小小东 · 图片排序
隱私政策
图片排序把链接、图片和记录留在你的浏览器里；只有你连接了 Google Drive 备份，设置和记录才会存进你自己的 Drive。中文在前，English follows.
01中文
小小东 · 图片排序（下称「图片排序」）是本地优先的 Chrome 扩展：你粘贴的链接、读到的颜色、排好的顺序和记录都保存在你自己的浏览器里，图片排序没有自己的服务器。使用它需要登录小小东会员站（vip.xiaoxiaodong.ai）账号。
它会读取什么
- 你粘贴、拖入或在侧边栏输入的文字。图片排序只从中挑出 http(s) 链接，其余文字不保存。
- 这些链接指向的图片。按颜色排序时，图片排序直接从图片所在的网站取图，在你的浏览器里算出平均颜色（读到的颜色只在侧边栏开着时留在内存里，不写进存储）；复制单张图片、把图片打包下载时也是直接从图片所在的网站取图。读颜色、复制和打包下载时取图不带你的登录信息（Cookie）。
- 网页里的图片地址：你点「取这个网页的图片」「取所有标签页的图片」或「打开一个网址」时，图片排序读那些网页里的图片地址（图片、多尺寸图片、懒加载的地址和大的背景图），不读网页的其他内容，也不改动网页。「打开一个网址」会在后台标签页里打开那个网址，取完就关掉。侧边栏开着、还没有放进图片时，它会数一下当前网页和这个窗口里的网页各有几张图片，结果只显示在侧边栏里。
- 在公众号后台（mp.weixin.qq.com）页面右边缘显示一个「图片排序」按钮，用来打开或收起侧边栏。图片排序不读取公众号后台页面的内容。
它会保存什么（都只在这个浏览器的扩展本地存储里）
- 当前这一组：链接、排好的顺序、排序方式。
- 记录：最近排过的组（最多 50 组、总量不超过 8 MB，旧的先删）。
- 设置：主题、圆角、主色、默认排序方式、导出文件名等。
- 账号会话：会员站签发的可撤销访问令牌及其到期时间、账号标识（用户 ID、邮箱、昵称、头像地址），以及最近一次会员状态（套餐和到期时间）。图片排序不保存密码，也不保存任何支付信息。
- 会员站签发的会员凭证（带数字签名），断网时会员最多还能用 3 天。
- 免费版在会员站连不上时，今天排过的组的单向摘要（不含链接），用来在这台电脑上计数。
账号、会员和支付
- 登录有两种方式：在会员站自己的页面登录（Google 或邮箱；图片排序只收到授权码，再换成访问令牌）；或在侧边栏输入邮箱和密码，邮箱和密码只通过 HTTPS 发送到 vip.xiaoxiaodong.ai 做一次登录或注册。
- 登录后，图片排序向会员站查询账号标识和会员状态（图片排序会员、7 天体验或小小东 VIP；套餐和到期时间），以及免费版每天能按颜色排几组。
- 免费版每天按颜色排序的次数由会员站计数：每次按颜色排一组新的链接前，图片排序发送你的时区偏移和这组链接的单向摘要（同一组当天换一种颜色排序不再计数）。链接本身不会发送。
- 开通或续费会员时，图片排序只向会员站提交所选套餐、支付方式和页面显示的金额，由会员站创建订单。微信支付二维码在侧边栏本地生成；支付宝和银行卡付款会在新标签页打开支付机构（支付宝、Waffo）的收银台，付款信息只在那里填写。之后图片排序向会员站查询订单状态。
- 你输入的兑换码会发送到会员站，用于增加会员天数。
- 订单、支付和账号由小小东会员站和支付机构处理，适用它们各自的隐私政策（会员站隐私政策：https://vip.xiaoxiaodong.ai/privacy）。
存进 Eagle
- 你在「导出」里选「存进 Eagle」时，图片排序把这一组发给你电脑上正在运行的 Eagle（它的本机接口 http://localhost:41595）：网页上的图片发链接（由 Eagle 自己下载），电脑里的图片发图片本身，连同按顺序起的名字、你填的标签和目标文件夹。这些只发到你这台电脑上的 Eagle，不经过任何服务器。
- 图片排序向 Eagle 读取文件夹列表和当前选中的文件夹，用来让你选放在哪里；记住上次选的文件夹和标签（保存在扩展本地存储里）。
备份到 Google Drive
- 备份到 Google Drive 默认关闭，在「设置 › 备份到 Google Drive」里连接后才开始。授权在 Google 自己的页面上完成，只允许读写你 Drive 里的隐藏应用目录（看不到你的其他文件）。会员站为你的账号加密保存这份 Google 授权；用同一账号登录的其他小小东插件共用这一个连接，断开时会一起断开。
- 备份里有你的设置和记录（每组图片的链接、顺序和排法），不含图片本身，也不含账号会话；电脑里的图片不进记录，也不进备份。备份经会员站存进你的 Drive，每天一份、留最近 7 天，会员站不留存备份内容，只记最近一次备份的时间、大小和设备名（如「macOS · Chrome」）。
- 连接后，设置或记录有变化时会自动备份（可以在设置里关掉）。新电脑连上时，如果 Drive 里已经有别的电脑的备份，会先问你恢复还是覆盖，选之前什么都不发送。
- 会员（含 7 天体验）可以备份；连上的账号都能查看和恢复自己的备份。恢复前，这台电脑原来的设置和记录会先存一份在本机，可以撤销。
它不会做什么
- 不上传图片本身。除了你连接的 Google Drive 备份（经会员站存进你自己的 Drive），不把链接、颜色、顺序或记录发送给会员站或任何其他服务器。
- 不读取你的浏览历史；只在上面说的情况下读网页里的图片地址，不读网页的其他内容。
- 不发送分析统计。
- 不出售用户数据，也不用于广告。
- 不加载、不执行远程代码。
权限说明
sidePanel：显示图片排序的侧边栏，这是它的主界面。storage：在这个浏览器里保存当前这一组、记录、设置和账号会话。clipboardWrite：把排好的链接或单张图片复制到剪贴板。downloads：把排好的链接存成文本文件，或把图片按顺序打包成 ZIP 下载。identity：打开会员站的登录窗口，并接收登录结果。scripting：你点「取这个网页的图片」「取所有标签页的图片」「打开一个网址」时，在那些网页里运行一段只读的代码，列出其中的图片地址。- 所有网站（<all_urls>）：你的图片可能放在任何网站上。按颜色排序、复制图片、打包下载时，图片排序需要直接读取这些图片的内容；取网页里的图片时，需要读取你选的网页；存进 Eagle 时，需要连上你电脑上的 Eagle（localhost）。
