隐私政策

更新日期：2026 年 10 月 12 日 · 适用于 habitat.ink · 关于 Habitat

Habitat（栖居）提供户型设计、家具布置、云端项目和付费会员服务。本政策说明这些功能如何处理你的信息。有关账户或隐私的问题，请联系网站运营者：xxin.free@gmail.com。

登录信息

选择 Google 登录时，我们请求基本身份权限（openid、email、profile），验证 Google 返回的身份，并保存 Google 账户标识、姓名和已验证的邮箱，用于创建账户、登录、关联项目与会员权益。我们不会取得你的 Google 密码，也不请求 Gmail 邮件、通讯录或 Google Drive 文件权限。Google 账户信息不会作为户型识别的模型输入，也不用于出售、广告投放或 AI 模型训练。

具体而言，Google 的账户标识用于识别和关联登录身份，姓名用于账户显示，邮箱用于显示账户归属和核对账户请求。我们在登录过程中验证身份令牌，但不将 Google 的访问令牌或刷新令牌保存为长期凭据，也不在登录后持续读取 Google 账户内容。

Google 用户数据的共享与保护

这些身份数据保存在 Cloudflare 托管的 Habitat 数据库中，由网站运营者在提供账户支持和会员管理所需的范围内访问。登录时会与 Google 交换登录所需的数据。我们不会向模型服务发送 Google 账户标识、姓名或邮箱；创建 Stripe 订单时只发送 Habitat 内部用户和订单标识、方案及规则版本，不将 Google 账户信息作为付款元数据发送。你在 Stripe 收银台自行填写的付款资料由 Stripe 另行处理。

我们不为上述服务目的之外的广告、转售或模型训练共享、转移或披露 Google 用户数据。网站通过 HTTPS 传输数据，使用服务器验证的登录会话和账户权限限制项目访问，仅允许指定管理员访问账户管理功能。用户数据不公开展示给其他用户。

项目与设备存储

访客草稿、项目缓存和语言偏好保存在当前浏览器。登录后的云端项目包含项目名称、户型几何、家具、材质、修改时间等设计数据，用于保存和跨设备继续编辑。公开示例不包含你的私人项目。项目导出文件由你自行保管。

登录使用必要的安全 Cookie 保存会话标识，OAuth 流程使用短期 Cookie 核对登录请求。退出会清除当前登录会话，但不会自动清除本地项目缓存；共用设备时，可通过浏览器的站点数据设置清除缓存。

付款与会员

付款在 Stripe 托管的收银台完成，银行卡和付款资料由 Stripe 处理。Habitat 保存内部订单、Stripe 交易标识、方案、金额、币种、付款状态和会员有效期，用于核对到账、提供权益及处理付款问题。Habitat 不保存完整银行卡号或安全码。购买和续费均由你手动发起，不自动续费。Stripe 的数据处理见其隐私政策。

户型图与 AI 识别

仅在你主动使用 AI 识别且服务已配置时，上传的户型图会经我们的服务器发送给网站管理员配置的模型服务，用于返回可编辑的房间轮廓、门窗和尺寸信息。仅在浏览器叠图或手动描摹时，图片不因这些操作发送给模型。Habitat 的项目数据库不保存识别原图；保存项目时会保存你确认的设计结果。模型供应商会依其政策处理收到的图片；提交前可联系运营者了解当前供应商及其保留规则。请先移除图中的姓名、地址等不必要信息。

服务供应商与安全

网站托管和数据库使用 Cloudflare；登录使用 Google；付款使用 Stripe；启用识别时使用配置的模型供应商。它们会为提供相应服务处理必要数据，数据可能在不同国家或地区的基础设施中处理。为防止滥用，我们还处理请求和错误信息，并使用账户或 IP 地址的哈希值执行限流。管理功能受服务器会话权限控制，服务端密钥不提供给网页客户端。

保存、删除与选择

账户、云端项目与会员记录会保留以支持服务。界面中的“删除项目”会将其从项目库移除，并非立即清除数据库中的所有副本。付款、安全和管理记录可能因核对交易、处理争议或适用的保存要求而继续保留。临时登录状态、会话和限流记录在到期后定期清理。

