无需注册无限蹬蹬账户。应用不含广告或跟踪功能，也不会把用量数据上传给开发者。统计默认在 Mac 上处理和保存；只有你开启 iCloud 同步后，用量摘要才会存入你的 CloudKit 私有数据库。
No TokenBell account is required. The app has no ads or tracking and does not upload usage data to the developer. Statistics are processed and stored on your Mac by default. Usage summaries are stored in your private CloudKit database only when you enable iCloud sync.
1. 适用范围与责任方1. Scope and responsible party
本政策适用于个人开发者 Mustundead 提供的无限蹬蹬 macOS、iOS、iPadOS、watchOS 应用及产品网站。Mac 负责采集你授权的本机统计；其他设备读取你主动同步的摘要。隐私问题或删除请求请联系 m@mustundead.com。
This policy covers the TokenBell macOS, iOS, iPadOS and watchOS apps and product website provided by individual developer Mustundead. The Mac collects authorized local statistics; other devices read summaries you choose to sync. Contact m@mustundead.com for privacy questions or deletion requests.
2. 应用处理的数据2. Data processed by the app
在你分别明确授权后，应用会从所选 .codex 文件夹提取额度窗口、重置时间、Token 与模型计数，也可从 .claude 文件夹、Gemini CLI 官方本地遥测、OpenCode JSON 导出或 Grok Build 官方任务完成记录（updates.jsonl，兼容 usage.json）提取时间、模型与 Token 等统计字段。
After separate explicit authorization, the app extracts quota windows, reset times, token and model counts from the selected .codex folder, and may extract timestamps, model names, and token counters from a .claude folder, Gemini CLI local telemetry, an OpenCode JSON export, or Grok Build completed-task metadata (updates.jsonl, with usage.json compatibility).
统计适配器只处理时间、模型和 Token 等统计字段，不提取、展示、保留或上传对话正文、项目内容或凭证。此限制不适用于你单独启用的任务通道。应用不会从 Token 数量估算来源未提供的订阅额度。
Statistical adapters process timestamps, models and token counters without extracting, displaying, retaining or uploading conversation text, project content or credentials. This boundary does not cover the task channel you enable separately. The app does not infer unavailable subscription limits from token counts.
Antigravity CLI 通过你主动启用的本机状态栏采集器生成统计快照。采集器仅保留采集时间、模型额度、重置时间与当前会话输入、输出 Token，不保存邮箱、项目路径、对话标识或正文。应用仅请求对专用 ration 统计文件夹的只读访问（仅读取 antigravity-status.json）；可在连接中心撤销授权。此快照可用于小组件，并在你开启同步后进入 iCloud 摘要
3. 文件与系统权限3. File and system permissions
无限蹬蹬 运行在 macOS App Sandbox 中。对 .codex、.claude、Gemini CLI 遥测、OpenCode 导出或 Grok Build 用量文件的访问必须由你分别通过系统文件选择器主动授予，且应用请求的是用户所选文件的只读权限。
TokenBell runs inside the macOS App Sandbox. Access to .codex, .claude, Gemini CLI telemetry, OpenCode exports, or Grok Build usage files must be granted separately through the system file picker, and the app requests read-only access to user-selected files.
通知和登录时启动由 macOS 系统设置管理。数据来源的访问权限可在应用的“数据”中撤销；这不会撤销系统通知或登录项设置。
Manage notifications and launch at login in macOS System Settings. Revoke data-source access in the app’s Data settings; this does not change notification or login-item settings.
4. 本地存储与 iCloud4. Local storage and iCloud
以下仅说明用量摘要同步。额度历史、Token 周期基线、授权书签和设置默认保存在 Mac。小组件与悬浮窗读取本机摘要。主动开启 iCloud 同步后，应用把六种来源的可用额度、Token、模型与推理强度汇总、重置和采集时间、有效期与统计范围，以及首选工具、语言、强调色保存到你的 CloudKit 私有数据库；随机生成的安装标识用于区分 Mac 的摘要记录。不会同步原始日志、文件路径、对话正文、项目内容、邮箱或凭证。
The following describes usage-summary sync only. Quota history, token-cycle baselines, access bookmarks and preferences are stored on your Mac by default. Widgets and the floating panel read local summaries. Opt-in iCloud sync stores available quotas, token, model and reasoning-effort summaries, reset and capture times, validity and statistical scope for six sources, plus preferred tool, language and accent color in your private CloudKit database. A randomly generated installation identifier distinguishes each Mac’s summary record. Raw logs, file paths, conversation text, project contents, emails and credentials are not synced.