https://mp.weixin.qq.com/*：在公众号后台右边缘显示打开侧边栏的按钮，可以在设置里关掉。
查看和删除你的数据
链接、记录和设置都在这个浏览器里：在「记录」里可以删除单条或清空全部；卸载扩展会删除它在这个浏览器里保存的全部数据。退出登录会删除本地的账号会话。Google Drive 备份可以在「设置 › 备份到 Google Drive」里断开；Drive 里的备份文件可以在 Google Drive 的「设置 › 管理应用」里删除。需要删除会员站上的账号，请联系作者。
政策变更
这份政策有变化时，会更新本页顶部的日期；重大变化会在扩展更新说明里写明。
联系作者
- 微信：newbe2012
- X：x.com/xiaoxiaodong
02English
XXD Image Sort ("Image Sort") is a local-first Chrome extension. The links you paste, the colours it reads, the orders it makes and your records stay in your own browser; Image Sort has no server of its own. Using it requires signing in with a 小小东 member-site account (vip.xiaoxiaodong.ai).
What It Reads
- Text you paste, drop or type into the side panel. Image Sort picks out the http(s) links in it; the rest of the text is not kept.
- The pictures those links point to. To sort by colour, Image Sort fetches each picture directly from the website that hosts it and works out its average colour inside your browser (the colours stay in memory only while the side panel is open and are not written to storage). Copying a single picture and downloading the pictures as a ZIP also fetch them directly from their websites. When reading colours, copying a picture or building the ZIP, these requests are sent without your cookies.
- Picture addresses on web pages: when you click 取这个网页的图片 (this page), 取所有标签页的图片 (every tab) or 打开一个网址 (a web address), Image Sort reads the picture addresses on those pages (images, their size variants, lazy-loading addresses and large backgrounds). It reads nothing else on the page and changes nothing. A web address is opened in a background tab, which is closed once the pictures are read. While the side panel is open and holds no pictures yet, it counts the pictures on the current page and on the pages in this window, and shows the counts only in the side panel.
- On the WeChat Official Accounts editor (mp.weixin.qq.com), it shows a small "图片排序" tab at the right edge that opens or closes the side panel. It does not read the content of the editor's pages.
What It Stores (only in this browser's extension storage)
- The set at hand: its links, their order and the sort method.
- Records: recent sets (at most 50 and 8 MB in total; the oldest are removed first).
- Settings: theme, corners, accent colour, default sort method, export file name and similar.
- Your account session: a revocable access token issued by the member site and its expiry, your account id, email, display name and avatar address, and the last membership status (plan and end date). Image Sort never stores your password or any payment details.
- The member site's signed membership token, which lets a member keep working offline for up to 3 days.
