Chrome Web Store · Privacy Policy

MoReader — Privacy Policy

Applies to: the MoReader - EPUB & PDF Reader Chrome extension (extension ID gkhkkojmgcobdlpijepiigecpglmnedh)
Developer: gzmliang (independent developer)
Effective date: 29 September 2026 | Policy version 1.0 | Covers MoReader 2.10.x
Contact: gzmliang@gmail.com

Summary: MoReader is local-first. Your books, reading progress, notes and settings stay in your own browser. We operate no user accounts, no analytics, no ads and no tracking. Text leaves your device only when you trigger a network feature (read-aloud, AI tools, translation, or cloud sync you configured yourself), and only to the service you chose.

1. Scope of this policy

This Privacy Policy explains what information the MoReader Chrome extension ("MoReader", "the extension", "we") collects, how it is processed, where it is stored, and with whom it is shared. It applies to the Chrome extension only. If you use the separate MoReader Android application, that product has its own privacy policy.

By installing and using the extension you agree to the practices described below.

2. Information we do not collect

No personal identifiers: no name, email address, phone number, postal address, government ID or account of any kind.
No account and no sign-in: every feature works without registration.
No browsing history: the extension declares no content scripts and runs only on its own extension page. It cannot read the web pages you visit.
No analytics or telemetry: no Google Analytics, no crash reporting SDK, no A/B testing, no device fingerprints, no advertising IDs.
No advertising: no ad networks, no affiliate trackers, no user profiling.
No selling or renting of data to anyone, ever.

3. Information the extension handles

3.1 Data that stays on your device (never transmitted)

Category	Examples	Where it lives
Book content	The EPUB / PDF files you open or import, including their covers and metadata	Browser IndexedDB (local)
Reading data	Reading progress and position, bookmarks, highlights, vocabulary notes, reading statistics	Browser IndexedDB (local)
Feature caches	Cached chapter summaries, character maps, quizzes, translations (so you do not pay for the same request twice)	Browser IndexedDB (local)
Preferences	Theme, fonts, layout, playback speed, voice, target language, interface language, chosen service endpoints	`chrome.storage.local` / `localStorage` (local)
Credentials you enter	Your own AI API keys, your WebDAV server address, user name and password	`chrome.storage.local` / `localStorage` (local)

Credentials and reading data are stored only inside your Chrome profile on your computer. They are never sent to us. They are deleted by Chrome when you uninstall the extension (or you can clear them at any time from the extension's settings).

3.2 Data that leaves your device — only when you trigger the feature

MoReader has no server of its own that stores your data. The following transmissions happen only at your request and go to a service endpoint:

Feature (you start it)	What is sent	Sent to
Read aloud / listen to book (text-to-speech)	The text of the sentence or passage being narrated (plus the chosen voice, locale and speaking rate)	The TTS endpoint configured in Settings. Default: our HTTPS relay `liang-studio.duckdns.org/edge-tts`, which forwards the text to Microsoft's Edge neural voice service and returns MP3 audio. You can replace it with your own endpoint at any time.
AI reading tools (chapter summary, character map, comprehension quiz, deep explanation)	The relevant book text (the chapter or the passage involved) plus your prompt	The AI provider you configure with your own API key — e.g. OpenAI, DeepSeek, SiliconFlow or OpenRouter. The request goes straight from your browser to that provider; it does not pass through us.
Bilingual / paragraph translation	The sentence or paragraph to be translated, the source and target language	The translation engine you select: the public Google Translate endpoint (`translate.googleapis.com`), MyMemory (`api.mymemory.translated.net`), or your configured AI provider.
WebDAV cloud sync (optional, off by default)	Only the items you choose to sync: book files, reading progress, bookmarks, highlights, settings	Your own WebDAV server (e.g. a NAS, Alist, Nextcloud or a commercial WebDAV host), authenticated with the credentials you entered.

About our TTS relay: the default read-aloud endpoint is a relay we run. It receives the text you ask to be read, generates the audio, and returns it. The text and the audio are processed in memory and are not written to disk, not logged, not profiled and not used to train anything. If you prefer that no request ever reaches our relay, set your own TTS endpoint (or a local one, e.g. http://localhost:5001) in Settings before using read-aloud.

4. How information is processed and why

To provide the core reader: opening, rendering, paginating and highlighting your EPUB/PDF files — done entirely inside your browser.
To provide read-aloud: converting the text you are reading into speech through the TTS endpoint. Legal basis (GDPR Art. 6(1)(b)): performance of the service you requested.
To provide optional AI and translation features: sending the involved text to the provider you selected. Without your explicit action no such request is made.
To sync across your devices: uploading the selected items to your own WebDAV server. Legal basis (GDPR Art. 6(1)(a)): your consent, given by enabling and configuring the feature.
Security and abuse prevention of our relay: transient technical metadata (IP address, timestamp, request size) may be processed for rate limiting and fault diagnosis. It is not linked to any identity and is not retained beyond operational logs that are rotated automatically and never contain book text.

