MC Office Suite 隐私政策MC Office Suite Privacy Policy

一句话概括In one paragraph

你的文档留在你自己的电脑上。MC Office Suite 打开、转换、打印、编辑文档全部在本机完成，我们不会上传文档内容。数据离开你的设备只有三种情况：匿名的使用统计、你主动发出的反馈、以及你自己发起的「反馈助手」对话。本政策逐条写清这三种情况到底发了什么。

Your documents stay on your own PC. Opening, converting, printing and editing a document all happen locally inside MC Office Suite — we never upload document content. Data leaves your device in only three cases: anonymous usage statistics, a report you choose to send, and a conversation you start with the Feedback Assistant. This policy lists exactly what each of those sends.

• 不需要注册账号，我们不收集你的姓名、地址、电话、通讯录、位置或键盘输入；
• 没有第三方广告 SDK，也不出售任何数据；
• 所有说明都以本应用的实际代码行为为准：文中的每一项都能在应用里找到对应的开关或动作。

• No account is needed. We do not collect your name, address, phone number, contacts, location or keystrokes;
• No third-party advertising SDK is bundled, and we do not sell data;
• Everything below describes what this app actually does — nothing is collected without a matching action in the app.

1. 留在你电脑上的数据1. Data that stays on your PC

下面这些文件只写在本机，不会上传，除非你主动发反馈（见第 3、4 节，日志会作为附件）。

The files below are written to your PC only. They are not uploaded unless you send a report (see sections 3 and 4 — logs travel as an attachment).

怎么自己清掉：主界面 Recent ▸ Clear all 清空最近列表；直接删掉上面这些文件夹即可；卸载应用会一并删除应用包内的数据。

How to clear it yourself: use Recent ▸ Clear all on the home screen, delete the folders listed above, or uninstall the app — uninstalling also removes the package-local data.

2. 匿名使用统计2. Anonymous usage statistics

我们通过 Google Analytics 4（Measurement Protocol）了解功能被用得怎么样、哪里最容易失败，用来决定下一次改什么。

We use Google Analytics 4 (Measurement Protocol) to learn which features get used and where failures cluster, so we know what to fix next.

发送的内容只有事件名和枚举型参数，例如：应用启动；打开了一份文档（类型 + 入口是主界面 / 双击 / 右键菜单 / 文件关联，不含文件名和路径）；Recent 列表被打开 / 移除一条 / 清空；office 启动成功或失败（耗时、就绪信号、退出码、卡死判定原因）；应用或 office 崩溃；付费墙展示、点击购买、购买结果、恢复购买；反馈助手被打开 / 提交 / 举报 / 触发频率限制；以及界面控件的点击（控件名）。

What is sent is limited to event names plus enumerated parameters, for example: app started; a document was opened (type plus entry point — home screen, double-click, right-click menu or file association — never the file name or path); the Recent list was shown / one entry removed / cleared; an office launch succeeded or failed (duration, readiness signal, exit code, stall reason); app or office crash; paywall shown, purchase clicked, purchase result, purchase restored; the Feedback Assistant opened / submitted / reported / hit a rate limit; and clicks on UI controls (by control name).

不会发送文档文件名、文档路径、文档内容、邮箱地址或任何你输入的文字。

Never sent: document names, document paths, document content, e-mail addresses, or any text you type.

标识方式：每次统计带一个假名标识。它由 Windows 的机器 GUID、Windows 用户名和一个固定字符串一起做单向哈希得到，因此不含你的明文信息，但在同一台电脑上保持稳定（卸载重装后仍是同一个）。它保存在 analytics.json 里，也会写进你主动发送的反馈诊断（第 3 节），用于把工单和行为链对上。

Identifier: each batch carries a pseudonymous ID, produced by a one-way hash of your Windows machine GUID, your Windows user name and a fixed string. It contains no plain-text information about you, yet stays stable on the same PC — even across reinstalls. It is stored in analytics.json and also written into the diagnostics of a report you send (section 3), so a ticket can be matched to the event history.

接收方：Google LLC（Google Analytics）。Google 可能在你所在国家/地区之外处理这些数据。

Recipient: Google LLC (Google Analytics), which may process this data outside your country.

