Privacy Policy

Last updated: 2026-07-29. This English translation is provided for convenience; the Chinese original (switch language with the 中文 button above) is authoritative.

The one-sentence version

Your data stays on your computer — no exceptions. Spool is purely local software: capture, threading, packing, and search all happen on your machine. No account, no upload, no telemetry. Spool ships with no built-in cloud AI and never contacts any server; the app's content-security policy (CSP) structurally forbids all external network connections from the webview.

What we collect

Nothing. Spool has no server. There is no account system, no usage analytics, no crash reporting, no advertising identifiers. The developer cannot see any of your content.

Where your data lives

All content (workspaces, threads, blocks, annotations, attachment index) lives in a local SQLite database: ~/Library/Application Support/com.oceanjin.spool/spool.db
Interface settings live in settings.json in the same directory (it contains no secrets — Spool needs none).
Attachments are never copied or uploaded — Spool stores only the path to the original file, plus (optionally) text extracted locally. PDF/Word text extraction happens entirely on your machine.
Before any database schema upgrade, a snapshot backup is saved automatically in the same directory.

Deleting that directory removes all Spool data completely; “Settings → Clear all data” inside the app does the same.

When data can leave your computer

In exactly one situation, which is off by default and requires you to enable it yourself:

Feature	Where data goes	Notes
MCP service (Settings → General, off by default)	The AI client you installed and configured yourself (Claude Desktop, Cursor, …)	Your AI client reads thread content over local inter-process communication; Spool listens on no network port. Where those clients send content is governed by that client and your agreement with its provider.

In other words: Spool never sends data anywhere on its own. When you connect an AI client to Spool, it is that client reading content under your authorization — and “allow AI writes” is a second, separate switch.

System permissions

Permission	Purpose	If declined
Input monitoring (double-tap ⌥ capture)	Detecting the Option-key double-tap / long-press gesture	Double-tap ⌥ unavailable; a custom capture shortcut can be set in Settings
Accessibility (optional)	Keeps the capture gesture exclusive to Spool: when a capture fires, the second ⌥ press is removed from the event stream so other apps using the same gesture (such as Claude Desktop) don't pop up alongside	Capture works exactly the same; other apps using the same gesture fire together with Spool
Automation (browser)	Reading the current tab title as a source label	Source falls back to the application name
Clipboard	Reading clipboard text at capture time	Capture unavailable

Permissions are used only when the corresponding feature fires — no background monitoring. The clipboard is read exactly once, at the moment you press the capture shortcut.

Contact

Questions or concerns: open an issue on GitHub, or write to jinhz0531@gmail.com.

Spool（思簿）隐私政策

最后更新：2026-07-29

一句话版本

你的数据留在你的电脑上——没有例外。 Spool 是纯本地软件：捕捉、整理、打包、搜索全部在本机完成，不注册账号、不上传数据、不做遥测。Spool 自身不内置任何云端 AI，也不会向任何服务器发起请求；应用的内容安全策略（CSP）在结构上禁止了 webview 的一切外部网络连接。

我们收集什么

什么都不收集。 Spool 没有服务器。没有账号系统、没有使用统计、没有崩溃上报、没有广告标识符。开发者无法看到你的任何内容。

数据存放在哪里

所有内容（工作区、脉络、信息块、批注、附件索引）存放在本机的 SQLite 数据库：~/Library/Application Support/com.oceanjin.spool/spool.db
界面设置存放在同目录的 settings.json（不含任何密钥——Spool 不需要）。
附件本身不复制、不上传——Spool 只保存指向原文件的路径，以及（可选的）本地提取的文字内容。PDF/Word 的文字提取也完全在本机进行。
数据库结构升级前会在同目录自动留存一份快照备份。

删除以上目录即可彻底清除 Spool 的全部数据；应用内「设置 → 清除所有数据」亦可。

什么时候会有数据离开你的电脑

只有一种情况，且默认关闭、需要你亲手开启：

功能	数据去向	说明
MCP 服务（设置 → 通用，默认关闭）	你自己安装、自己配置的 AI 客户端（Claude Desktop、Cursor 等）	你的 AI 客户端通过本机进程间通信读取脉络内容；Spool 不监听任何网络端口。这些客户端把内容发给谁、如何使用，由该客户端及你与其服务商的协议决定。

换句话说：Spool 从不主动外发数据。当你把 AI 客户端接到 Spool 上时，是那个客户端在你的授权下读取内容——「允许 AI 写入」还需要单独开启第二个开关。

系统权限说明

权限	用途	拒绝的后果
输入监听（双击 ⌥ 捕捉）	识别 Option 键的双击/长按手势	双击 ⌥ 不可用；可在设置里自定义捕捉快捷键
辅助功能（可选）	让捕捉手势只属于 Spool：捕捉发生时从事件流中移除第二次 ⌥ 按键，避免使用相同手势的其他应用（如 Claude Desktop）同时弹出	捕捉一切照常；但相同手势的其他应用会与 Spool 同时被触发
自动化（浏览器）	读取当前标签页标题作为来源标注	来源退化为应用名
剪贴板	捕捉时读取剪贴板文本	无法捕捉

所有权限只在对应功能触发时使用，不做后台监控；剪贴板只在你按下捕捉快捷键的那一刻读取一次。

联系方式

问题或疑虑请在 GitHub 仓库提 Issue，或联系 jinhz0531@gmail.com。