隐私政策PRO

最近更新日期：2026-09-01
适用于应用程序：LanLink Pro
标准版另有一份政策，见 LanLink 标准版隐私政策。

我们非常重视您的隐私和数据安全。本隐私政策说明 LanLink Pro（以下简称“本应用”） 如何在您的设备上处理与保护相关信息。

Pro 版与标准版共用同一套传输内核，同样不设账号、不上云、不做任何商业化的数据收集。 但 Pro 版增加了相册时间轴、照片信息面板、上传中心等功能， 因此会在本机多保存一些数据、并会向局域网内的浏览器多提供一些照片元数据。 第四、五、六、八节是 Pro 版特有的内容，请重点阅读。

一、我们不收集哪些数据

本应用的设计目标是：所有文件与数据仅在您的本地设备和局域网中流转，不上传到任何云端服务器。因此：

  • 我们不会收集、上传或存储您的文件内容（包括文档、图片、视频等）。
  • 我们不会收集、上传或存储您的通讯录、短信、通话记录等个人隐私数据。
  • 我们不会将任何数据发送至第三方服务器用于分析、广告或其他商业目的。
  • 本应用没有账号系统，不需要注册、不收集手机号或邮箱。

二、本应用会使用到的系统权限及用途

为了实现“在局域网中分享文件”的核心功能，本应用会在本地请求一些系统权限，仅用于如下明确目的：

1. 本地网络与 WLAN 相关权限

  • 本地网络访问 / 网络状态：用于在局域网中开启 HTTP 服务，允许同一网络下的浏览器访问您设备上的共享文件。
  • Wi‑Fi 状态 / IP 地址：用于显示可访问地址（例如 http://192.168.x.x:端口），方便您在浏览器中打开。Pro 版的“网络诊断”还会在本机显示网卡列表、端口占用情况与当前 Wi‑Fi 名称，帮助您排查连不上的问题。

这些信息仅在本地用于建立、展示和诊断局域网访问地址，不会上传到任何服务器。

2. 文件与存储权限

  • 读取/写入存储（文档目录）：用于在您指定的共享目录中读取和写入文件，以便通过浏览器上传/下载。
  • 打开本地文件：当您在应用内浏览文件时，可能会调用系统或其他应用打开对应文件。

所有文件操作都在您的本机文件系统和局域网内完成，本应用不会对文件内容做云端备份或上传。

3. 相册 / 照片库权限

  • 访问相册：用于在 Web 端浏览、预览和下载您设备相册中的图片和视频，并支持按拍摄时间排列的时间轴浏览。
  • 写入相册：在您选择将文件保存到照片库时使用。

相册中的媒体文件仅在本地枚举与读取，用于在浏览器中展示和传输，不会上传到云端。

4. 通知权限

  • 通知权限：用于在服务器启动/停止、有新设备连接、以及服务因系统挂起而暂停等事件发生时向您发送提醒。

通知内容仅与本应用状态相关（例如访问地址、连接设备的 IP），不包含文件内容等敏感信息。

三、局域网访问与安全提示

当您在本应用中启动服务器后，同一网络下的其他设备可通过浏览器访问您的共享目录和相册。

  • 如您开启了访问密码，Web 端访问需要输入正确的用户名和密码（用户名默认为 lanlink）。
  • 用于校验的密码以哈希形式保存在本机；为便于您在设置中查看，另会在应用私有存储中保留一份明文副本。两者都不会上传，也不会出现在网页端。
  • 局域网内的传输走的是 HTTP 明文协议，未做端到端加密。请把它理解为“只在你信任的这张网里可见”，而不是“加密传输”。
  • 我们强烈建议您仅在可信任的私有网络（如家庭 Wi‑Fi 或个人热点）下使用本应用，不要在公共 Wi‑Fi 环境中开启服务。
  • 使用完毕后，请及时在应用内停止服务器以降低风险。

四、Pro 版在本机额外保存的数据

为了让相册浏览和上传体验可用，Pro 版会在您指定的共享目录下创建两个隐藏目录，保存一些派生数据。这些数据全部只存在于您的设备上，不会上传：

1. 缩略图缓存（.lanlink_thumbs）

  • 内容：由您的照片和图片文件生成的小尺寸缩略图副本（JPEG），用于让网页端快速出图，避免每次都传原图。
  • 上限：最多约 2000 个文件 / 200 MB，超出后按最久未使用顺序自动清理。
  • 请注意：这些是您原图的缩小副本，删除原图不会自动删除已生成的缩略图，但它们会随上述上限被逐步淘汰，也可以按第九节的方法手动清除。

