Privacy Policy

Effective Date: Nov 1, 2023

Updated: May 15, 2026

中文翻译仅为便于用户理解之用，法律效力请以英文为准

1. Introduction

Welcome to LAPLACE Live! (aka. laplace.live). We are committed to respecting your privacy and protecting your personal information. This Privacy Policy outlines the types of information we may collect from you or that you may provide when you visit laplace.live and our practices for collecting, using, maintaining, protecting, and disclosing that information.

欢迎访问 LAPLACE Live!（又名 laplace.live）。我们致力于尊重您的隐私并保护您的个人信息。本隐私政策概述了您访问 laplace.live 时我们可能从您那里收集的信息类型，以及我们收集、使用、维护、保护和披露这些信息的做法。

2. Information We Collect

LAPLACE does not require traditional user registration. We collect and process the following types of information:

LAPLACE 不需要传统的用户注册。我们收集和处理以下类型的信息：

2.1 Analytics Data

• Plausible Analytics: We use a self-hosted Plausible instance to collect anonymized data about visitor behavior. This includes page visits, visit duration, browser information (OS, User-Agent, screen resolution), and interaction events. No personally identifiable information is collected through Plausible. For more information about Plausible's privacy practices, please visit https://plausible.io/privacy.
• Plausible 分析：我们使用自托管的 Plausible 实例收集有关访客行为的匿名数据。包括页面访问、访问时长、浏览器信息（操作系统、User-Agent、屏幕分辨率）和交互事件。通过 Plausible 不收集任何个人身份信息。有关 Plausible 隐私实践的更多信息，请访问 https://plausible.io/privacy。

2.2 AI Chat Feature

• Conversation Data: When you use our AI Chat feature, we collect and process your chat messages, conversation history, uploaded images (automatically resized), session IDs, and selected AI models.
• Optional Login Sync: You may optionally provide a Bilibili login sync token via our browser extension to access enhanced features. The token is encrypted and stored locally in your browser. When used, it is sent to our servers to access Bilibili livestream data on your behalf. For detailed information about how Login Sync works, security considerations, and risks, please visit: LAPLACE Login Sync Documentation.
• Data Sharing: AI chat conversations are transmitted to third-party AI service providers (OpenAI, Anthropic, and others via OpenRouter) to generate responses. These providers may have their own data retention policies.
• Research and Transparency: AI conversations may be stored server-side for research purposes and transparency. Some conversations may be made publicly available as outlined in our security page.
• 对话数据：当您使用 AI 聊天功能时，我们会收集和处理您的聊天消息、对话历史、上传的图片（自动调整大小）、会话 ID 和选择的 AI 模型。
• 可选登录同步：您可以选择通过我们的浏览器扩展提供 Bilibili 登录同步令牌以访问增强功能。该令牌经过加密并存储在您的浏览器本地。使用时，它会被发送到我们的服务器以代表您访问 Bilibili 直播数据。有关登录同步的工作原理、安全注意事项和风险的详细信息，请访问：LAPLACE 登录同步文档。
• 数据共享：AI 聊天对话会传输给第三方 AI 服务提供商（OpenAI、Anthropic 及通过 OpenRouter 的其他服务商）以生成响应。这些提供商可能有自己的数据保留政策。
• 研究和透明度：AI 对话可能会存储在服务器端用于研究目的和透明度。某些对话可能会按照我们的安全页面所述公开。

2.3 User-Generated Content

• Cycle Contribution System: You may voluntarily submit information about VTuber schedules including UID, period start date, period length, cycle length, and source URLs. This data is submitted anonymously with Cloudflare Turnstile bot protection. Turnstile collects browser fingerprinting data as described in Cloudflare's Privacy Policy.
• Superchat FoS Content: You may create superchat messages which are stored locally in your browser (IndexedDB) and processed through our API for AI moderation.
• 周期贡献系统：您可以自愿提交有关 VTuber 日程的信息，包括 UID、周期开始日期、周期长度、循环长度和来源 URL。此数据通过 Cloudflare Turnstile 机器人保护匿名提交。Turnstile 会收集浏览器指纹数据，如 Cloudflare 隐私政策中所述。
• Superchat FoS 内容：您可以创建 superchat 消息，这些消息存储在您的浏览器本地（IndexedDB）并通过我们的 API 进行 AI 审核处理。