5. Storage, retention and deletion

Where	Retention	How to delete it
Your browser (IndexedDB, `chrome.storage.local`, `localStorage`)	Until you delete it or uninstall the extension	Use the delete / clear options inside MoReader, or uninstall the extension — Chrome removes its local storage with it
Your WebDAV server	As long as you keep it there; controlled entirely by you	Delete the files from your WebDAV server, or disconnect sync in Settings
Our TTS relay	Zero retention of content. Text and audio exist in memory only for the duration of the request	Nothing to delete; you may also point the extension at your own endpoint
Third-party providers you configure (AI, translation)	Governed by that provider's own policy and your account with them	Manage or delete directly with that provider

6. Sharing and disclosure

We do not sell, rent or trade your information, and we do not share it with advertisers, data brokers or analytics companies. Information is transmitted only to the third-party service that the corresponding feature requires, always as a direct consequence of your action:

Microsoft Edge neural text-to-speech (through our relay) — privacy statement
OpenAI / DeepSeek / SiliconFlow / OpenRouter or any other AI endpoint you enter — governed by the policy of the provider you chose and your own account with them
Google Translate public endpoint — Google Privacy Policy
MyMemory translation API — MyMemory legal notice
Your own WebDAV host (NAS, Alist, Nextcloud, commercial WebDAV service, …)

We may disclose information if we are legally required to do so, but since we hold no personal data about you in the first place, there is in practice nothing we could disclose.

7. Your rights and controls

Turn features off: read-aloud, AI tools, translation and cloud sync can each be left unused; nothing is sent while they are off.
Choose your own servers: the TTS endpoint, the AI provider and the WebDAV server are fully user-configurable. Use your own infrastructure and your data never reaches any service of ours.
Access and portability: all your MoReader data sits in your browser or on your own WebDAV server, so you already have full access to it and can export/copy it directly.
Erasure: delete individual books, notes, caches or the whole library inside the extension, or uninstall the extension to remove everything at once.
Rights under GDPR / UK GDPR / CCPA-CPRA: you may request access, correction, deletion, restriction or portability of your personal data, and you may object to processing. Because we do not hold personal data on our servers, most requests are satisfied by the local controls above; for anything else, contact us at gzmliang@gmail.com and we will respond within 30 days.
No automated decision-making or profiling is performed.

8. Permissions the extension requests, and why

storage (implicit browser storage APIs) — to save your preferences, credentials and reading data locally.
Host permissions for https://*/* — the extension must be able to reach servers that you type in (your TTS server, your AI provider, your WebDAV server). Because these addresses are unknown in advance, the permission has to cover HTTPS hosts in general. The extension connects only to the endpoints listed in your own settings, over HTTPS.
http://localhost/* and http://127.0.0.1/* — so that self-hosted TTS or sync servers running on the same machine can be used, including by users who have no public certificate. Plaintext HTTP is permitted only for loopback addresses; every public endpoint is always called over HTTPS.
No content script, no tabs, no history, no cookies, no webRequest, no downloads, no remote code.

9. Children's privacy

MoReader is a general-purpose reading tool and is not directed at children under 13 (or under the minimum age applicable in your country). We do not knowingly collect any personal information from children. If you are a parent or guardian and believe a child has provided information to us, write to gzmliang@gmail.com and we will delete it.

10. Security

All traffic to public servers uses HTTPS with certificate validation; the extension enforces this in code (plaintext HTTP is allowed only for localhost / private-LAN addresses that you configure yourself).
API keys, WebDAV passwords and reading data never leave your device except in the request that needs them.
The extension ships no remote code and no third-party analytics; its pages run under a strict Content Security Policy.
Web store packages are published from version-controlled sources.

11. International users

We do not operate a user database, so we do not transfer personal data between countries ourselves. When you use an optional feature, the data goes directly from your browser to the provider you picked, which may process it in another country under its own safeguards.

12. Changes to this policy

If the extension's data practices change, this page will be updated and the effective date and policy version above will be revised. Material changes will also be noted in the extension's "What's new" notes. Continued use after an update means you accept the revised policy.

