Back to home 赛博烫豆 IronedBeads
PRIVACY

Privacy Policy

Last updated: 14 September 2026

IronedBeads is a small tool that shows you what a fuse bead pattern will look like once it is ironed. It has no ads, sells nothing, and carries no analytics or tracking scripts of any kind. Here is exactly what it stores, where, and how to get rid of it.

When you are not signed in

Your scanned patterns, your ironed pieces, your language, the sound toggle and the cloth edging all live in your own browser’s local storage. None of it is sent anywhere. Open the site on another device and it will not be there — that is how it works, not a fault.

Clear this site’s data in your browser and it is gone. We have no copy.

What our server stores once you sign in

  • Your email address and display name. Sign up with email and the name defaults to the part before the @; sign in with Google and it comes from your Google profile.
  • A hash of your password. Computed with salted PBKDF2-SHA256. The plain password is never stored and we cannot read it. Accounts created through Google have no password at all.
  • Your Google account id, only if you sign in with Google. We ask Google for openid email profile and nothing else — we cannot see your mail, your Drive, or anything else in your account.
  • A hash of your session token. The cookie value itself is never stored, only its SHA-256, so even someone who could read the database could not use it to sign in as you.
  • The pieces and patterns you explicitly mark for the cloud — up to 10 ironed and 10 waiting — including their thumbnail images. Anything you do not mark stays on your device, because that was your choice.

Third parties that necessarily see your IP address

No website avoids this layer. These are the ones involved:

  • Cloudflare — the site is hosted on Cloudflare Pages and the database is Cloudflare D1. Every request to this site passes through it.
  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — the two typefaces on the page load from there.
  • jsDelivr (cdn.jsdelivr.net) — the three.js library behind the 3D preview loads from there.
  • Google — only when you press “Continue with Google”.

What we do not do

  • No Google Analytics. No analytics or telemetry of any kind.
  • No ads, and no advertiser tracking pixels.
  • We do not sell or share your data with anyone.
  • No marketing email. We only email you in response to something you did.
  • No tracking cookies. The site sets exactly one cookie — your session, after you sign in. Signed out, it sets none.

How to delete things

  • One piece: press Delete on its card in My Beads. The cloud copy goes on the next sync.
  • Take it out of the cloud but keep it locally: click the cloud badge in the corner of the card.
  • Everything local: clear this site’s data in your browser.
  • Your whole account: email the address below and we will delete the account and everything it has on the server.

Children

This site is not aimed at children under 13 and does not knowingly collect their information.

Changes

If this page changes, the date at the top changes with it. If a change materially affects how your data is used, we will say so somewhere you cannot miss.

Contact

Questions about privacy, or to delete your account: [email protected]

Terms of Service · Back to home

PRIVACY

隐私政策

最后更新：2026 年 9 月 14 日

赛博烫豆是一个把拼豆图纸烫成 3D 成品预览的小工具。它不做广告、不卖数据，页面上没有任何分析或追踪脚本。下面把它到底存了什么、存在哪、怎么删，一条一条说清楚。

不登录的时候

你识别的图纸、烫好的作品、选的语言、音效开关、烘焙布包边，全部存在你自己浏览器的本地存储里，不会发到任何地方。换一台设备就看不到——这是它的工作方式，不是故障。

清掉浏览器里本站的数据，这些东西就没了，我们这边没有副本。

登录之后，我们的服务器上存什么

  • 你的邮箱和昵称。用邮箱注册的，昵称默认取 @ 前面那段；用 Google 登录的，取你 Google 账号上的名字。
  • 密码的散列值。用加盐的 PBKDF2-SHA256 算出来，明文密码永远不会被存下来，我们也无从知道它是什么。用 Google 登录的账号根本没有密码。
  • Google 账号的用户 id，只在你用 Google 登录时。我们向 Google 要的只有 openid email profile，看不到你的邮件、云端硬盘或账号里的任何其他东西。
  • 会话凭证的散列值。cookie 的原值我们不存，只存它的 SHA-256，所以就算数据库被人看到，也没法拿去冒充你登录。
  • 你自己勾了「上云」的作品和图纸——已烫和未烫各最多 10 件，包含缩略图。没勾的一律不会上传，那是你自己决定留在本机的。

会看到你 IP 地址的第三方

任何网站都躲不开这一层，说清楚是哪几家：

  • Cloudflare——网站托管在 Cloudflare Pages 上，数据库是 Cloudflare D1。你访问本站的每个请求都经过它。
  • Google Fonts（fonts.googleapis.com、fonts.gstatic.com）——页面上那两款字体从这里加载。
  • jsDelivr（cdn.jsdelivr.net）——3D 预览用的 three.js 从这里加载。
  • Google——只在你点「用 Google 继续」的时候。

我们不做的事

  • 没有 Google Analytics，没有任何分析或埋点。
  • 没有广告，也没有广告商的追踪像素。
  • 不把你的数据卖给或提供给任何人。
  • 不发营销邮件。除了你自己触发的操作，我们不会主动给你发信。
  • 没有追踪 cookie。本站只有一个 cookie：登录后的会话凭证。不登录就一个都没有。

怎么删掉

  • 删一件作品：在「我的拼豆」里点那张卡片上的「删除」，云端那份会在下次同步时一起删掉。
  • 只想从云端撤下来、本地留着：点卡片右上角那朵云，取消上传。
  • 清空本地：清掉浏览器里本站的站点数据。
  • 注销账号：发邮件到下面那个地址说一声，我们会把这个账号和它在服务器上的所有数据删干净。

儿童

本站不面向 13 岁以下的儿童，也不会刻意收集他们的信息。

政策变更

这一页改了的话，上面那个「最后更新」的日期会跟着变。涉及数据用途的实质改动，我们会在站内显著位置说明。

联系方式

隐私相关的问题，或者要注销账号：[email protected]

服务条款 · 返回首页