2.4 Real-Time Features

• PartyKit: Our homepage features a real-time interactive canvas powered by PartyKit. We collect ephemeral data including cursor positions, pointer types (mouse/touch), connection IDs, and country codes (from Cloudflare). This data is stored temporarily in memory and deleted when you disconnect.
• PartyKit：我们的首页采用 PartyKit 提供的实时交互画布。我们收集临时数据，包括光标位置、指针类型（鼠标/触摸）、连接 ID 和国家/地区代码（来自 Cloudflare）。此数据临时存储在内存中，并在您断开连接时删除。

2.5 Local Storage

• Browser Storage: We store data locally in your browser using localStorage and IndexedDB (Dexie) including: user preferences (theme, audio settings, UI state), AI chat history, login sync tokens and history, search history, favorites and lists, and cached media metadata.
• Data Control: All locally stored data remains on your device and can be cleared through your browser settings or our app interface at any time.
• 浏览器存储：我们使用 localStorage 和 IndexedDB（Dexie）在您的浏览器本地存储数据，包括：用户偏好（主题、音频设置、UI 状态）、AI 聊天历史、登录同步令牌和历史、搜索历史、收藏和列表，以及缓存的媒体元数据。
• 数据控制：所有本地存储的数据都保留在您的设备上，可以随时通过浏览器设置或我们的应用程序界面清除。

2.6 AI Voice Chat Feature

• Voice Audio Streaming: When you initiate a voice call with the AI assistant, your microphone audio is captured via WebRTC and streamed in real time to our self-hosted voice bot backend (LAPLACE Eidolon). The audio is transcribed in real time, processed by an LLM, and the response is synthesized back to speech and played in your browser.
• Speech-to-Text (STT): Voice audio streams are sent to Soniox for real-time transcription. See Soniox's Privacy Policy.
• Text-to-Speech (TTS): AI-generated text responses are sent to Fish Audio for voice synthesis. See Fish Audio's Privacy Policy.
• WebRTC Networking: Establishing the audio connection exchanges ICE candidates (including local and public IP addresses) between your browser and our backend. When a direct peer-to-peer connection cannot be established (e.g., behind symmetric NAT), traffic may be relayed via Cloudflare Realtime TURN servers, which receive the IP addresses of the connecting peers.
• Long-Term Memory (Mem0, logged-in only): When you use voice chat as a signed-in viewer (via Login Sync, see Section 2.2), the bot may automatically extract and store long-term memories about you (e.g., preferences, recurring topics, things you have mentioned) via Mem0, keyed on your Bilibili UID. Each logged-in viewer has their own private memory namespace; anonymous voice chats are not stored in Mem0. You can list and bulk-delete your memories at any time through in-app controls or by contacting us. See Mem0's Privacy Policy.
• Audio Quality Setting: Your browser may include an audio quality preference (e.g., best / medium / low) in the connection request, used to adjust the Opus encoder bitrate for the session. This preference is processed transiently and is not stored server-side.
• Conversation Storage: Voice conversation transcripts may be retained server-side for research, persona refinement, and transparency, subject to the same policy as text AI chat (see Section 2.2).
• 语音音频流：当您与 AI 助手发起语音通话时，您的麦克风音频通过 WebRTC 捕获，并实时流式传输到我们自托管的语音机器人后端（LAPLACE Eidolon）。音频会被实时转录、由 LLM 处理，并合成为语音在您的浏览器中播放。
• 语音识别（STT）：语音音频流会被发送到 Soniox 进行实时转录。详见 Soniox 隐私政策。
• 语音合成（TTS）：AI 生成的文本响应会被发送到 Fish Audio 进行语音合成。详见 Fish Audio 隐私政策。
• WebRTC 网络：建立音频连接时会在您的浏览器与我们的后端之间交换 ICE 候选（包括本地和公网 IP 地址）。当无法建立直接点对点连接时（例如位于对称 NAT 之后），流量可能会通过 Cloudflare Realtime TURN 服务器中继，这些服务器会接收连接对端的 IP 地址。
• 长期记忆（Mem0，仅限登录用户）：当您通过登录同步签入并使用语音聊天时（参见 2.2 节），机器人可能会通过 Mem0 自动提取并存储关于您的长期记忆（如偏好、反复出现的话题、聊天中提及的信息），以您的 Bilibili UID 为键。每位登录访客都有自己的私有记忆命名空间；匿名语音聊天不会存入 Mem0。您可以随时通过应用内控件或联系我们查看和批量删除您的记忆。详见 Mem0 隐私政策。
• 音质设置：您的浏览器可在连接请求中包含音质偏好（如 best / medium / low），用于调整本次会话的 Opus 编码比特率。该偏好仅在会话期间使用，不在服务器端长期存储。
• 对话存储：语音对话转录可能会在服务器端保留用于研究、人设优化和透明度目的，遵循与文本 AI 聊天相同的政策（参见 2.2 节）。