你可以导出设计、删除项目、退出登录，或在 Google 账户设置中撤销对 Habitat 的授权；撤销 Google 授权不会自动删除 Habitat 账户。若需访问、更正或删除账户及相关数据，请通过 xxin.free@gmail.com 联系我们。我们会核实账户归属后处理，并说明需要保留的记录。不要通过邮件发送密码、验证码或完整银行卡资料。

政策更新

数据处理方式改变时，我们会更新本页面及更新日期。涉及新的数据用途时，会在相应功能中提供说明。

Privacy Policy

Updated October 12, 2026 · Applies to habitat.ink · About Habitat

Habitat provides floor-plan design, furniture layout, cloud projects and paid memberships. Contact the site operator about your account or privacy at xxin.free@gmail.com.

Sign-in information

Google sign-in requests only openid, email and profile. We verify your identity and store your Google account identifier, name and verified email to create your account and associate projects and membership access with it. We do not receive your Google password or request access to Gmail, contacts or Drive files. Google account information is not sent to the floor-plan recognition model, sold, used for advertising or used to train AI models.

The Google account identifier links your sign-in identity, your name labels your account, and your email identifies account ownership and helps us verify account requests. We validate an identity token during sign-in. We do not retain Google access or refresh tokens as long-term credentials or continuously read Google account content after sign-in.

Sharing and protecting Google user data

Identity information is stored in Habitat's database hosted by Cloudflare. The site operator may access it as needed for account support and membership administration. Necessary sign-in data is exchanged with Google during authentication. We do not send Google identifiers, names or email addresses to the recognition model. Stripe order metadata contains only Habitat's internal user and order identifiers, plan and terms version, not Google account information. Stripe separately processes payment information you enter in its checkout.

We do not share, transfer or disclose Google user data for advertising, resale, model training or purposes unrelated to the services described here. HTTPS protects data in transit. Server-verified sessions and account permissions restrict access to projects, and only the designated administrator can use account-management features. Your user data is not publicly displayed to other users.

Projects and browser storage

Guest drafts, cached projects and language preferences are stored in your browser. Cloud projects contain names, floor-plan geometry, furniture, materials and modification times so you can save and edit across devices. Public examples do not include your private projects. You control the files you export.

Necessary secure cookies hold session identifiers; a short-lived OAuth cookie binds the sign-in request. Signing out ends the current session but does not automatically erase cached projects. On a shared device, clear this website's data through your browser settings.

Payments and memberships

Stripe handles payment information on its hosted checkout page. Habitat stores order and Stripe transaction identifiers, plan, amount, currency, payment status and membership dates to verify payments, provide access and handle payment issues. We do not store full card numbers or security codes. Purchases and renewals are initiated by you; memberships do not renew automatically. See Stripe's Privacy Policy.

Images and AI recognition

When you choose AI recognition and a model service is configured, your image is sent through our server to the model provider configured by the site administrator. The provider returns editable rooms, openings and dimension information. Browser overlays and manual tracing alone do not send an image to the model. Habitat does not store the recognition source image in the project database; saved projects contain the design you confirm. The model provider processes images under its own policies. Contact the operator for the current provider and retention rules before submitting an image, and remove unnecessary names or addresses first.

Providers and security

We use Cloudflare for hosting and databases, Google for sign-in, Stripe for payments, and a configured model provider when recognition is enabled. These providers process data needed for their services and may process it in infrastructure in different countries or regions. We also process request and error information and use hashes of accounts or IP addresses for abuse rate limits. Server-side sessions control administrator access; service credentials are not delivered to browser clients.

Retention and your choices

Account, cloud project and membership records are retained to provide the service. Deleting a project removes it from your project library but does not immediately erase all database copies. Payment, security and administrative records may be retained for transaction reconciliation, disputes or applicable retention requirements. Expired temporary sign-in states, sessions and rate-limit records are periodically cleared.

You can export designs, delete projects, sign out or revoke Habitat's access through your Google account settings. Revoking Google access does not automatically delete your Habitat account. For access, correction or deletion requests, contact xxin.free@gmail.com. We will verify account ownership and explain any records that need to be retained. Do not send passwords, verification codes or full payment-card details by email.

Updates

We update this page and its date when our data practices change, and explain new data uses in the relevant features.