隐私政策
1. 我们是谁
本政策中的「我们」「TransBox」指 TransBox 产品团队及其官方客户端软件。 TransBox 是一款模块化 AI 同传工作站,运行于 Windows 10/11,可通过 Steam 获取,并支持创意工坊扩展。
2. 我们处理哪些数据
为了实现实时识别、翻译与朗读,客户端可能在本机处理以下内容:
| 数据类型 | 用途 | 是否离开你的设备 |
|---|---|---|
| 麦克风 / 系统音频 | 语音识别与同传流水线 | 仅在你启用云端 ASR/MT/TTS 时,发送到你配置的服务 |
| 识别文本 / 译文 | 字幕显示、历史记录、朗读 | 同上;本地引擎下不离开设备 |
| 你输入的 API Key | 访问你自选的云端引擎 | 保存在本机客户端配置,由你请求时发往对应厂商 |
| 设置与主题 / 词库 | 个性化界面与术语增强 | 默认仅本机;从 Steam 创意工坊订阅的内容由 Valve 分发 |
使用 TransBox 客户端不要求注册账号,我们也不会建立包含你对话内容的中央用户档案。官网(transbox.hpptools.top)提供的可选账号与反馈看板见下文第 9 节。
3. 本地处理(默认推荐)
出厂默认配置使用本地离线引擎(例如 Qwen3-ASR、腾讯混元 Hy-MT2-1.8B、Kokoro-82M)。 在此模式下:
- 音频、字幕与译文在你的 Windows 设备上处理;
- 不需要持续联网(首次下载本地模型除外);
- TransBox 不会因同传功能本身向我们上传对话内容。
4. 云端第三方服务
若你主动切换到云端 ASR / MT / TTS(如通义千问、小米 MiMo、腾讯混元或其他你自行接入的服务), 相关音频或文本将按该服务的协议发送给对应厂商。
- API Key 由你自行在厂商处开通并填入客户端;
- 费用、配额、限流与数据处理规则以该厂商条款为准;
- TransBox 仅提供客户端与协议适配,不代售、不托管、不转售第三方大模型额度。
请在启用云引擎前阅读对应厂商的隐私政策,确认其是否符合你的场景(会议、医疗、法务等)。
5. 数据存储位置
- 配置与密钥:保存在本机客户端配置目录(例如用户配置 / 应用数据目录)。
- 历史记录:若你启用历史看板,字幕与译文保存在本机,可由你导出或清除。
- 模型文件:本地引擎权重下载后存放在本机缓存/模型目录。
你可随时在设置中关闭历史、清除本地数据或卸载客户端。
6. Steam 创意工坊与扩展
通过 Steam 创意工坊订阅的主题、词库、语言包与引擎扩展,其分发与账号体系由 Valve / Steam 负责。 第三方代码型扩展(Python / 中间件等)将以与主程序相同的权限运行——请只安装你信任的来源。
建议优先使用纯数据型扩展(术语表、主题、语言包)。若出现问题,可使用扩展工坊的「安全重置」。
7. 日志与诊断
客户端可能在本地写入运行日志,用于排查崩溃、连通性与引擎延迟问题。 日志默认保存在本机;仅在你主动打包并提交(例如 GitHub Issue、客服反馈)时才会离开设备。 请在分享日志前自行检查是否包含敏感对话片段。
8. 未成年人
TransBox 面向具备相应数字素养的用户。若当地法律要求监护人同意,请在监护人指导下使用。 我们不会故意收集未成年人的个人信息。
9. 官网账号与反馈看板(可选)
官网提供可选的账号(邮箱验证码、Steam、Google 登录)和公开的反馈看板。不登录也可以提交反馈。涉及的数据如下:
- 账号信息:邮箱(仅用于登录与验证码,不公开)、随机生成的用户名、昵称、头像(可来自 Google/Steam 公开头像,或你上传的图片)、语言偏好、第三方登录的唯一标识(Steam ID / Google 账号标识)。我们不会获得你的 Google 或 Steam 密码。
- 会话与设备:登录后使用 HttpOnly Cookie;服务器只保存令牌的哈希、浏览器与系统类型、大致国家/地区和最近活跃时间,你可以在个人中心查看并下线任一设备。
- 验证码:仅保存哈希,10 分钟内有效,使用后立即作废。
- 反馈、评论与截图:你提交的内容、截图和投票会公开显示(审核通过后);登录用户可选择匿名发布,匿名发布时公开页面不显示你的昵称,但仍在“我的反馈”中归属于你。请勿在其中填写个人信息。
- 早期测试记录:此前通过下载页登记过早期测试的账号,我们仍保存其账号标识、备注、状态、处理时间以及我们写给你的回复,仅用于核对资格并通知你,不对外公开;管理员可查看昵称、用户名和邮箱;注销账号时这些记录一并删除。下载页现已不再接收新的登记。
- 购买与订单:永久授权为一次买断,购买需要登录,授权绑定到你的账号。下单时会记录订单号、商品、金额、支付渠道、订单状态和时间,用于在个人中心展示订单、核对授权和处理退款(见退款说明)。付款由微信或支付宝完成,我们不保存你的银行卡或支付账号信息。
- 推广大使结算:申请提现时会收集收款方式、收款账号、真实姓名和身份证号(用于劳务报酬个税扣缴申报),仅用于核对、打款与申报;账号与实名加密保存,页面只显示掩码。已结算/处理中的提现记录保留金额与状态;注销账号时删除收款账户并清除工单里的账号与实名。
- 授权与设备:每个账号最多可在 3 台设备上使用;为限制设备数量,授权服务会记录已激活设备的标识。
- 防刷数据:为防止滥用,我们保存经加盐哈希处理的 IP 与浏览器标识(不保存明文 IP),并使用 Cloudflare Turnstile 进行人机验证。
