1. 扩展处理哪些数据

• 密库内容：您输入、导入或确认保存的名称、用户名、密码、邮箱、网站地址、分类、标签、备注、自定义字段、附件、TOTP 密钥及恢复码。
• 网页与交互信息：当前网站地址、登录表单的结构和相关输入值，以及聚焦、输入、按键和提交事件，用于账号匹配、填充、生成密码和保存提示。扩展不建立完整浏览历史，不进行行为画像。
• 密库及备份设置：主密码用于在本机派生加密密钥；WebDAV 地址、目录、用户名、密码和可选备份密码用于您选择的备份交换。
• 剪贴板：您点击复制的内容，以及在清理时间到达时读取的当前文本，用于判断是否仍为本扩展复制的内容。
• 本机运行信息：设置、定时任务、同步状态及失败诊断信息。诊断可能包括服务器域名、路径和状态码，仅写入本机扩展控制台，不自动发送给开发者。

2. 存储与保护

密库、WebDAV 凭据和待同步修改加密保存于本机 Chrome 存储。扩展使用 PBKDF2-HMAC-SHA256（600,000 次迭代）派生密钥，使用 AES-256-GCM 加密本地密库。解锁期间密钥与必要明文存在于扩展受限会话存储及内存中；锁定后清理。部分非敏感界面偏好、定时信息不属于加密密库。

主密码不发送给开发者。请保管主密码及备份；开发者没有密库解密密钥，无法代您恢复遗忘的主密码。锁定不删除本机加密密库。

3. 网页填充与保存

扩展在受支持的 HTTP/HTTPS 网页识别登录字段，并在您选择账号或操作填充入口时将指定凭据交给匹配网页。网页本身可以读取您填入的值，并按该网站政策处理。扩展不自动提交登录。提交相关表单后，扩展可能暂存候选凭据并询问是否保存，确认后才写入密库。

网页匹配所需的地址和字段信息在本机处理。扩展没有历史记录权限，不向开发者上传浏览记录或网页表单。

4. 可选 WebDAV 与导出

未配置 WebDAV 时，扩展不会将密库自动发送到远程备份服务器。配置并使用手动或定时备份交换后，扩展把认证信息和备份发送到您指定的服务器。服务商也可能收到连接 IP、时间和请求路径，并按其政策保留日志。服务器和存储地区由您选择，开发者不运营扩展的默认云端密库。

请使用 HTTPS。当前扩展也接受 HTTP 地址，HTTP 不提供传输加密。备份保护取决于所选格式与加密设置：普通 JSON/ZIP 可能包含明文；历史字段加密 ZIP 仍可能暴露名称、用户名和清单等元数据，不能视为整个文件加密。导出的文件由您保管。

WebDAV 交换的是应用兼容备份快照。移动端须恢复备份才能读取，不意味着登录后实时多端同步。

5. 剪贴板清理与权限

复制后默认等待 60 秒尝试清理；您可选择其他时长或关闭。扩展在本机保留此次复制内容的摘要，在清理时读取当前剪贴板并比对，仅匹配时清空。不会记录剪贴板历史，也不会发送给开发者。浏览器退出、系统状态等可能影响清理时机。

• storage：保存密库、设置和解锁会话。
• sidePanel：在浏览器侧栏展示密库。
• alarms：自动锁定、备份交换和剪贴板清理调度。
• contextMenus：右键菜单主动填充。
• offscreen、clipboardRead、clipboardWrite：界面关闭后继续执行复制及到期比对清理。
• HTTP/HTTPS 网站访问：在用户选择的网站提供表单识别、匹配和填充，并访问用户自选 WebDAV 服务器。

6. 共享与有限使用

开发者不接收扩展密库、主密码、网页表单或剪贴板数据。扩展不包含广告、行为分析或远程执行代码。您明确填入的目标网页、您配置的 WebDAV 服务以及您主动发送给支持邮箱的内容，分别属于您选择的数据接收方。

记密码对从 Chrome API 及扩展权限取得的用户数据的使用，遵守 Chrome Web Store 用户数据政策及 Limited Use 要求。数据仅用于本政策描述的密码管理相关功能，不出售，不用于个性化广告、信用或贷款判断，不用于与单一目的无关的用途。

支持请求仅用于处理您的问题。请不要发送真实凭据或完整备份；开发者仅处理您主动提供的支持内容，必要时遵守适用法律处理合法请求。

7. 保留、删除与控制

您可以编辑、导出或删除记录。删除的账号可能进入回收站，直至您彻底删除或按已启用的保留规则清理。恢复前副本、导出文件及远程备份是独立副本，删除本机记录不会自动清除它们；请到相应位置自行管理。