断开此 Mac 会停止后续同步并保留本机统计，不会退出系统 Apple 账户，也不会删除已保存的云端记录；已被 CloudKit 接收的请求可能仍会完成。清除 无限蹬蹬 的本地数据不会删除任何来源工具的对话、项目或遥测文件。
Disconnecting this Mac stops future sync and preserves local statistics; it does not sign out the system Apple Account or delete existing cloud records. Requests already accepted by CloudKit may still finish. Clearing local TokenBell data does not delete any source tool's conversations, projects, or telemetry files.
当前版本不提供应用内删除云端摘要的入口。如需永久移除，请先断开同步，再前往“系统设置 → Apple 账户 → iCloud → 管理”，选择无限蹬蹬并从 iCloud 删除数据。系统名称可能因 macOS 版本不同而略有变化；此操作会删除该 App 的 iCloud 数据且无法撤销。
The current version does not include an in-app control for deleting cloud summaries. To remove them permanently, disconnect sync first, then open System Settings → Apple Account → iCloud → Manage, select TokenBell, and delete its data from iCloud. Labels can vary by macOS version. This removes the app's iCloud data and cannot be undone.
本机额度历史按设置的保留周期清理（默认 90 天，可选 30、90、180 或 365 天）；周期基线、偏好和授权书签不等同于历史记录，可通过应用设置及移除本地容器清除。云端保留每台 Mac 的最新摘要，不会在断开同步时自动删除。其他设备可能保留已下载的摘要缓存；移除本机缓存不等于删除 iCloud 数据。
任务与回复同步需要单独开启。任务结果正文、状态、时间及任务、会话和设备标识会存入你的 CloudKit 私有数据库；你发送的回复也会存入其中，并可由 Mac 上运行的 TokenBell bridge 交给对应 Codex 会话继续执行。结果最多 4000 个 Unicode 字符，回复最多 2000 个。通知不包含任务正文。最近任务的查看和回复期限为 24 小时，这不代表云端记录会自动删除；关闭通道也不会删除已有记录。任务结果本身可能包含敏感信息，请只为愿意同步这些内容的会话启用。
5. App 内购买5. In-app purchases
月度订阅、年度订阅、免费试用和终身购买由 Apple StoreKit 与你的 Apple 账户处理。应用读取 Apple 签名的购买权益，以决定是否解锁 Pro 功能。
Monthly and annual subscriptions, free trials, and lifetime purchases are processed by Apple StoreKit and your Apple account. The app reads Apple-signed purchase entitlements to determine whether Pro features are unlocked.
开发者不会接收或保存你的银行卡号、完整账单信息或 Apple 账户密码。购买记录的保留、退款和订阅管理遵循 Apple 的条款与隐私政策。
The developer does not receive or store your card number, complete billing information, or Apple account password. Purchase history, refunds, and subscription management are governed by Apple's terms and privacy policy.
6. 分享与导出6. Sharing and export
分享图片与 CSV、JSON 文件在本机生成。由你选择保存、复制图片或通过系统分享发送；应用不会自动上传。发送给其他服务后，内容的处理方式以接收方的政策为准。
Share images and CSV or JSON files are generated on your Mac. You choose whether to save, copy an image or send content through the system share sheet; the app does not upload it automatically. Content sent to another service is handled under that service’s policies.