3. 你发出的反馈（Send feedback）3. A report you send (Send feedback)

只有你按下 Send 时才会发送。内容如下：

Nothing is sent until you press Send. What travels:

• 你写的描述；
• 邮箱（可留空。留空我们照样处理，只是没法回复你）；
• 最多 3 张你选择的图片（我们不做自动截屏，图片由你挑选）；
• 日志附件：今天和昨天的分模块日志（外壳与 office 启动、打印、PDF 编辑器、商店桥、扫描），以及旧版的 office-launch.log、mcosuite-paywall.log、coolleget-store.log、mcosuite-usage.log。日志里会有你打开过的文档路径；
• 崩溃取证：Windows 事件日志里最近 7 天属于本套件进程的崩溃/挂起记录（异常码、故障模块、时间），以及 %LOCALAPPDATA%\CrashDumps 中相关文件的文件名、大小、时间——不会上传 dump 本体；
• 诊断信息：应用与包版本、界面语言、区域、操作系统版本、架构、匿名标识（第 2 节）、许可状态（是否已购、订阅/买断、到期时间、许可错误文本）、你截了几张图。

• The description you write;
• Your e-mail (optional — leave it empty and we still handle the report, we just cannot reply);
• Up to 3 images you pick (the app does not capture your screen by itself);
• Log attachment: today's and yesterday's per-module logs (shell and office launches, printing, PDF editor, store bridge, scanning) plus the legacy office-launch.log, mcosuite-paywall.log, coolleget-store.log and mcosuite-usage.log. These logs contain the paths of documents you opened;
• Crash evidence: crash/hang records for the suite's processes from the last 7 days of the Windows event log (exception code, faulting module, time), and the name, size and timestamp of related files in %LOCALAPPDATA%\CrashDumps — the dumps themselves are never uploaded;
• Diagnostics: app and package version, UI language, region, OS version, architecture, the anonymous ID (section 2), licence state (purchased, subscription or lifetime, expiry, licence error text), and how many screenshots you attached.

发送到哪：我们自己的服务器 coolleget.com/api/feedback.php，进入客服工单，由人工查看。

Where it goes: our own server, coolleget.com/api/feedback.php, into a support ticket read by a human.

用途与保留：只用于答复你、定位并修复问题、以及统计故障类别。工单会保留到问题关闭，之后作为支持记录继续保存以便追溯同类问题；你可以随时写信要求删除。

Purpose and retention: only to reply to you, to reproduce and fix the problem, and to count failure categories. A ticket is kept until the issue is closed and then retained as support history so similar problems can be traced; you can ask us to delete it at any time.

4. 反馈助手（Feedback Assistant）4. Feedback Assistant

只有你在 Settings ▸ Feedback Assistant 里开始对话时才会发送。每条消息都会带上的内容：

Data is sent only while you are in a conversation you started at Settings ▸ Feedback Assistant. Every message carries:

• 你在对话里输入的文字；
• 你添加的图片（最多 3 张）；
• 会话标识（服务端返回的 sid），用来把同一段对话串起来。

• The text you type in the conversation;
• The images you add (up to 3);
• A session id returned by the server, so one conversation stays together.

对话开始时还会一次性发送一段现场信息，让助手不用问你已经知道的事：

When the conversation starts, one context block is sent as well, so the assistant does not ask what we already know:

• 产品名、版本号、操作系统版本、界面语言、许可状态；
• 今天外壳与 office 启动日志的末尾 1500 字符——其中你的用户目录和用户名会被替换成 %USERPROFILE% / %USERNAME% 后再发送；
• 其它模块（打印、PDF 编辑器、商店桥、扫描）今天日志各最多十几行，同样脱敏；
• 最近打开的 最多 8 个文档的文件名、类型、打开时间——不含目录路径；
• 最近一次崩溃摘要（最多 400 字符，同样脱敏）。

• Product name, version, OS version, UI language, licence state;
• The last 1,500 characters of today's shell and office-launch log, with your user profile and user name replaced by %USERPROFILE% / %USERNAME% before sending;
• Up to about a dozen lines from each other module's log for today (printing, PDF editor, store bridge, scanning), scrubbed the same way;
• The file names, type and open time of up to 8 recent documents — no folder paths;
• The latest crash summary (up to 400 characters, scrubbed the same way).

发送到哪：coolleget.com/api/ai-support.php，回复由我们部署在该服务器上的 AI 服务生成。点 Submit 时，助手会把这段对话和上面的现场信息一起提交成工单（走第 3 节同一条反馈链路）。每条 AI 回复下的 Report 会把被举报的回复、对话上下文和会话标识发给我们，用于改进和合规审查。

Where it goes: coolleget.com/api/ai-support.php; replies are generated by the AI service we run on that server. Pressing Submit files the conversation together with the context above as a support ticket (through the same feedback path as section 3). The Report link under each AI reply sends the reported reply, the conversation context and the session id to us, for review and compliance.

