1. 引言
老盖的烂片网(以下简称"本站",域名 www.laogaiphoto.com)是一个面向摄影爱好者的小型社区,提供照片分享、评论、评分等功能。本政策说明本站会收集哪些个人信息、如何使用、保留多久,以及您拥有哪些权利。
2. 我们收集的信息
2.1 您主动提供的信息
- 账号信息:登录用户名、显示昵称、加密后的密码哈希(不存明文)、邮箱地址。
- 用户生成内容:您上传的照片、您撰写的评论、您给出的评分。服务器在压缩照片时会把照片转成 JPG 并去除文件里的元数据(包括 GPS 位置),但会保留相机、镜头、光圈、快门、ISO、焦距和拍摄时间,并显示在作品页上。服务器无法转换成 JPG 的照片(如部分 HEIC 照片)不会被接收,也不会被保存,请转成 JPG 后再上传。
- 举报与屏蔽记录:您提交的举报(举报对象、原因、补充说明,以及被举报内容在举报时的快照),以及您的屏蔽名单。
2.2 自动收集的信息
- 服务器访问日志:Apache 会记录 IP 地址、请求时间、URL 路径、User-Agent。用于安全审计与故障排查。
- 邮件发送记录:本站发送的邮件(验证码邮件、给管理员的举报通知)会留有发送记录(目标邮箱、主题、用途、发送结果和时间),用于排查"未收到验证码"等问题。
- 推送令牌:iOS App 开启通知时上传的设备令牌,用于向您发送消息通知。
2.3 我们不收集
- 位置信息(本站不请求 GPS / 网络定位)
- 通讯录、相册元数据(iOS 端的相册选择由系统沙箱处理,我们只拿到您选中的那张图)
- 第三方追踪数据(本站未集成 Google Analytics、Facebook Pixel 等任何第三方追踪 SDK)
3. 信息用途
- 用户名 + 密码:登录身份验证
- 邮箱:账号注册验证、密码找回、绑定通知(本站不会向您发送营销邮件)
- 昵称:在评论、照片署名等公开场合显示
- 上传内容:在站内向其他用户展示(您可随时删除)
- 访问日志:站点安全审计、故障排查
- 举报记录:供管理员审核并处理违规内容(本站承诺在 24 小时内处理);新的举报会通过邮件通知管理员。屏蔽名单:为您隐藏被屏蔽用户的照片、评论和通知
- AI 作品点评:为照片生成专业点评,详见下方 4.1
4. 信息共享
本站不向任何第三方共享、出售或交换您的个人信息,除非:
- 法律法规明确要求(司法机关合法调取等)
- 您主动公开发布的内容(照片、评论)在本站内对其他用户可见,这是本站的核心功能
- 照片需要 AI 点评时,照片及其标题等信息会发送给 Anthropic 生成点评(见 4.1)
除 4.1 所述的 AI 作品点评外,本站还借助以下服务运行:网站加速服务商(CDN)会转发您访问本站时的网络请求(包括 IP 地址);iOS App 的消息通知通过苹果公司的推送服务送达(通知中会显示对方昵称、照片标题等内容);新举报的通知邮件(含被举报内容摘要)会发送到管理员的邮箱,由管理员使用的邮件服务商托管。除此之外,本站没有委托其他第三方处理您的个人数据;您的账号、照片、评论等数据保存在本站位于日本东京的服务器上。
4.1 AI 作品点评(Anthropic Claude)
本站提供 AI 作品点评功能,点评由美国公司 Anthropic, PBC 提供的 Claude 模型生成。需要点评的照片及相关信息会传送到日本境外,由 Anthropic 存储在美国并处理(生成点评的计算可能在美国或其他国家/地区进行)。美国的个人信息保护制度与日本不同。
- 什么时候会发送:只有您在上传时选择了点评,照片才会发送给 Anthropic。在网页上传时,勾选「让 Claude 给这张作品写专业点评」(默认勾选,可以取消);在手机 App(iOS 1.1 及以上、Android 1.4 及以上)上传时,打开上传页的「让 Claude 点评这张作品」开关(默认开启,每次上传都可以关闭)。这个勾选框和开关只在本站当前提供点评时才显示;没有显示、取消勾选或关闭开关时,照片不会发送给 Anthropic,也不会被点评。自 2026-11-01 起,通过没有这个开关的旧版 App 上传的照片也不会被点评。对于您选择点评的照片,如果点评暂时失败,系统会自动重试几次;管理员之后也可能为这张照片重新生成点评,这时会再次发送照片及其当前信息。
- 发送哪些内容:照片本身(缩小到长边不超过 1568 像素、去除元数据后的副本)、照片尺寸、您填写的标题、描述和所选分区,以及从照片文件中自动读取的相机参数(相机、镜头、光圈、快门、ISO、焦距、拍摄时间)。不发送您的用户名、昵称、邮箱、IP 地址或位置信息。