2. 上传台账（.lanlink_incoming/upload-ledger.json）

  • 用途：支撑“最近上传”功能。从电脑传上来的老照片会按原始拍摄时间归档到几年前，没有这份记录您就再也找不到刚传的东西。
  • 内容：仅文件的元信息 —— 文件名、路径、大小、类型（图片/视频/文档）、上传时间。不含文件内容。
  • 上限：最近 500 条，超出后自动丢弃最旧的记录。
  • 同一目录下还会在分块上传过程中保存 .lanlink-part 临时文件，用于断点续传，传输完成后自动清理。

3. 仅存在于内存中的数据

以下数据在服务器运行期间保存在内存里，不写入磁盘，应用退出即消失：

  • 时间轴索引：文件路径与拍摄时间的对照表，用于按时间排序。
  • 拍摄时间缓存：避免重复解析同一张照片的 EXIF。
  • 已连接设备的 IP 地址（最多记录 200 个，用于在应用内显示连接数与提醒您有新设备接入）。
  • 媒体播放令牌：设了密码时，为了让浏览器的视频播放器能正常拖动进度条而临时签发的随机凭据，有效期 2 小时，最多同时保留 64 枚。

五、照片元数据（EXIF）与拍摄位置

Pro 版的图片详情面板可以显示照片的拍摄参数。为此，当您（或同一局域网内已通过密码验证的访问者）在网页端打开某张照片的信息面板时， 本应用会读取该照片的 EXIF 元数据并通过局域网发送给该浏览器，其中可能包括：

  • 拍摄时间、相机厂商与机型、镜头信息；
  • 光圈、快门速度、ISO 等曝光参数；
  • GPS 拍摄位置（经纬度），如果该照片本身带有位置信息；
  • 照片文件中携带的其他原始 EXIF 字段。

这些元数据本来就存在于您的照片文件之中，本应用只是读取并展示，不会上传到任何服务器，也不会写入本机的额外文件。

请特别注意：照片的 GPS 位置属于敏感信息。任何能够访问您服务器的设备 （在未设置密码时，即同一网络下的任何人）都可以看到这些信息。 如果您不希望共享照片位置，请使用下面第六节的相册开关，或为访问设置密码。

六、相册共享开关

Pro 版为相册提供了一道独立于文件共享的总开关。关闭“共享相册”后， 网页端将无法看到、也无法下载您照片库中的任何内容 —— 列表、时间轴、缩略图、原图下载、 照片信息（EXIF）与实况视频全部一并关闭，共享目录里的普通文件不受影响。

该开关随时可改，改动立即生效：正在访问的浏览器会当场收到提示并被切换到文件目录，无需重启服务器。

七、日志记录

本应用会在本地记录少量运行日志，用于帮助您了解运行状态与排查问题，例如：

  • 服务器启动/停止时间、本地访问地址。
  • 是否有新设备连接（仅显示 IP 地址）。
  • 服务因系统挂起而暂停、以及恢复的时间点。

这些日志仅保存在您的设备上，用于本地查看和调试，不会上传到任何远程服务器。清空日志或退出应用后即不再保留。

八、网页端在浏览器中保存的数据

您在电脑或平板上打开的那个网页界面，会在该浏览器自己的本地存储中保存少量偏好， 用于下次打开时保持一致。这些数据保存在访问者的设备上，不会发送给我们，也不会离开那台设备：

  • 界面语言、浏览方式（列表 / 缩略图 / 时间轴）等偏好设置。
  • 未完成的上传任务清单（仅文件名与大小等元信息，用于下次打开时提示您继续传输）。

清除该浏览器的网站数据即可删除以上内容。

九、第三方 SDK 与开源组件

本应用使用了一些开源组件和系统级框架（如 Flutter、CocoaPods 依赖、相册访问库、图片与 EXIF 解析库等），用于实现文件访问、相册访问、缩略图生成、通知等功能。

  • 这些组件只在本地运行，不会在未获您授权的情况下私自上传您的数据。
  • 组件可能会使用系统提供的 API（如相册、通知、网络），其行为受操作系统自身隐私机制约束。
  • 本应用不集成任何广告 SDK 或数据分析 SDK。

十、数据保留和删除

  • 本应用不会在云端存储您的文件或个人信息，所有文件和配置数据均保存在您的设备本地。
  • 您可以随时在应用内删除文件、清理共享目录或停止服务器。
  • 如需清除第四节所述的缩略图缓存与上传台账，可在文件管理中进入共享目录，删除 .lanlink_thumbs 与 .lanlink_incoming 两个隐藏目录；删除后仅会导致缩略图重新生成、“最近上传”列表清空，不影响您的原始文件。
  • 卸载本应用后，与本应用相关的本地配置数据将随系统卸载流程一并删除（不影响您手动保存到其他位置的文件）。