7. 第三方服务与跟踪7. Third-party services and tracking
当前版本不包含广告、行为分析、第三方跟踪或第三方崩溃上报 SDK，也不使用跨 App 或网站的跟踪标识符。Apple 为 App Store、购买与主动开启的 iCloud 同步提供服务；主动使用系统分享时，所选接收方也会获得你分享的内容。
The current version includes no advertising, behavioral analytics, third-party tracking, or third-party crash-reporting SDKs, and uses no identifiers for tracking across apps or websites. Apple provides App Store, purchase, and opt-in iCloud services. A destination you choose in the system share sheet also receives the content you share.
本网站仅在浏览器本地保存语言和主题偏好，不加载行为分析或广告脚本。访问线上网站时，托管服务可能处理 IP 地址、请求时间和浏览器信息等必要访问日志。主动联系支持时，邮件服务会处理你提供的邮箱、邮件内容和附件；请勿发送原始日志、对话或凭证。
This website stores language and theme preferences locally in your browser and loads no behavioral analytics or advertising scripts. When you visit the hosted site, the hosting service may process necessary access logs such as IP address, request time, and browser information. If you contact support, email services process the address, message, and attachments you provide. Do not send raw logs, conversations, or credentials.
实时 Codex 额度需要可选的官方 ChatGPT 登录。内嵌官方 Codex App Server 与 OpenAI 通信，并把认证状态保存在 TokenBell 沙盒内独立的 CODEX_HOME；不会导入或修改原有 Codex 登录。身份查询可在内存中处理账户标识与邮箱，本地额度历史使用哈希账户键和遮罩邮箱；这些字段不进入用量摘要。工具版本检查会请求公共 npm registry。相应服务按其政策处理网络请求。 使用这些可选服务时，OpenAI 可根据其隐私政策处理账户标识、服务交互、连接与诊断日志，以及由 IP 推断的大致地区。通过任务通道交给 Codex 的内容也由 OpenAI 处理。其保留期限和模型改进用途取决于服务条款、账户类型及你的数据控制设置；你可在 ChatGPT 的数据控制中管理训练选项。TokenBell 开发者不运营接收这些内容的服务器，也不将数据用于广告追踪。详见 OpenAI 隐私政策和数据控制说明。 OpenAI 隐私政策 · 数据控制
8. 你的选择与控制8. Your choices and controls
- 在“设置 → 数据”中分别重新选择或撤销六种数据源访问。
- 在“设置 → 数据”中开启 iCloud 同步或断开此 Mac。
- 清除 无限蹬蹬 保存的本地统计与周期基线。
- 在 macOS 系统设置中关闭通知、登录项或管理 Apple 账户。
- 在 Apple 账户的订阅管理中查看、变更或取消订阅。
- 通过卸载应用及删除其本地容器移除本机数据。
- Reselect or revoke any of the six data sources separately in Settings → Data.
- Enable iCloud Sync or disconnect this Mac in Settings → Data.
- Clear local statistics and cycle baselines saved by TokenBell.
- Disable notifications or the login item, or manage the Apple Account, in macOS System Settings.
- Review, change, or cancel a subscription in your Apple account.
- Remove on-device data by uninstalling the app and deleting its local container.
应用没有开发者运营的账户或服务器；可选同步数据位于用户自己的 CloudKit 私有数据库，开发者不会通过应用接收这些数据。
The app has no developer-operated account or server. Optional sync data remains in the user's private CloudKit database, and the developer does not receive it through the app.
9. 儿童隐私9. Children's privacy
无限蹬蹬 是一款开发者工具，并非专门面向儿童。应用不建立账户，也不故意收集儿童的个人数据。如你认为存在相关问题，请通过下方邮箱联系我们。
TokenBell is a developer utility and is not directed specifically to children. It creates no account and does not knowingly collect children's personal data. Contact us below if you believe there is an issue.
10. 政策变更与联系10. Policy changes and contact
当应用的数据实践发生实质变化时，我们会更新本页面、生效日期以及适用版本；必要时也会在应用更新说明中提示。问题、请求或投诉请发送至 m@mustundead.com。
If the app's data practices materially change, we will update this page, its effective date, and the applicable version, and will note the change in release information when appropriate. Send questions, requests, or complaints to m@mustundead.com.
开发者：Mustundead · 联系邮箱：m@mustundead.comDeveloper: Mustundead · Contact: m@mustundead.com