- Anthropic 如何处理:Anthropic 用这些内容为本站生成点评。根据 Anthropic 的商业服务条款,Anthropic 不会用这些内容训练模型。根据 Anthropic 关于数据保存期限的说明,这些内容一般会在收到或生成后 30 天内从其后台自动删除;例外包括:被其安全系统标记为违反使用政策的内容最长保留 2 年(相关的安全分类评分最长保留 7 年)、为执行其使用政策需要保留更久的情形,以及依法需要保留的情形;对于部分模型,Anthropic 还会进行有限的数据保留和安全审查。
- 点评结果:点评(评分和文字)保存在本站服务器上,与照片一起公开显示在作品页,并注明「AI 生成，仅供参考」。删除照片时,点评一并删除。如果您不希望某张照片的 AI 点评继续公开显示,可以发邮件联系我们,我们会将其隐藏;您也可以直接删除这张照片。
- 调用记录:本站会为每次调用 Claude 记录照片编号、上传者账号编号、所用模型、用量、费用、结果和时间(不含照片和点评文字),用于核算费用和控制每人每日的点评名额。
5. 数据保留期
| 数据类型 | 保留期 |
|---|
| 账号个人信息(邮箱、密码哈希) | 账号注销时立即抹除 |
| 用户上传内容(照片、评论、评分) | 由您或管理员主动删除前一直保留 |
| 服务器访问日志 | 30 天后滚动覆盖 |
| 邮件发送记录 | 目前长期保留,用于排查问题;如需删除请联系我们 |
| 推送令牌 | 在该设备退出登录或令牌失效时删除;注销账号时不会自动删除,如需删除请联系我们 |
| AI 点评内容 | 随照片保留,照片删除时一并删除 |
| AI 点评调用记录(不含照片和点评文字) | 用于费用核算和名额控制,长期保留(删除照片或注销账号后仍保留) |
| 发送给 Anthropic 的照片副本及相关信息 | Anthropic 一般在收到后 30 天内自动删除;例外见 4.1 |
| 举报记录 | 保留,用于处理违规内容和防止滥用;如需删除请联系我们 |
| 屏蔽名单 | 保留到您解除屏蔽为止,您可以随时在屏蔽列表中自行解除;注销账号后仍保留,如需删除请联系我们 |
注:账号注销采用"软删除"机制 —— 您的账号行被保留(防止用户名被他人恶意复用),但个人识别信息(邮箱、密码)会被清空,昵称会替换为"已注销用户"。您发表的评论会按 tombstone 方式处理(内容抹空,占位保留以维护评论树结构)。您上传的照片会保留并匿名化显示(作者改显为"已注销用户")—— 如希望连同照片一起删除,请在注销前先逐张删除。
例外:如果您的照片、评论或账号曾被其他用户举报,举报记录里保存的当时内容快照(例如照片标题和作者昵称、评论原文、用户名和昵称)不会因为您删除内容或注销账号而清除,会继续保留,用于处理违规和防止滥用;举报摘要也会通过邮件发送给管理员。如需删除,请联系我们。
6. 您的权利
- 查看:登录后在"我的"页面可查看您的账号信息、上传的照片、评论历史
- 修改:可随时修改昵称、密码、绑定的邮箱
- 删除内容:可随时删除自己上传的照片或撰写的评论
- 注销账号:网页版登录后,点页面右上角的账号按钮(显示您的昵称或人像图标)打开菜单 → "注销账号",窗口较窄时(例如手机竖着浏览)在右上角的菜单按钮里,注销前需要输入用户名确认;手机 App(iPhone、安卓)在 "设置" 页面 → "注销账号",需要连续确认两次。也可以发邮件请我们代为注销。管理员账号不能自助注销,需要先由其他管理员取消管理员身份,或请其他管理员代为删除
- 导出数据:如需导出您的账号数据,请发邮件至下方联系地址
7. 儿童隐私
本站面向 13 周岁以上用户。若您未满 13 周岁,请勿注册或使用本站。如发现未成年人账号,本站会主动注销。
8. 安全
本站采用密码哈希(bcrypt)、HTTPS 传输、JWT 短期 token、邮箱验证码等机制保护您的账号安全。但请注意,互联网传输不存在 100% 的安全 —— 请妥善保管自己的密码。
9. 政策变更
本政策可能随业务发展而更新。重大变更会在站内公告;您继续使用本站即视为接受变更后的政策。
10. 联系我们
如有任何隐私相关问题、数据导出请求、或行使您的隐私权利,请发邮件至:
mingfeng.zhao54@gmail.com
1. Introduction
Laogai's Photo Site (the "Site", domain www.laogaiphoto.com) is a small community for photography enthusiasts, offering photo sharing, comments, and ratings. This policy explains what personal information we collect, how we use it, how long we keep it, and what rights you have.