3. How We Use Your Information

• Analytics: To understand visitor interactions, improve content, enhance user experience, and optimize site performance.
• AI Chat: To provide AI-powered chat responses, maintain conversation context, prevent abuse, and improve AI model quality through research.
• AI Voice Chat: To transcribe your voice, generate AI responses, synthesize speech, route WebRTC audio, and (for logged-in viewers) maintain per-viewer long-term memory so the assistant can recall prior context across sessions.
• User Contributions: To aggregate and display community-contributed data (e.g., VTuber schedules) and moderate user-generated content.
• Real-Time Features: To enable interactive experiences on our homepage canvas.
• Security: To prevent spam, abuse, and harmful content through bot protection (Cloudflare Turnstile) and content moderation.
• 分析：了解访客交互、改进内容、增强用户体验和优化网站性能。
• AI 聊天：提供 AI 驱动的聊天响应、维护对话上下文、防止滥用，并通过研究改进 AI 模型质量。
• AI 语音聊天：转录您的语音、生成 AI 响应、合成语音、路由 WebRTC 音频，并（针对登录访客）维护按访客分隔的长期记忆，让助手在多次会话间能够回忆此前上下文。
• 用户贡献：汇总和显示社区贡献的数据（例如 VTuber 日程）并审核用户生成的内容。
• 实时功能：在我们的首页画布上启用交互式体验。
• 安全：通过机器人保护（Cloudflare Turnstile）和内容审核防止垃圾邮件、滥用和有害内容。

4. Third-Party Services

We share data with the following third-party services:

我们与以下第三方服务共享数据：

• Plausible Analytics: Self-hosted analytics (privacy-focused, no PII collected)
• AI Providers: OpenAI, Anthropic, OpenRouter, and other AI model providers receive chat messages and conversation history
• Soniox: Speech-to-text provider receives streamed voice audio during AI voice chat (see Soniox's Privacy Policy)
• Fish Audio: Text-to-speech provider receives AI response text to synthesize into voice audio (see Fish Audio's Privacy Policy)
• Mem0: Long-term memory provider stores extracted memories from AI voice chat for logged-in viewers, keyed on Bilibili UID (see Mem0's Privacy Policy)
• Cloudflare: Turnstile bot protection receives browser fingerprinting data and country codes; Cloudflare Realtime TURN servers may relay WebRTC voice traffic and receive peer IP addresses (see Cloudflare's Privacy Policy)
• PartyKit: Real-time service receives ephemeral cursor and connection data
• Plausible 分析：自托管分析（注重隐私，不收集 PII）
• AI 提供商：OpenAI、Anthropic、OpenRouter 及其他 AI 模型提供商接收聊天消息和对话历史
• Soniox：语音识别提供商在 AI 语音聊天期间接收流式语音音频（参见 Soniox 隐私政策）
• Fish Audio：语音合成提供商接收 AI 回复文本以合成语音音频（参见 Fish Audio 隐私政策）
• Mem0：长期记忆提供商存储从 AI 语音聊天中为登录访客提取的记忆，以 Bilibili UID 为键（参见 Mem0 隐私政策）
• Cloudflare：Turnstile 机器人保护接收浏览器指纹数据和国家/地区代码；Cloudflare Realtime TURN 服务器可能中继 WebRTC 语音流量并接收对端 IP 地址（参见 Cloudflare 隐私政策）
• PartyKit：实时服务接收临时光标和连接数据

We do not sell, trade, or rent your personal information to third parties for marketing purposes.

我们不会为营销目的向第三方出售、交易或出租您的个人信息。

5. Cookies and Tracking

We do not use traditional cookies for tracking. Our self-hosted Plausible Analytics may set minimal cookies for analytics purposes. All tracking is anonymized and privacy-focused.

