隱私權政策
生效日期：2026 年 10 月 6 日
ShuffleTube（shuffle-tube.com，以下稱「本站」）由詩源科技 SY Tech 製作與維護。這份政策說明本站讀取哪些資料、存在哪裡、和誰分享，以及你可以怎麼刪除。
重點
- 本站不需要註冊、不放廣告、不做追蹤或分析，也不賣任何資料。
- 你的清單庫和設定預設只存在你自己的瀏覽器裡。
- 只有在你自己開啟某項功能（Google Drive 同步、贊助者雲端同步、分享短網址、贊助）時，才會有資料離開你的裝置，下面逐項說明。
YouTube API 服務
本站使用 YouTube API 服務（YouTube Data API 與 YouTube 嵌入式播放器）讀取與播放公開的播放清單。使用本站即表示你同意 YouTube 服務條款；YouTube 如何處理資料，請見 Google 隱私權政策。
- 讀取的內容：你貼上的播放清單或影片的公開資訊，包括影片 ID、標題、頻道名稱、縮圖網址和清單名稱。這些是用本站的 API 金鑰向 YouTube 讀取的，不需要、也不會存取你的 YouTube 帳號。
- 存放：讀到的內容只存在你的瀏覽器裡，供本站顯示和洗牌；它會在你按同步、或贊助者開啟自動同步時，重新向 YouTube 讀取更新。從清單庫移除清單或清除網站資料，就會刪掉。
- 播放器：影片由 YouTube 官方的嵌入式播放器播放，播放器由 YouTube 提供，可能依 Google 的政策設定 cookie 或收集使用資料；本站無法控制，也不會取得那些資料。
存在你瀏覽器裡的資料
本站用瀏覽器的 localStorage 與 IndexedDB 保存：清單庫（清單、影片列表、你取的名稱和封面）、設定（語言、播放選項等）、從佇列排除的影片，以及當天的讀取次數（用來執行每日讀取限額）。這些資料不會傳給本站。本站本身不設定 cookie。你可以用清單庫的「全部清除」，或在瀏覽器的網站設定裡清除本站資料，把它們全部刪掉。
你自己開啟的功能
Google Drive 同步（選用）
連結 Google 帳號時，本站只請求兩項權限：drive.appdata（Drive 裡只有本站看得到的隱藏資料夾，看不到你的任何檔案）與 email（在畫面上顯示你連結的是哪個帳號）。存進去的是清單庫的描述（清單 ID、名稱、設定，不含影片本身）以及贊助者憑證的備份。存取權杖只留在你的瀏覽器裡，不會送到本站的伺服器。你可以在「同步裝置」中斷連結，或到 Google 帳戶的第三方存取權設定撤銷本站的權限。
贊助者雲端同步（選用）
贊助者開啟後，清單庫的描述會存在本站的伺服器（Cloudflare Workers KV），以你的贊助者授權 ID 識別，不需要 Google 帳號。權益到期後 90 天內沒有續期，就會自動刪除；想提早刪除請來信。
分享連結
建立分享短網址時，要分享的內容（清單 ID、自訂清單的每一行、名稱）會存在本站的伺服器，一般為一年、贊助者為十年。任何拿到連結的人都能打開它，所以請不要把未公開的清單貼到公開的地方。不建立短網址時，內容只在連結本身裡，不經過伺服器。
贊助與贊助者權益
- 綠界科技（台灣）：信用卡、ATM、超商付款由綠界處理，本站拿不到你的卡號；本站只保存訂單編號、金額和付款方式，用來發解鎖碼。
- Ko-fi（國外）：Ko-fi 會把付款人的名稱、email、金額和留言傳給本站，用來寄解鎖碼和通知站長。email 只用於寄信，本站只保存它的雜湊值，用來辨認同一位贊助者再次付款時自動續期。
- 銀行轉帳：你回填的轉出帳號末五碼、金額和選填的 email，用來對帳和寄碼；未確認的回報保存 30 天，確認後保存到權益到期。
- 寄信：解鎖碼的信件透過 Resend 寄出。
- 贊助者憑證：只含一個隨機的授權 ID、等級和到期日，存在你的瀏覽器裡（連結 Drive 時也會備份到上面說的隱藏資料夾）。
伺服器與安全
本站架設在 Cloudflare 上。為了防止濫用，伺服器會用你的 IP 位址做短時間的請求次數限制，本站不另外保存 IP 位址。Cloudflare 作為主機服務商，依其隱私權政策處理連線資料。
與第三方分享
本站不出售、不出租任何資料，也不用於廣告。資料只會在上面列出的情況下，交給提供該項服務的對象：YouTube／Google、Cloudflare、綠界科技、Ko-fi、Resend。
你的權利
你可以隨時要求查詢、更正或刪除本站伺服器上與你有關的資料（雲端同步的清單庫、分享短網址、贊助紀錄）。請寄信到 contact@shuffle-tube.com，我們會在 30 天內處理。存在你瀏覽器裡的資料，你可以自己直接刪除。
政策變更
政策有變更時，會更新這一頁和上面的生效日期；重大變更會在網站上另行告知。
聯絡我們
詩源科技 SY Tech · contact@shuffle-tube.com
Privacy Policy
Effective 6 October 2026
ShuffleTube (shuffle-tube.com, "the site") is built and maintained by SY Tech (詩源科技). This policy explains what information the site reads, where it is kept, who it is shared with, and how you can delete it.