- 公开范围:公开页面只展示昵称、头像和用户名,不展示邮箱。
- 注销:你可以在个人中心随时注销账号:账号、登录方式、设备、投票和上传的头像将被删除;你发布过的反馈与评论内容会保留但被匿名化(不再关联账号)。如需彻底删除某条反馈,请联系我们。
10. 你的权利
- 选择本地或云端引擎;
- 查看、导出、删除本机历史与配置;
- 卸载软件并自行清理应用数据目录;
- 就隐私问题通过下列方式联系我们。
由于我们通常不持有可识别到个人的对话内容库,针对「删除服务器数据」类请求,我们会说明: 相关内容默认不存在于 TransBox 运营的服务器上;云端引擎数据请同时向对应厂商行使权利。
11. 政策变更
我们可能随产品功能更新本政策。重大变更会在官网本页更新「最后更新」日期, 并在必要时通过应用内或发布公告提示。继续使用即表示你接受修订后的政策。
12. 联系我们
隐私相关问题请通过以下渠道联系:
- 官网:https://transbox.hpptools.top
- GitHub Issues:项目仓库(以商店页与官网链接为准)
本页面为 TransBox 官方隐私政策说明,供 Steam 商店「隐私政策」字段与官网用户查阅使用。
Privacy Policy
1. Who we are
“We”, “us”, and “TransBox” in this policy refer to the TransBox product team and our official Windows client. TransBox is a modular AI simultaneous-interpreting workstation for Windows 10/11, available on Steam, with Workshop extensibility.
2. Data we process
To provide live recognition, translation, and speech, the client may process the following on your device:
| Data | Purpose | Leaves your device? |
|---|---|---|
| Microphone / system audio | ASR and the interpreting pipeline | Only if you enable cloud ASR/MT/TTS — sent to the service you configured |
| Transcripts / translations | Captions, history, read-aloud | Same as above; stays local with offline engines |
| API keys you enter | Access your chosen cloud engines | Stored in local client config; sent to that vendor when you call it |
| Settings, themes, glossaries | UI and terminology personalization | Local by default; Workshop content is distributed by Valve |
The TransBox client does not require an account and we do not build a central user profile of your conversations. The optional website account and feedback board are described in section 9 below.
3. On-device processing (recommended default)
The factory default uses local offline engines (e.g. Qwen3-ASR, Tencent Hunyuan Hy-MT2-1.8B, Kokoro-82M). In this mode:
- Audio, captions, and translations are processed on your Windows device;
- No continuous network connection is required (except the first model download);
- TransBox does not upload conversation content to us for interpreting itself.
4. Third-party cloud services
If you switch to cloud ASR / MT / TTS (Qwen, Xiaomi MiMo, Tencent Hunyuan, or any service you connect), related audio or text is sent to that vendor under their terms.