十一、儿童隐私

本应用面向普通用户，不专门针对儿童设计；我们不会主动收集任何可识别儿童身份的个人信息。 若您是未成年人，请在监护人的指导下使用本应用。

十二、本隐私政策的变更

如本隐私政策有重要变更，我们会在应用内适当位置提示或更新本页面。除法律另有规定外，更新后的隐私政策一经公布即生效。

十三、联系我们

如您对本隐私政策或本应用的数据处理方式有任何疑问、意见或建议，欢迎通过以下方式与我们联系：

我们会尽快审核并在合理期限内给予回复。

本页适用于 LanLink Pro。标准版请参阅 LanLink 标准版隐私政策。

Privacy PolicyPRO

Last updated: 2026-09-01
Application: LanLink Pro
The Standard edition has its own policy — see LanLink Standard Privacy Policy.

We take your privacy and data security seriously. This Privacy Policy explains how LanLink Pro (“the App”) processes and protects information on your device.

Pro shares the same transfer core as the Standard edition: no accounts, no cloud, and no data collection for commercial purposes. However, Pro adds a photo timeline, a photo-details panel and an upload center, so it keeps some additional data on your device and exposes more photo metadata to browsers on your local network. Sections 4, 5, 6 and 8 are specific to Pro — please read them carefully.

1. What data we do NOT collect

The App is designed so that all files and data stay on your device and local network, and are not uploaded to any cloud server. In particular:

  • We do not collect, upload, or store the contents of your files (including documents, photos, videos, etc.).
  • We do not collect, upload, or store your contacts, SMS, call history, or similar personal data.
  • We do not send any data to third-party servers for analytics, advertising, or other commercial purposes.
  • The App has no account system: no registration, no phone number, no email address.

2. Permissions we request and why

To provide local file sharing over your LAN, the App requests certain system permissions, used only for the purposes described below:

2.1 Local network & Wi‑Fi

  • Local network / network status: to start an HTTP server on your device so that other devices on the same network can access your shared files via a browser.
  • Wi‑Fi state / IP address: to display the access URL (for example http://192.168.x.x:port). Pro’s “network diagnostics” screen additionally shows your network interfaces, port availability and current Wi‑Fi name to help you troubleshoot connection problems.

This information is used only locally to establish, display and diagnose the LAN access address, and is never uploaded to any server.

2.2 Files & storage

  • Read/write storage (documents directory): to read and write files under the shared directory you configure, so they can be uploaded/downloaded via a browser.
  • Open local files: when you browse files inside the App, we may invoke the system or other apps to open those files.

All file operations happen on your device and over your local network. The App does not perform any cloud backup or upload of file contents.

2.3 Photos / photo library

  • Read photo library: to list, preview and download photos and videos from your device in the web interface, including timeline browsing ordered by capture date.
  • Write photo library: when you choose to save files into your photo library.

Media files are only enumerated and read locally to display and transfer over your LAN, and are not uploaded to any cloud.

2.4 Notifications

  • Notifications: to let you know when the server starts or stops, when a new device connects, and when sharing is paused because the system suspended the App.

Notification content relates only to the App’s status (such as the access address or a connecting device’s IP) and does not include file contents or other sensitive data.

About background operation: on iOS, the system suspends the App when the screen locks or you switch to another app, so sharing pauses. This is a platform limitation, not a setting. It resumes automatically when you return to the App. For large transfers, keep the App in the foreground; you can also enable “Keep screen awake” in Settings.

3. LAN access & security

When you start the server in the App, other devices on the same network can access your shared directory and photos through a browser.

  • If you enable a password, the web interface requires the correct username and password (the default username is lanlink).
  • The password used for verification is stored as a hash on your device. A plain-text copy is also kept in the App’s private storage so you can view it in Settings. Neither is ever uploaded, and neither is exposed to the web interface.
  • Transfers over your LAN use plain HTTP and are not end-to-end encrypted. Treat this as “visible only on a network you trust”, not as “encrypted transfer”.
  • We strongly recommend using the App only on trusted private networks (such as home Wi‑Fi or personal hotspots), and not on public Wi‑Fi.
  • After use, please stop the server in the App in a timely manner to reduce potential risks.

4. Additional data Pro stores on your device

To make photo browsing and uploading usable, Pro creates two hidden directories inside the shared folder you choose and stores derived data there. All of it stays on your device and is never uploaded:

4.1 Thumbnail cache (.lanlink_thumbs)

  • Contents: small JPEG copies generated from your photos and image files, so the web interface can display grids quickly instead of sending full-size originals every time.
  • Limits: up to roughly 2,000 files / 200 MB; beyond that, the least recently used entries are pruned automatically.
  • Note that these are reduced copies of your originals. Deleting an original does not automatically delete a thumbnail that was already generated, although it will eventually be pruned by the limits above, and you can remove them manually as described in section 10.