13. Contact

Questions, requests or complaints about privacy in MoReader:
Email: gzmliang@gmail.com
Developer: gzmliang — independent developer
Open-source project: github.com/gzmliang/moreader

Chrome 应用商店 · 隐私权政策

墨阅 MoReader — 隐私权政策

适用于：MoReader - EPUB & PDF Reader Chrome 扩展（扩展 ID gkhkkojmgcobdlpijepiigecpglmnedh）
开发者：gzmliang（独立开发者）
生效日期：2026 年 9 月 29 日 | 政策版本 1.0 | 适用墨阅 2.10.x
联系方式：gzmliang@gmail.com

一句话总结：墨阅是「本地优先」的阅读器。您的书籍、进度、笔记与设置都存在您自己的浏览器里；我们不设账号、无统计埋点、无广告、无追踪。只有当您主动触发联网功能（朗读、AI 工具、翻译，或您自己配置的云同步）时，相关内容才会发送到您指定的那个服务。

一、本政策的适用范围

本隐私权政策说明墨阅 Chrome 扩展（下称"墨阅"、"本扩展"或"我们"）如何收集、处理、存储与共享信息。本政策仅适用于该 Chrome 扩展；独立的墨阅安卓应用另有其隐私政策。

安装并使用本扩展，即表示您同意本政策所述做法。

二、我们不收集的信息

不收集个人身份信息：姓名、邮箱、电话、住址、证件号、账号，一概不需要。
无账号、无需登录：全部功能免注册即可使用。
不读取浏览记录：本扩展未声明任何内容脚本（content script），只在自身扩展页面内运行，无法读取您访问的网页。
无统计分析：不含 Google Analytics、崩溃上报 SDK、A/B 测试、设备指纹或广告标识符。
无广告：不接入任何广告联盟，不做用户画像。
绝不出售或出租任何数据给任何一方。

三、本扩展处理的信息

3.1 只留在您设备上的数据（绝不上传）

类别	举例	存储位置
书籍内容	您打开或导入的 EPUB / PDF 文件及其封面、元数据	浏览器 IndexedDB（本地）
阅读数据	阅读进度与位置、书签、高亮、生词笔记、阅读统计	浏览器 IndexedDB（本地）
功能缓存	已生成的章节摘要、人物关系图、测验题、翻译结果（避免同一请求重复计费）	浏览器 IndexedDB（本地）
个性化设置	主题、字体、版式、朗读语速、音色、目标语言、界面语言、各服务端点	`chrome.storage.local` / `localStorage`（本地）
您填写的凭据	您自己的 AI API Key、WebDAV 服务器地址／账号／密码	`chrome.storage.local` / `localStorage`（本地）

凭据与阅读数据只存在于您电脑上的 Chrome 配置目录中，从不上传给我们。卸载扩展时 Chrome 会一并清除，您也可以随时在扩展设置中手动清除。

3.2 会离开您设备的数据 —— 仅在您主动触发功能时

墨阅没有保存您数据的自有服务器。以下传输仅在您主动发起时发生，且发往服务端点：

功能（由您发起）	发送什么	发往何处
朗读 / 听书（语音合成）	正在朗读的那一句或那一段文字（以及所选的音色、语言、语速）	设置中配置的 TTS 端点。默认是我们自建的 HTTPS 中继 `liang-studio.duckdns.org/edge-tts`，它把文本转给微软 Edge 神经网络语音服务并返回 MP3 音频。您可以随时改为自己的端点。
AI 精读工具（章节摘要、人物关系、阅读理解测验、深度讲解）	相关的书籍正文（所涉章节或段落）以及您的提问	由您自己配置、使用您自己的 API Key 的 AI 服务商（如 OpenAI、DeepSeek、SiliconFlow、OpenRouter）。请求由浏览器直达该服务商，不经过我们。
双语对照 / 段落翻译	待翻译的句子或段落、源语言与目标语言	您选择的翻译引擎：Google 翻译公开端点（`translate.googleapis.com`）、MyMemory（`api.mymemory.translated.net`），或您配置的 AI 服务商。
WebDAV 云同步（可选，默认关闭）	仅您勾选要同步的内容：书籍文件、阅读进度、书签、高亮、设置	您自己的 WebDAV 服务器（如 NAS、Alist、Nextcloud 或商业 WebDAV 服务），用您填写的凭据认证。

关于我们的 TTS 中继：朗读功能的默认端点是自建中继。它接收您请求朗读的文本、生成音频后返回。文本与音频只在内存中处理，不落盘、不记录日志、不做任何画像、不用于任何训练。若您不希望任何请求到达我们的中继，请在设置中改用自己的 TTS 端点（或本机端点，如 http://localhost:5001）后再使用朗读。

四、信息的处理方式与目的

提供阅读器核心功能：打开、渲染、分页、高亮您的 EPUB/PDF —— 全部在浏览器本地完成。
提供朗读功能：通过 TTS 端点把正在阅读的文本合成为语音。法律依据（GDPR 第 6(1)(b) 条）：履行您所请求的服务。
提供可选的 AI 与翻译功能：把相关文本发给您选择的服务商。未经您的明确操作，不会发出任何此类请求。
提供跨设备同步：把您勾选的内容上传至您自己的 WebDAV 服务器。法律依据（GDPR 第 6(1)(a) 条）：您启用并配置该功能所构成的同意。
中继服务的安全与防滥用：可能处理瞬时技术信息（IP 地址、时间戳、请求大小）用于限流与故障排查，不与任何身份关联，且不含书籍正文，日志自动轮转。