卸载扩展或清除其站点存储会移除本机扩展数据；请先确认所需备份。您可在 Chrome 管理扩展的网站访问权限或停用扩展，也可在扩展内调整锁定、剪贴板和备份设置。停用不会自动删除已保存的本机或远程副本。

8. 政策更新与联系

功能或数据处理方式变化时，我们会更新本页日期，并按适用要求在商店说明或扩展内告知；需要新的授权时取得相应授权。

运营主体：重庆恩祖科技有限公司
隐私与支持邮箱：looptry@163.com

Data and purposes

The extension processes vault records you enter, import or confirm saving: names, usernames, passwords, email and website addresses, categories, tags, notes, custom fields, attachments, TOTP secrets and recovery codes. It processes the current website address, login-field structure and values, and relevant focus, input, keyboard and submit events to match accounts, fill forms, generate passwords and offer to save credentials. It does not build a complete browsing history or behavioral profile.

It also processes your local master password, optional WebDAV server credentials and backup settings, clipboard text for requested copying and delayed cleanup, and local settings and operational state. Failure diagnostics may contain server domains, paths and status codes in the local extension console; they are not automatically sent to the developer.

Local protection

Vault records, WebDAV credentials and pending changes are stored encrypted in Chrome on your device. The local vault uses AES-256-GCM with a key derived through PBKDF2-HMAC-SHA256 with 600,000 iterations. Keys and necessary plaintext exist in restricted extension session storage and memory while unlocked and are cleared on locking. Some interface preferences and scheduling metadata are outside the encrypted vault. Locking does not delete the encrypted vault.

Your master password is not sent to the developer. Keep it and your backups safe: the developer has no vault decryption key and cannot recover a forgotten master password.

Websites, WebDAV and exports

When you explicitly fill an account, the matching website receives the selected credentials and can process them under its own policy. The extension does not submit login forms automatically. It may temporarily hold a credential candidate after a form submission and asks before saving it to the vault. Current website and field information are processed locally, without a history permission or browsing-history upload.

WebDAV is optional. If configured and used, manually or on a schedule, authentication and backups are transmitted to your selected server. Its provider may also receive connection IP addresses, timing and paths and keep its own logs. You choose the provider and storage location; the developer does not operate a default cloud vault for this extension.

Use HTTPS. The current extension also accepts HTTP, which does not encrypt transmission. Export/backup protection depends on the format and settings: ordinary JSON/ZIP backups may be plaintext; legacy field-encrypted ZIP backups can expose metadata including names, usernames and manifests. They are not whole-file encrypted archives. You are responsible for exported files. Mobile integration exchanges snapshots that must be restored in the app; it is not real-time sync after signing in.

Clipboard and permissions

Sensitive copying defaults to a 60-second cleanup delay, configurable or disableable. A local digest of the copied value is retained; at expiry, the current clipboard text is read and cleared only if it still matches. No clipboard history is recorded or transmitted. Browser shutdown or system conditions can affect timing.

Storage holds the local vault/settings/session; sidePanel displays the vault; alarms schedule locking, backup exchange and cleanup; contextMenus provides explicit filling; offscreen and clipboardRead/clipboardWrite keep copy and cleanup working after the visible UI closes. HTTP/HTTPS site access supports forms on user-selected sites and connections to user-selected WebDAV servers.

Sharing and Limited Use

The developer does not receive vault contents, master passwords, website forms or clipboard data through the extension. It has no advertising, behavioral analytics or remotely executed code. Recipients are the websites you explicitly fill, your configured WebDAV service, and the support mailbox when you choose to contact us.

Jimi Password's use of user data obtained through Chrome APIs and extension permissions complies with the Chrome Web Store User Data Policy, including Limited Use requirements. Data is used only for the disclosed password-management features, never sold or used for personalized advertising, creditworthiness, lending decisions or unrelated purposes.

Support messages are used to address your request. Do not send real credentials or full backups. We process only the support content you choose to provide and respond to lawful requests as required by applicable law.

Retention and control

You can edit, export and delete records. Deleted accounts may remain in trash until permanently deleted or removed under an enabled retention rule. Pre-restore copies, exports and remote backups are separate copies and are not automatically deleted when a local record is removed. Manage those copies at their respective locations.

Uninstalling the extension or clearing its storage removes local extension data; preserve any needed backups first. You can restrict site access or disable the extension in Chrome, and adjust locking, clipboard and backup settings inside the extension. Disabling it does not delete existing copies.

Updates and contact

We update this page when functionality or handling changes and provide notices in the store listing or extension as applicable, obtaining additional authorization when required.

Operator: 重庆恩祖科技有限公司 (Chongqing Enzu Technology Co., Ltd.)
Privacy and support: looptry@163.com