4.2 Upload ledger (.lanlink_incoming/upload-ledger.json)

  • Purpose: it powers “Recent uploads”. An old photo sent from a computer is filed under its original capture date, years back — without this record you would not be able to find what you just transferred.
  • Contents: file metadata only — file name, path, size, kind (photo / video / document) and upload time. No file contents.
  • Limit: the 500 most recent entries; older records are discarded automatically.
  • The same directory also holds .lanlink-part temporary files during chunked uploads, used for resuming; they are cleaned up once a transfer completes.

4.3 Data kept in memory only

The following is held in memory while the server runs, is never written to disk, and disappears when the App exits:

  • The timeline index: a mapping of file paths to capture times, used for date ordering.
  • A capture-time cache, so the same photo’s EXIF is not parsed repeatedly.
  • IP addresses of connected devices (up to 200), used to show the client count and notify you of new connections.
  • Media playback tokens: short-lived random credentials issued when a password is set, so the browser’s video player can seek properly. They last 2 hours, with at most 64 held at once.

5. Photo metadata (EXIF) and capture location

Pro’s photo details panel can show a photo’s capture settings. To do this, when you (or a visitor on the same network who has passed password authentication) open the details panel for a photo, the App reads that photo’s EXIF metadata and sends it over your LAN to that browser. This may include:

  • Capture time, camera make and model, and lens information;
  • Aperture, shutter speed, ISO and other exposure settings;
  • GPS capture location (latitude and longitude), if the photo carries location data;
  • Other raw EXIF fields embedded in the photo file.

This metadata already exists inside your photo files. The App only reads and displays it; it is never uploaded to any server and never written to additional files on your device.

Please note: a photo’s GPS location is sensitive. Any device that can reach your server — which, if you have not set a password, means anyone on the same network — can see it. If you would rather not share photo locations, use the photo-sharing switch described in section 6, or set an access password.

6. The photo-sharing switch

Pro gives your photo library a master switch independent of file sharing. When “Share photo library” is off, browsers can neither see nor download anything from your photo library — listings, timeline, thumbnails, original downloads, photo details (EXIF) and Live Photo video are all disabled together, while ordinary files in the shared folder continue to work.

The switch can be changed at any time and takes effect immediately: browsers currently viewing are told why and moved to the files view, with no need to restart the server.

7. Logs

The App keeps a small amount of logs locally to help you understand its status and troubleshoot issues, for example:

  • Server start/stop times and local access address.
  • Whether new devices have connected (IP address only).
  • When sharing was paused by the system and when it resumed.

These logs are stored only on your device for local viewing and debugging. They are not uploaded to any remote server, and are discarded when you clear them or close the App.

8. Data the web interface stores in the browser

The web page you open on a computer or tablet keeps a few preferences in that browser’s own local storage so things stay consistent next time. This data remains on the visitor’s device; it is never sent to us and never leaves that machine:

  • Preferences such as interface language and view mode (list / grid / timeline).
  • A list of unfinished uploads (file names and sizes only), so you can be prompted to resume next time.

Clearing that browser’s site data removes all of the above.

9. Third-party SDKs & open-source components

The App uses certain open-source components and system frameworks (such as Flutter, CocoaPods dependencies, photo access libraries, and image/EXIF parsing libraries) to implement file access, photo access, thumbnail generation, notifications and related features.

  • These components run locally and will not upload your data without your consent.
  • They may use system APIs (e.g., Photos, Notifications, Network), and their behavior is governed by the operating system’s own privacy controls.
  • The App integrates no advertising SDK and no analytics SDK.

10. Data retention & deletion

  • The App does not store your files or personal information in the cloud. All files and configuration data are kept on your device.
  • You can delete files, clear the shared directory, or stop the server at any time within the App.
  • To remove the thumbnail cache and upload ledger described in section 4, open the shared folder in the file browser and delete the hidden directories .lanlink_thumbs and .lanlink_incoming. Doing so only causes thumbnails to be regenerated and clears the “Recent uploads” list; your original files are unaffected.
  • When you uninstall the App, related local configuration data will be removed as part of the system’s uninstall process (this does not affect any files you have manually saved elsewhere).

11. Children’s privacy

The App is intended for general users and is not specifically directed at children. We do not knowingly collect personal information that can identify children. If you are a minor, please use the App under the guidance of a parent or guardian.

12. Changes to this Policy

If we make significant changes to this Privacy Policy, we will update this page or provide an in-app notice where appropriate. Unless otherwise required by law, the updated policy will take effect once published.

13. Contact us

If you have any questions, comments, or suggestions about this Privacy Policy or how the App handles data, please contact us:

We will review and respond within a reasonable time.

This page applies to LanLink Pro. For the Standard edition, see the LanLink Standard Privacy Policy.