偏好设置、试用开始时间、查词缓存。
- 购买后设置的密码（存在浏览器本地存储里，用来下次自动登录）。
这些都在浏览器的本地存储里，清除浏览器数据或卸载 App 即删除。
存在我们服务器上的（Cloudflare）
- 密码记录：只存密码的加密散列（HMAC），不存明文；附带创建时间、付款方式、付款是否已核实、IP 地址的前两段。保留到你删除账号为止。
- 订单（网页版付款）：订单号、金额、付款方式、状态，以及下单时的 IP 地址和浏览器标识（User-Agent），7 天后自动删除。
- Google Play 购买：购买凭证的散列（当作订单号）、Google 的订单号、付款状态和是否已经换过密码。长期保存，删除账号时也保留 —— 用来保证一笔购买只能换一串密码。
- 防刷记录：按 IP 计的请求次数，10 分钟后自动删除；密码输错时记下时间、IP 前两段和所输内容的前 20 个字符，用来发现有人批量猜密码，24 小时后自动删除。
- 匿名统计：每天、每个页面、每个来源渠道的访问次数；独立访客按「日期 + IP」的散列去重，不存 IP 本身；试用开始次数按来源渠道计数。
用到某个功能时，交给第三方的
- 释义：要查的单词会经我们的服务器发给 Wiktionary、dictionaryapi.dev。
- 配图：单词会经我们的服务器发给 Pexels、Pixabay、Unsplash、Wikimedia Commons、Openverse、Flickr 搜图。
- 朗读：要朗读的单词、释义和例句文本发给 Microsoft Azure 语音服务合成；合成好的语音按文本的散列缓存在我们的服务器上，供所有人复用，不关联到任何人；部分单词发音直接从有道词典加载。
- 书库：搜索词发给 Open Library、Project Gutenberg、OpenAlex、Zenodo、DOAB、OAPEN 等公开书库；下载经我们的服务器中转。
- 付款：App 内购买由 Google Play 处理；网页版由支付宝、微信或 Stripe 处理。我们看不到你的银行卡号。
这些请求只带单词、文本或搜索词本身，不带任何能认出你的信息。
儿童
本应用面向成年人和学生的英语阅读，不面向 13 岁以下儿童，也不会有意收集儿童的数据。
联系
有任何问题，或者删不掉账号，微信找开发者：yujiacmjd。
Privacy policy
Covers the website nolookupwords-app.pages.dev and the NoLookupWords app on Google Play (com.nolookupwords.app). Updated 2026-09-24.
In short
No sign-up: we never ask for your email, phone number or name. Books you import are never uploaded as a whole — they are processed on your own device (read-aloud sends only the sentence being read; see below). No ads, no third-party analytics or tracking SDKs, and we sell no data.
Stays on your device
- The PDFs and ebooks you import, the words and phrases picked from them, and your reading position.
- Preferences, the trial start time, and a cache of looked-up words.
- The passphrase you set after buying (kept in browser storage so you stay signed in).
All of this lives in your browser's local storage and is removed when you clear site data or uninstall the app.
Stored on our servers (Cloudflare)
- Passphrase record: only a keyed hash (HMAC) of your passphrase, never the passphrase itself, plus when it was created, how you paid, whether the payment was verified, and the first two parts of your IP address. Kept until you delete your account.
- Orders (website payments): order ID, amount, payment method and status, plus the IP address and browser identifier (User-Agent) used to place the order; deleted automatically after 7 days.
- Google Play purchases: a hash of the purchase token (used as the order ID), Google's order number, the payment state and whether a passphrase has been set with it. Kept long-term, including after account deletion, so that one purchase can only ever set one passphrase.
- Abuse protection: per-IP request counts, deleted after 10 minutes. When a passphrase attempt fails we log the time, the first two parts of the IP and the first 20 characters of what was typed, to spot mass guessing; deleted after 24 hours.
- Anonymous statistics: page views per day, per page and per referral channel; unique visitors are counted by a hash of date + IP, and the IP itself is not stored; trial starts are counted per referral channel.
Shared with third parties when you use a feature
- Definitions: the word is sent, through our server, to Wiktionary and dictionaryapi.dev.
- Pictures: the word is sent, through our server, to Pexels, Pixabay, Unsplash, Wikimedia Commons, Openverse and Flickr.
- Read-aloud: the word, definition and example text is sent to Microsoft Azure Speech for synthesis; the resulting audio is cached on our server under a hash of the text, shared by everyone and linked to no one; some word pronunciations load directly from Youdao Dictionary.
- Library: search terms go to public libraries such as Open Library, Project Gutenberg, OpenAlex, Zenodo, DOAB and OAPEN; downloads are relayed through our server.
- Payments: in-app purchases are handled by Google Play; on the website by Alipay, WeChat Pay or Stripe. We never see your card number.
These requests carry only the word, text or search term — nothing that identifies you.
Children
The app is for adults and students reading English. It is not directed at children under 13 and does not knowingly collect their data.
Contact
Questions, or trouble deleting your account: message the developer on WeChat at yujiacmjd.
删除账号 / Delete your account
没有用户名，你的密码就是账号。输入它，我们会删除服务器上的密码记录，并让这台设备退出登录。删除后，所有设备上的终身版立即失效，无法恢复；订单和防刷记录会在上面写的期限内自动清除，Google Play 购买记录按上面写的理由保留。
Your passphrase is your account — there is no username. Enter it and we delete its record from our server and sign this device out. Lifetime access ends on every device at once and cannot be restored; orders and abuse-protection logs expire on the schedule above, and Google Play purchase records are kept for the reason given above.