我们不使用传统的 cookie 进行跟踪。我们的自托管 Plausible 分析可能会设置最少的 cookie 用于分析目的。所有跟踪都是匿名且注重隐私的。

6. Data Retention

• Local Data: Stored indefinitely in your browser until you manually clear it
• Analytics Data: Retained according to Plausible's default retention policy
• AI Conversations: May be retained server-side for research and transparency purposes
• AI Voice Chat Long-Term Memories (Mem0): Retained for logged-in viewers until you delete them via in-app controls, or as governed by Mem0's retention policy
• Real-Time Data: Deleted immediately upon disconnection (ephemeral). This includes WebRTC voice audio streams, ICE candidates, and PartyKit cursor data — none of which are persisted server-side
• 本地数据：无限期存储在您的浏览器中，直到您手动清除
• 分析数据：根据 Plausible 的默认保留政策保留
• AI 对话：可能会在服务器端保留用于研究和透明度目的
• AI 语音聊天长期记忆（Mem0）：仅针对登录访客保留，直到您通过应用内控件删除，或受 Mem0 的保留政策约束
• 实时数据：断开连接后立即删除（临时）。这包括 WebRTC 语音音频流、ICE 候选以及 PartyKit 光标数据——这些数据均不会在服务器端持久化

7. Your Rights and Data Control

• Access: You can view all locally stored data through your browser's developer tools
• Deletion: You can delete local data through browser settings
• Portability: Local data can be exported through browser tools
• Voice Chat Memories (Mem0): Logged-in viewers can list and bulk-delete all long-term memories stored about them via Mem0 through in-app controls at any time. Deletion is irreversible and applies only to memories stored before the deletion request; if you wish to ensure no further memories accrue, end your current voice session as well
• Opt-Out: You can disable JavaScript, use browser privacy features, decline voice chat, refrain from logging in via Login Sync (which disables Mem0), or stop using specific features
• 访问：您可以通过浏览器的开发者工具查看所有本地存储的数据
• 删除：您可以通过浏览器设置删除本地数据
• 可移植性：可以通过浏览器工具导出本地数据
• 语音聊天记忆（Mem0）：登录访客可随时通过应用内控件列出并批量删除关于自己的全部长期记忆。删除操作不可撤销，仅适用于在删除请求之前存储的记忆；若希望确保不再累积新记忆，请同时结束当前语音会话
• 退出：您可以禁用 JavaScript、使用浏览器隐私功能、不使用语音聊天、不通过登录同步登录（将禁用 Mem0），或停止使用特定功能

8. Security

We implement appropriate technical and organizational measures to protect your data, including HTTPS encryption, bot protection, content moderation, and secure API endpoints. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

我们实施适当的技术和组织措施来保护您的数据，包括 HTTPS 加密、机器人保护、内容审核和安全 API 端点。但是，没有任何通过互联网传输的方法是 100% 安全的，我们无法保证绝对安全。

9. Children's Privacy

LAPLACE is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately.

LAPLACE 不适用于 13 岁以下的儿童。我们不会故意收集 13 岁以下儿童的个人信息。如果您认为我们收集了此类信息，请立即与我们联系。

10. Third-Party Websites

Our website may contain links to third-party websites or embed third-party content. We are not responsible for the privacy practices or content of these external sites. Please review their privacy policies independently.

我们的网站可能包含第三方网站的链接或嵌入第三方内容。我们对这些外部网站的隐私做法或内容不承担责任。请独立查看其隐私政策。

11. International Data Transfers

Your data may be processed and stored in different countries where our service providers operate. By using LAPLACE, you consent to such transfers. We ensure appropriate safeguards are in place for international data transfers.

您的数据可能会在我们的服务提供商运营的不同国家/地区进行处理和存储。使用 LAPLACE 即表示您同意此类转移。我们确保为国际数据传输提供适当的保障措施。

12. Changes to This Privacy Policy

We reserve the right to update or change our Privacy Policy at any time. Changes will be posted on this page with an updated "Updated" date. Material changes will be prominently indicated. Your continued use of LAPLACE after changes indicates acceptance of the updated policy.

我们保留随时更新或更改我们的隐私政策的权利。更改将在此页面上发布，并更新"更新"日期。重大更改将显著标明。更改后继续使用 LAPLACE 表示接受更新的政策。

13. Contact Us

If you have any questions about this Privacy Policy, your data rights, or wish to request data deletion, please contact us at s@laplace.live

如果您对本隐私政策、您的数据权利有任何疑问，或希望请求删除数据，请通过 s@laplace.live 与我们联系。