2. Information We Collect
2.1 Information you provide
- Account info: login username, display nickname, hashed password (we never store plaintext), email address.
- User-generated content: photos you upload, comments you write, ratings you give. When compressing a photo, the server converts it to JPG and removes the metadata stored in the file (including GPS location), but keeps the camera, lens, aperture, shutter speed, ISO, focal length and capture time and shows them on the photo page. Photos the server cannot convert to JPG (such as some HEIC photos) are not accepted or stored; please convert them to JPG before uploading.
- Reports and blocks: reports you submit (the reported item, reason, optional details, and a snapshot of the reported content at the time of the report), and your block list.
2.2 Information collected automatically
- Server access logs: Apache records IP address, request time, URL path, User-Agent — used for security auditing and debugging.
- Email send records: emails sent by the Site (verification codes, report notifications to administrators) are logged (recipient email, subject, purpose, delivery result and time) for diagnosing problems such as "code never arrived".
- Push tokens: the device token the iOS app uploads when you turn on notifications, used to send you notifications.
2.3 Information we do not collect
- Location data (we do not request GPS or network-based location)
- Address book or photo library metadata (iOS photo picking is sandboxed by the OS; we only receive the single image you select)
- Third-party tracking (we do not integrate Google Analytics, Facebook Pixel, or any other third-party tracking SDK)
3. How We Use the Information
- Username + password: login authentication
- Email: account-registration verification, password recovery, binding notifications (we do not send marketing emails)
- Nickname: displayed publicly alongside your comments and photo bylines
- Uploaded content: shown to other users within the Site (you can delete it at any time)
- Access logs: security auditing and debugging
- Reports: reviewed by administrators to handle content that breaks the rules (we commit to handling reports within 24 hours); new reports are sent to administrators by email. Block list: hides the photos, comments and notifications of users you have blocked
- AI photo reviews: generating a critique of your photo — see 4.1 below
4. Information Sharing
We do not share, sell, or trade your personal information with any third party, except:
- When required by law (lawful subpoenas from judicial authorities, etc.)
- Content you publicly post (photos, comments) is visible to other users within the Site — this is the core function of the Site
- When a photo is to receive an AI review, the photo and related information such as its title are sent to Anthropic to generate the review (see 4.1)
Apart from the AI photo reviews described in 4.1, we use the following services to run the Site: our website acceleration (CDN) provider forwards the network requests you make to the Site (including your IP address), and notifications in the iOS app are delivered through Apple's push notification service (a notification shows things such as the other user's nickname and the photo title); notification emails about new reports (including a summary of the reported content) are sent to administrators' mailboxes, which are hosted by their email providers. Other than these, we do not delegate personal data processing to any third party; your account, photos, comments and other data are stored on our servers in Tokyo, Japan.
4.1 AI Photo Reviews (Anthropic Claude)
The Site offers AI photo reviews, generated by the Claude model provided by Anthropic, PBC, a company based in the United States. Photos to be reviewed and their related information are transferred outside Japan, stored by Anthropic in the United States and processed there (the review may be computed in the United States or other countries). Privacy rules in the United States differ from those in Japan.
- When data is sent: a photo is sent to Anthropic only if you choose a review when you upload it. On the website, check the 「让 Claude 给这张作品写专业点评」 ("Let Claude write a professional review of this photo") box (checked by default; you can uncheck it). In the mobile app (iOS 1.1 or later, Android 1.4 or later), turn on the 「让 Claude 点评这张作品」 ("Let Claude review this photo") switch on the upload screen (on by default; you can turn it off for any upload). The box and the switch are shown only while the Site offers reviews; if they are not shown, or you uncheck the box or turn the switch off, the photo is not sent to Anthropic and is not reviewed. From 2026-11-01, photos uploaded from older versions of the app that do not have this switch are not reviewed either. For photos you chose to have reviewed, the system automatically retries a few times if a review fails, and an administrator may later regenerate the review, which sends the photo and its current details again.