In short
- No sign-up, no ads, no tracking or analytics, and no information is ever sold.
- Your library and settings stay in your own browser by default.
- Information leaves your device only when you turn on a feature yourself (Google Drive sync, supporter cloud sync, short share links, a donation), each described below.
YouTube API Services
The site uses YouTube API Services (the YouTube Data API and the YouTube embedded player) to read and play public playlists. By using the site you agree to be bound by the YouTube Terms of Service. For how YouTube handles information, see the Google Privacy Policy.
- What is read: public information about the playlists and videos you paste in — video IDs, titles, channel names, thumbnail addresses and playlist names. It is read with the site's own API key; the site does not need or access your YouTube account.
- Where it is kept: only in your browser, to show and shuffle it. It is read again from YouTube when you press sync, or on a schedule if a supporter turns on auto-sync. Removing a playlist from your library, or clearing the site's data, deletes it.
- The player: videos play in YouTube's official embedded player, which is provided by YouTube and may set cookies or collect usage information under Google's policies. The site does not control that and receives none of it.
Information kept in your browser
The site uses your browser's localStorage and IndexedDB to keep your library (playlists, their videos, the names and covers you chose), your settings (language, playback options and the like), the videos you took out of the queue, and today's count of reads (to apply the daily reading limit). None of this is sent to the site. The site sets no cookies of its own. "Clear all" in the library, or clearing the site's data in your browser settings, deletes all of it.
Features you turn on
Google Drive sync (optional)
When you link a Google account the site asks for two permissions only: drive.appdata (a hidden folder in your Drive that only this site can see — it cannot see any of your files) and email (to show which account is linked). What is stored there is a description of your library (playlist IDs, names, settings — not the videos) and a backup of your supporter credential. The access token stays in your browser and is never sent to the site's server. You can unlink in "Sync devices", or revoke the site's access in your Google Account's third-party access settings.
Supporter cloud sync (optional)
When a supporter turns it on, a description of the library is stored on the site's server (Cloudflare Workers KV), identified by the supporter's grant ID, with no Google account involved. It is deleted automatically 90 days after the perks end if they are not renewed; write to us to have it deleted sooner.
Share links
When you create a short share link, what you share (playlist IDs, a custom list's lines, names) is stored on the site's server — one year, or ten for a supporter. Anyone with the link can open it, so do not post unlisted playlists anywhere public. Without a short link, the content travels inside the link itself and never touches the server.
Donations and supporter perks
- ECPay (Taiwan): card, ATM and convenience-store payments are handled by ECPay; the site never sees your card number. The site keeps the order number, amount and payment type, to issue an unlock code.
- Ko-fi (international): Ko-fi passes the payer's name, email address, amount and message to the site, to send the unlock code and tell the owner. The address is used only to send mail; the site keeps a hash of it, to recognise the same supporter paying again and renew automatically.
- Bank transfer: the last five digits of the paying account, the amount and an optional email address you enter, to match the payment and send the code. An unconfirmed report is kept 30 days; a confirmed one until the perks end.
- Mail: unlock codes are sent through Resend.
- Supporter credential: a random grant ID, a tier and an end date, kept in your browser (and backed up to the hidden Drive folder above if Drive is linked).
Servers and security
The site is hosted on Cloudflare. To prevent abuse, the server counts requests per IP address over short periods; the site does not otherwise keep IP addresses. As the host, Cloudflare processes connection data under its own privacy policy.
Sharing with others
The site does not sell or rent any information and does not use it for advertising. Information is passed only to the provider of the feature concerned, as listed above: YouTube/Google, Cloudflare, ECPay, Ko-fi and Resend.
Your rights
You may ask at any time to see, correct or delete information about you held on the site's server (a cloud-synced library, short share links, donation records). Write to contact@shuffle-tube.com and we will act on it within 30 days. Information in your browser you can delete yourself, directly.
Changes
When this policy changes, this page and the date at the top are updated; significant changes are also announced on the site.
Contact
SY Tech (詩源科技) · contact@shuffle-tube.com