插件隐私与权限

只为发现与保存视频

安装时申请所有普通 HTTP/HTTPS 网站及下载权限，默认自动识别视频链接及响应媒体类型，并显示右下角面板；下载仍需你点击。不会读取表单密码、导出 Cookie、浏览器历史记录或修改页面广告、购买链接。

检测到的链接仅暂存于浏览器会话内，关闭对应标签页后清理；下载任务记录在浏览器退出后清理。网站授权、开关等偏好保存在浏览器本地，可在插件中暂停或屏蔽单站，网站访问权限由浏览器扩展详情管理。

只有你点击下载时，才交给浏览器下载管理器保存。浏览器向原视频服务器请求文件时会按自身正常规则处理会话与网络信息；插件不会把这些认证信息上传给拾影。

点击某条 HLS 视频的「下载」后，所选链接和视频标题会发送给拾影服务，准备成 MP4；进度和保存操作留在插件内，不跳转网页。不会发送网站 Cookie 或密码。任务文件在下载完成后清理，未完成的服务端任务和文件约一小时后过期。链接可能含临时令牌，请只下载获准保存的视频。

插件不发送后台统计、不接入广告 SDK、不出售数据。拾影网站单独使用每日轮换的 IP 哈希做汇总计数，不存原始 IP，不将其与插件浏览记录关联。

权限用途

activeTab：你点击插件时检测当前网页。scripting：在授权网页显示检测面板。webRequest：观察授权范围内的媒体响应类型，不读取认证请求头。storage：本地设置和短期视频列表。alarms：继续检查你已点击的视频任务进度。downloads：安装时申请，点击下载后由浏览器选择保存位置。网站访问：安装时申请所有 HTTP/HTTPS 网站，以自动识别页面和跨站 CDN 的视频；你可在浏览器扩展详情中限制访问。

不绕过付费、登录、DRM 等内容保护。无远程执行代码，所有插件脚本随安装包分发。

Privacy summary

VideoHarbor requests HTTP/HTTPS website access and downloads permission at installation. New installs automatically detect video resources and show a bottom-right panel; downloading still requires your click. It does not read passwords, export cookies, upload browsing history, replace ads or modify purchase links. Detected URLs are held in session storage and cleared when the relevant tab closes or the browser exits. Preferences remain locally until you reset them. Pause detection or mute a site in the extension; manage website access in browser extension details.

Downloads occur only after your click; the browser handles normal requests to the original media server. Clicking Download on an HLS video sends its selected URL and title to VideoHarbor for MP4 preparation. Progress and saving stay in the extension. No site cookies or passwords are sent. Server files are removed after download or expire after about an hour; download records clear when the browser exits. Links may contain temporary access tokens. The extension contains no analytics or advertising SDK. The website separately uses rotating, daily IP hashes for aggregate metrics, not raw stored IPs.

Website access and download permissions are requested at installation and controlled by your browser. No DRM or access-control bypass is provided. All executable extension code is packaged locally.