- For the free tier, while the member site cannot be reached: one-way digests of the sets sorted today (no links), used to count them on this computer.
Account, Membership and Payment
- Sign-in happens either on the member site's own page (Google or email; Image Sort only receives an authorization code and exchanges it for an access token), or in the side panel with email and password, which are sent once over HTTPS to vip.xiaoxiaodong.ai to sign in or create the account.
- After sign-in, Image Sort asks the member site for your account id and membership status (Image Sort membership, the 7-day trial, or 小小东 VIP; plan and end date), and how many sets the free tier may sort by colour per day.
- The free tier's daily count of colour sorts is kept by the member site: before sorting a new set by colour, Image Sort sends your time-zone offset and a one-way digest of that set of links (sorting the same set another way the same day is not counted again). The links themselves are never sent.
- To buy or renew a membership, Image Sort sends the member site only the chosen plan, the payment method and the amount shown, and the member site creates the order. WeChat Pay QR codes are drawn locally in the side panel; Alipay and card payments open the payment provider's checkout (Alipay, Waffo) in a new tab, and payment details are entered only there. Image Sort then asks the member site for the order's status.
- A redeem code you enter is sent to the member site to add membership days.
- Orders, payments and accounts are handled by the 小小东 member site and the payment providers under their own privacy policies (member site privacy policy: https://vip.xiaoxiaodong.ai/privacy).
Sending to Eagle
- When you choose 存进 Eagle (send to Eagle) under Export, Image Sort sends the set to the Eagle app running on your computer (its local API at http://localhost:41595): web pictures as their links (Eagle downloads them itself), pictures from your computer as the pictures themselves, with names in order, the tags you typed and the chosen folder. This goes only to Eagle on your computer, through no server.
- Image Sort asks Eagle for its folder list and the folder selected now so you can choose where the pictures go, and remembers your last folder and tags in its local storage.
Backup to Google Drive
- Backup to Google Drive is off until you connect it (Settings › 备份到 Google Drive). You authorize on Google's own page, for the hidden app folder of your Drive only (Image Sort cannot see your other files). The member site keeps the Google authorization, encrypted, for your account; the other 小小东 extensions you sign in to with the same account share that one connection, and disconnecting stops it for all of them.
- A backup holds your settings and records (each set's links, order and sort method) — never the pictures and never your account session; pictures from your computer are not in records or backups. Image Sort sends it through the member site to your Drive, which keeps one per day for the last 7 days. The member site does not keep the backup's contents; it notes only when the last backup was made, its size and the device name (such as "macOS · Chrome").
- Once connected, a change to your settings or records is backed up automatically (this can be turned off in Settings). When a new computer connects and Drive already holds another computer's backup, you are asked first whether to restore it or overwrite it; nothing is sent until you choose.
- Members (including the 7-day trial) can back up; anyone connected can list and restore their own backups. Before a restore, this computer's settings and records are kept here so the restore can be undone.
What It Does Not Do
- It never uploads the pictures themselves. Apart from the Google Drive backup you connect (passed through the member site into your own Drive), it does not send links, colours, orders or records to the member site or any other server.
- It does not read your browsing history; it reads picture addresses on web pages only as described above, and nothing else on them.
- It does not send analytics.
- It does not sell user data or use it for advertising.
- It does not load or run remote code.
Permissions
sidePanel: shows Image Sort's side panel, its main user interface.storage: keeps the set at hand, records, settings and the account session in this browser.clipboardWrite: copies the ordered links or a single picture to the clipboard.downloads: saves the ordered links as text files, or the pictures in order as a ZIP.identity: opens the member site's sign-in window and receives its result.scripting: when you click 取这个网页的图片, 取所有标签页的图片 or 打开一个网址, runs a read-only function in those pages that lists the picture addresses on them.- All websites (<all_urls>): your pictures can be hosted on any website. To sort them by colour, copy a picture or download the pictures, Image Sort reads the pictures themselves; to take the pictures from a page it reads the pages you choose; to send pictures to Eagle it talks to the Eagle app on your computer (localhost).
https://mp.weixin.qq.com/*: shows the tab that opens the side panel at the right edge of the WeChat editor; it can be turned off in Settings.
Seeing and Deleting Your Data
Links, records and settings live in this browser: in Records you can delete one set or clear them all, and removing the extension deletes everything it stored in this browser. Signing out deletes the local account session. Google Drive backup can be disconnected in Settings › 备份到 Google Drive, and the backup files in Drive can be deleted in Google Drive's Settings › Manage apps. To delete your member-site account, contact the author.
Changes
When this policy changes, the date at the top of this page is updated; significant changes are also noted in the extension's update notes.
Contact
- WeChat: newbe2012
- X: x.com/xiaoxiaodong