- What is sent: the photo itself (a copy resized to at most 1568 pixels on the long side, with metadata removed), its pixel dimensions, the title, description and category you entered, and the camera settings read automatically from the photo file (camera, lens, aperture, shutter speed, ISO, focal length, capture time). We do not send your username, nickname, email address, IP address or location.
- How Anthropic handles it: Anthropic uses this content to generate the review for the Site. Under Anthropic's Commercial Terms, Anthropic does not use it to train its models. According to Anthropic's data retention article, it is generally deleted automatically from Anthropic's backend within 30 days of receipt or generation; exceptions include: content flagged by its safety systems as violating its Usage Policy may be kept for up to 2 years (with related safety classification scores kept for up to 7 years), data may be kept longer where needed to enforce its Usage Policy, and data may be kept where required by law; for some models, Anthropic also applies limited data retention and review as part of its safety work.
- The review: the review (score and text) is stored on our servers and shown publicly on the photo page together with the photo, labelled 「AI 生成，仅供参考」 ("AI-generated, for reference only"). It is deleted together with the photo. If you do not want the AI review of a photo to remain public, email us and we will hide it; you can also simply delete the photo.
- Usage records: for each call to Claude we record the photo ID, uploader account ID, model, usage, cost, result and time (no photo or review text), for billing and to enforce the per-user daily review limit.
5. Data Retention
| Data type | Retention period |
|---|
| Account personal info (email, password hash) | Erased immediately upon account deletion |
| User-generated content (photos, comments, ratings) | Kept until you or an admin actively deletes them |
| Server access logs | Rotated out after 30 days |
| Email send records | Currently kept long-term for troubleshooting; contact us to request deletion |
| Push tokens | Deleted when you log out on that device or the token becomes invalid; not deleted automatically when you delete your account — contact us to request deletion |
| AI reviews | Kept with the photo; deleted when the photo is deleted |
| AI review usage records (no photo or review text) | Kept long-term for billing and limit enforcement (kept after the photo or account is deleted) |
| Photo copies and related information sent to Anthropic | Automatically deleted by Anthropic, generally within 30 days of receipt; for exceptions see 4.1 |
| Reports | Kept to handle rule-breaking content and prevent abuse; contact us to request deletion |
| Block list | Kept until you unblock the user, which you can do at any time from your block list; kept after account deletion — contact us to request deletion |
Note: account deletion uses a "soft delete" mechanism — your account row is retained (to prevent malicious reuse of the username), but personally identifying info (email, password) is wiped, and the nickname is replaced with "Deleted User". Your comments are tombstoned (text wiped, row kept to preserve the comment tree). Your uploaded photos are kept but anonymized (author shown as "Deleted User"). If you wish to delete the photos as well, please remove them individually before deleting your account.
Exception: if your photo, comment or account was reported by another user, the snapshot saved with that report (for example the photo title and author nickname, the comment text, your username and nickname) is not removed when you delete the content or your account. It is kept to handle rule-breaking content and prevent abuse, and a summary of the report is emailed to administrators. Contact us to request deletion.
6. Your Rights
- View: see your account info, uploaded photos, and comment history on the "Me" page after login
- Modify: change your nickname, password, or bound email at any time
- Delete content: remove your own uploaded photos or comments at any time
- Delete account: on the website, sign in, open the account menu with the account button at the top right (it shows your nickname or a person icon; in a narrow window, e.g. a phone in portrait, use the menu button at the top right) → "注销账号" (Delete account), and type your username to confirm; in the mobile app (iPhone or Android), go to "设置" (Settings) → "注销账号" (Delete account) and confirm twice. You can also email us and we will delete it for you. An admin account cannot be deleted by its owner; another admin must first remove its admin role, or delete the account for them
- Data export: email us at the address below to request an export of your account data
7. Children's Privacy
The Site is intended for users aged 13 and over. If you are under 13, please do not register or use the Site. We will proactively delete accounts of minors if discovered.
8. Security
We use password hashing (bcrypt), HTTPS in transit, short-lived JWT tokens, and email verification codes to protect your account. However, no method of transmission over the Internet is 100% secure — please safeguard your password.
9. Changes to This Policy
This policy may be updated as the Site evolves. Significant changes will be announced on the Site; your continued use after such changes constitutes acceptance.
10. Contact Us
For any privacy-related questions, data export requests, or to exercise your privacy rights, email us at:
mingfeng.zhao54@gmail.com