- You open and enter your own API keys;
- Billing, quotas, rate limits, and data handling follow that vendor’s policies;
- TransBox only provides the client and adapters and does not host or resell third-party LLM quota.
Read the vendor’s privacy policy before enabling cloud engines, especially for meetings, healthcare, or legal use.
5. Where data is stored
- Settings & keys: local client configuration (user config / app data directories).
- History: if enabled, captions and translations are stored locally and can be exported or cleared by you.
- Models: local engine weights are stored in a local cache/model directory after download.
You can disable history, wipe local data, or uninstall the client at any time.
6. Steam Workshop & extensions
Workshop themes, glossaries, language packs, and engine extensions are distributed through Valve / Steam. Third-party code extensions (Python, middleware, etc.) run with the same permissions as the main app — install only from sources you trust.
Prefer pure data packs (glossaries, themes, language packs) when possible. Use Workshop Safe reset if something breaks.
7. Logs & diagnostics
The client may write local logs for crashes, connectivity, and engine latency. Logs stay on your device unless you package and submit them (e.g. GitHub Issues or support). Review logs for sensitive dialogue before sharing.
8. Children
TransBox is intended for users with appropriate digital literacy. Where local law requires parental consent, use the product under guardian supervision. We do not knowingly collect personal information from children.
9. Website account & feedback board (optional)
The website offers optional accounts (email code, Steam, Google sign-in) and a public feedback board. You can submit feedback without signing in. What we handle:
- Account data: email (used only for sign-in and codes, never public), a randomly generated username, nickname, avatar (a public Google/Steam avatar or an image you upload), language preference, and the provider's unique ID (Steam ID / Google account ID). We never receive your Google or Steam password.
- Sessions & devices: sign-in uses an HttpOnly cookie; the server stores only a hash of the token, browser/OS type, approximate country and last-active time. You can review and sign out any device in your account page.
- Verification codes: stored as hashes only, valid for 10 minutes, invalidated once used.
- Feedback, comments & screenshots: what you submit, including screenshots and votes, is shown publicly (after review). Signed-in users may post anonymously — your nickname is then hidden on public pages, but the post still belongs to you under “My feedback”. Please do not include personal information.
- Early test records: for accounts that previously registered for the early test on the download page, we still store the account ID, note, status, decision time and any reply we sent. It is used only to verify eligibility and to notify you, and is never public; administrators can see the nickname, username and email, and the records are deleted together with your account. The download page no longer accepts new registrations.
- Purchases and orders: the Lifetime membership is a one-time purchase; you must sign in to buy, and the license is bound to your account. When you place an order we record the order number, product, amount, payment channel, order status and time, so we can show your orders in your account, verify your license and handle refunds (see the Refund Policy). Payment is completed through WeChat Pay or Alipay; we do not store your bank card or payment account details.
- Ambassador payouts: when you request a payout we collect the payout method, account, real name and ID number (for labor-income tax withholding), used only to verify, pay and file. The account and name are stored encrypted and shown only as masks. Paid or in-progress payout records keep the amount and status; deleting your account removes the payout account and clears the account/name from payout records.
- License and devices: each account can use TransBox on up to 3 devices; to enforce that limit, the license service records an identifier for each activated device.
- Anti-abuse data: we keep salted hashes of IP addresses and browser identifiers (no plain-text IPs) and use Cloudflare Turnstile for bot checks.
- What is public: only your nickname, avatar and username — never your email.
- Deletion: you can delete your account at any time in the account page: the account, sign-in methods, devices, votes and uploaded avatar are deleted; feedback and comments you posted remain but are anonymized (no longer linked to any account). Contact us if you need a specific post removed entirely.
10. Your rights
- Choose local or cloud engines;
- Inspect, export, and delete local history and settings;
- Uninstall and clear application data yourself;
- Contact us about privacy questions using the channels below.
Because we typically do not hold an identifiable conversation database, requests to “delete server data” will be answered by explaining that such content is not stored on TransBox-operated servers by default; also exercise your rights with any cloud vendor you enabled.
11. Policy changes
We may update this policy as the product evolves. Material changes update the “Last updated” date on this page and may be announced in-app or on the site. Continued use means you accept the revised policy.
12. Contact
For privacy questions:
- Website: https://transbox.hpptools.top
- GitHub Issues: project repository (see store page and website links)
This page is the official TransBox privacy policy for the Steam Store “Privacy Policy” URL and website visitors.