五、存储、保留期限与删除方式

存储位置	保留期限	如何删除
您的浏览器（IndexedDB、`chrome.storage.local`、`localStorage`）	直到您删除或卸载扩展	使用墨阅内的删除／清除功能，或卸载扩展（Chrome 会随之清除本地存储）
您的 WebDAV 服务器	由您自己保管，完全可控	在您的 WebDAV 服务器上删除文件，或在设置中关闭同步
我们的 TTS 中继	内容零保留：文本与音频仅在请求期间存在于内存	无需删除；也可改为使用您自己的端点
您配置的第三方服务（AI、翻译）	适用该服务商自身的政策及您与其的账号关系	直接在该服务商处管理或删除

六、信息共享与披露

我们不出售、不出租、不交换您的信息，也不与广告商、数据经纪人、统计分析公司共享。信息仅在相应功能所必需时，作为您操作的直接结果，传输给第三方服务：

微软 Edge 神经网络语音（经我们的中继） —— 微软隐私声明
OpenAI / DeepSeek / SiliconFlow / OpenRouter 或您填写的其他 AI 端点 —— 适用您所选服务商的政策及您的账号
Google 翻译公开端点 —— Google 隐私权政策
MyMemory 翻译接口 —— MyMemory 法律声明
您自己的 WebDAV 主机（NAS、Alist、Nextcloud、商业 WebDAV 服务等）

若法律强制要求披露，我们会依法配合；但由于我们本身不持有您的个人数据，实际上也无从披露。

七、您的权利与控制权

关闭功能：朗读、AI 工具、翻译、云同步均可不用；不使用即不会有任何数据外发。
自选服务器：TTS 端点、AI 服务商、WebDAV 服务器全部可自定义。使用您自己的基础设施，数据就完全不经过我们的任何服务。
查阅与可携带：您的墨阅数据都在浏览器或您自己的 WebDAV 上，您本就拥有完整访问权，可直接复制／导出。
删除（被遗忘）：在扩展内删除单本书、笔记、缓存或整个书库；卸载扩展可一次性清除全部数据。
GDPR / 英国 GDPR / CCPA-CPRA 权利：您可要求查阅、更正、删除、限制处理或导出您的个人数据，并可反对处理。由于我们服务器上不保存个人数据，绝大多数请求通过上述本地控制即可实现；若仍有其他需求，请联系 gzmliang@gmail.com，我们将在 30 天内答复。
无任何自动化决策或用户画像行为。

八、本扩展申请的权限及理由

storage（浏览器内置存储接口）—— 用于在本地保存您的设置、凭据与阅读数据。
https://*/* 主机权限 —— 扩展需要访问由您输入的服务器（您的 TTS 服务器、AI 服务商、WebDAV 服务器）。由于这些地址事先无法穷举，权限只能覆盖 HTTPS 主机。扩展只会连接您设置中填写的端点，且全程 HTTPS。
http://localhost/* 与 http://127.0.0.1/* —— 供自建在本机的 TTS 或同步服务使用（这类用户通常没有公网证书）。明文 HTTP 仅对环回地址放行，所有公网端点一律强制 HTTPS。
不申请内容脚本、tabs、history、cookies、webRequest、downloads，也不加载任何远程代码。

九、儿童隐私

墨阅是通用阅读工具，不面向 13 周岁以下儿童（或您所在国家规定的最低年龄）。我们不会在知情情况下收集儿童的个人信息。若您是家长或监护人并认为儿童向我们提供了信息，请致信 gzmliang@gmail.com，我们将予删除。

十、安全措施

对公网服务器的全部通信均使用 HTTPS 并校验证书；扩展在代码层面强制此点（明文 HTTP 仅对您自行配置的 localhost／内网地址放行）。
API Key、WebDAV 密码与阅读数据除必需的那一次请求外，绝不离开您的设备。
扩展不加载远程代码、不接第三方统计，页面受严格的内容安全策略（CSP）约束。
商店发布包均由受版本控制的源码构建。

十一、国际用户

我们不运营用户数据库，因此自身不会跨境传输个人数据。当您使用可选功能时，数据由您的浏览器直接发送给您选定的服务商，该服务商可能按其自身的保障措施在他国处理数据。

十二、政策变更

若本扩展的数据处理方式发生变化，本页面将同步更新，并修订上方的生效日期与政策版本。重大变更还会在扩展的"更新说明"中提示。变更后继续使用即视为接受修订后的政策。

十三、联系方式

关于墨阅隐私方面的疑问、请求或投诉：
邮箱：gzmliang@gmail.com
开发者：gzmliang（独立开发者）
开源项目：github.com/gzmliang/moreader