5. Microsoft Store 与购买5. Microsoft Store and purchases

许可检查、购买和「恢复购买」通过 Windows 自带的 Windows.Services.Store 接口完成，由 Microsoft 处理，适用 Microsoft 隐私声明。我们这边只拿到结果（是否已购、买断还是订阅、到期时间），拿不到你的付款方式、卡号或真实姓名。

Licence checks, purchases and “Restore purchase” go through the built-in Windows.Services.Store API and are handled by Microsoft under the Microsoft Privacy Statement. We only receive the result (purchased or not, lifetime or subscription, expiry) — never your payment method, card number or real name.

为了让套件里的各个模块（外壳、office 模块、PDF 编辑器、打印模块）对「是否已购」有一致答案，购买状态会以混淆形式保存在应用包内的本地数据里（不含付款信息）。

So that every module in the suite (shell, office module, PDF editor, print module) agrees about your purchase, the purchase state is stored locally in obfuscated form inside the package's app data — without payment details.

6. 其它会联网的地方6. Other network activity

• 促销卡片：主界面在显示推广内容时，会从 winappcenter.com 拉取一份促销清单和图片。这是一次普通下载，不带你的身份信息或设备信息。已购买的用户不显示这些卡片。
• 外部链接：教程、商店页、许可证与源码页、ko-fi 等链接会在你的浏览器里打开，那些网站适用它们自己的隐私政策。
• 新文档提醒：后台小工具监视「桌面 / 下载 / 文档」里新增的 Word、Excel、PowerPoint、PDF 文件并在右下角提示。它只在本机比较文件名、类型和时间，不上传任何内容；不想要可以在设置里关掉。
• 扫描与 OCR：扫描页暂存在临时目录，关窗即删；OCR 用随包提供的本地组件完成，不上传页面图片。

• Promo cards: when the home screen shows promotional content it downloads a promotion list and its images from winappcenter.com. That is a plain download with no identity or device information attached. Purchased users do not see these cards.
• External links: tutorials, the Store page, the licence/source page and ko-fi open in your browser; those sites are governed by their own privacy policies.
• New-document reminder: a background helper watches Desktop, Downloads and Documents for new Word, Excel, PowerPoint and PDF files and shows a notification. It only compares file name, type and time on your PC and uploads nothing; you can switch it off in Settings.
• Scanning and OCR: scanned pages live in a temporary folder until you close the window; OCR runs on bundled local components and page images are never uploaded.

7. 你的权利7. Your rights

• 知情：本页逐条说明了收集什么、为什么、发到哪里；
• 删除：本机数据你自己就能删（第 1 节）；服务端工单可以写信要求删除；
• 撤回 / 拒绝：不点发送就不上报；反馈助手不点 Submit 就不建单；不想要统计见第 2 节的说明；
• 更正与答复：写信给我们，我们会在合理期限内答复。

• Know: this page lists what is collected, why, and where it goes;
• Delete: local data you can remove yourself (section 1); server-side tickets can be deleted on request by e-mail;
• Withdraw / refuse: nothing is reported until you press send; no ticket exists until you press Submit; for statistics see the note in section 2;
• Correct and ask: write to us and we will reply within a reasonable time.

联系邮箱：coolleget@outlook.com　提供方：CoolLeGet Inc。

Contact: coolleget@outlook.com — Provider: CoolLeGet Inc.

8. 儿童与敏感信息8. Children and sensitive data

本应用不是面向儿童的产品，我们不会主动收集儿童个人信息。请不要在反馈或反馈助手里提交身份证号、银行卡号、健康信息等敏感内容。

This app is not directed at children and we do not knowingly collect children's personal information. Please do not submit ID numbers, bank card numbers, health information or similar sensitive data in a report or in the Feedback Assistant.

9. 政策更新9. Changes to this policy

我们会随功能变化更新本页，并同步更新下方的生效日期。涉及新类型数据的收集时，我们会在应用内明确提示，而不是只改这一页。

We update this page as the app changes and move the effective date below accordingly. If a change introduces a new kind of data collection, we will tell you inside the app rather than only editing this page.

生效日期：2026-11-14　适用版本：MC Office Suite 2.1.21 及以后版本。

Effective date: 2026-11-14. Applies to MC Office Suite 2.1.21 and later.