Privacy Policy
导读 Primer (daodu.org) · Effective October 19, 2026 · Contact: daodu-support@googlegroups.com
导读 Primer (“Primer”, “we”) is a free reading website at https://daodu.org. For each subject it lists the books most worth reading and offers a guide to each book (core ideas, objections, where to start), highlights and questions, a short quiz and a personal reading map. Everything can be read without an account; an account (Sign in with Google, or a one-time code sent by email) only saves the reader's own highlights, questions, quiz results and reading progress. This policy explains what data we collect, including Google user data, how we use, share, protect, retain and delete it, and the choices you have.
1. Google user data we access
When you choose “Sign in with Google”, Primer requests only the following scopes and receives only the following data:
| Scope | Data received | Stored? |
|---|---|---|
| openid | Your Google account ID (a stable identifier) | Yes, to recognize your account |
| Your email address | Yes, to identify your account and to reply to messages you send us | |
| profile | Your name (and the profile picture URL, which we do not use) | Name only, shown as your nickname (you can change it); the picture is not stored |
We do not request access to Gmail, Google Drive, Contacts, Calendar or any other Google service, and we never see your Google password.
2. Other data we collect
- Email sign-in: your email address. A one-time code is emailed to you; only a hash of the code is stored, and it expires after 10 minutes.
- What you create on the site: highlights, questions and answers, votes, quiz results, your shelf and reading progress. Highlights, questions, answers and votes are shown to other readers with your nickname; your shelf, quiz results and reading records are visible only to you.
- Imports you start: if you import from Douban, the Douban ID you enter (we read your public “read” list); if you import from WeChat Reading, the personal API key you paste. If you tick “keep syncing” (on by default), we store the Douban ID and the WeChat Reading key encrypted (AES-256-GCM, with a key kept only on our server) and use them only to refresh your read books and shelf when you visit, at most every few hours; otherwise they are used once and not stored. You can change or delete them at any time under “阅读记录同步” in the account menu, and deleting your account deletes them. We keep only the titles and dates of books that match our lists and that you confirm.
- WeChat Reading, when you link it: with your key (stored encrypted, as above) we read — never write; WeChat Reading's interface for this is read-only — how far you are in books on our lists, your highlights and notes for the book whose guide you open, the books WeChat Reading recommends to you, and the titles your friends there are reading (only the titles and how many friends; not who). Progress and the matched titles are kept with your account and shown only to you. Your highlights and notes are fetched when you open a guide and are not stored; to show which core idea each belongs to, they are sent once to our AI provider (Anthropic), and only that matching is kept. Delete the link under “阅读记录同步” and the key is deleted at once.
- AI reading portrait: when you are signed in, the titles of books on your shelf and books you have read are sent to our AI provider (Anthropic) to write a short summary of your reading and recommend books from our subject lists, and titles outside our lists are sorted into subjects for your reading map (only the title and author are sent; the subject found for a title is kept without any link to you). The result is stored with your account; nothing else about you is sent.
- Sign-in cookie: one cookie holding a random token to keep you signed in. No advertising or cross-site tracking cookies.
- Logs and statistics: our server and Cloudflare record access times and IP addresses for security; our own visit statistics record the page, time, referring site and country, with visitors told apart by a code that changes daily (the IP address itself is not stored). No third-party analytics or advertising tools are used.
3. How we use Google user data
We use your Google account ID, email address and name only to:
- create your Primer account and sign you in;
- show your nickname next to the highlights, questions and votes you post;
- reply to messages you send us and, if you ask, find your account to export or delete it.
We do not use Google user data for anything else. In particular, we do not: use it for advertising of any kind (including targeted, personalized, retargeted or interest-based ads); sell it or give it to data brokers or information resellers; use it to determine credit-worthiness or for lending; build databases or profiles from it; or use it to develop, improve or train generalized or non-personalized AI or machine-learning models. We do not send it to AI providers.
4. Sharing, transfer and disclosure
We do not sell, rent or share Google user data with anyone, except:
- Service providers that run the site for us: Cloudflare (network delivery and security) carries the encrypted traffic between your browser and our server. Email sign-in codes are sent through Resend, which receives only your email address and the code.
- AI features: when you use AI features (generating a guide, expanding an idea, asking a question), the text of your request and the related guide text are sent to Anthropic to produce the answer. Your Google account ID, email address and name are not sent.
- Legal requirements: if required by law, or to protect the safety of users or the service.
5. How we protect your data
- All traffic uses HTTPS (TLS encryption in transit).
- The sign-in cookie holds a random token; the server stores only a SHA-256 hash of it. Email codes are stored only as hashes and expire after 10 minutes.
- Data is stored in a database on Primer's own server, which is not publicly accessible; only the site operator can access it. Backups are kept on the same machine.
- We do not store Google passwords or OAuth access tokens after sign-in.
6. Retention and deletion
- Your account data (Google account ID, email, nickname) and what you create are kept while your account exists.
- Sign-in sessions expire after 90 days; email codes after 10 minutes; email-sending records after 1 day; daily visitor codes are not linkable across days.
- Deleting your data: email daodu-support@googlegroups.com from the address on your account and ask us to delete your account. Within 30 days we delete your Google account ID, email address, nickname and everything you posted, including from backups.
- You can also remove Primer's access at any time at myaccount.google.com/permissions (Google Account → Security → Third-party apps).
7. Limited Use disclosure
Primer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
8. Children
Primer is not directed to children under 13, and we do not knowingly collect their personal information.
9. Changes
If we change how Primer uses Google user data or this policy changes materially, we will update the effective date above and show a notice on the site before the change takes effect.
10. Service availability
Primer is offered in countries and regions outside mainland China. Please use it only where your local laws permit.
11. Contact
导读 Primer · https://daodu.org · daodu-support@googlegroups.com
隐私政策
导读 Primer（daodu.org）· 生效日期：2026 年 10 月 19 日 · 联系：daodu-support@googlegroups.com
导读是一个免费的读书网站（https://daodu.org）：按学科列出最值得读的书，每本书有导读、划线提问、小测验和阅读地图。不登录也能看全部内容；登录（Google 账号或邮箱验证码）只用来保存你自己的划线、提问、考试结果和阅读进度。本政策说明我们收集哪些数据（包括 Google 用户数据）、怎么使用、与谁共享、怎么保护、保存多久和怎么删除。
1. 我们获取的 Google 用户数据
你选择“用 Google 登录”时，导读只申请以下权限，只拿到以下数据：
| 权限 | 拿到的数据 | 是否保存 |
|---|---|---|
| openid | Google 账号的唯一编号 | 保存，用来识别你的账号 |
| 邮箱地址 | 保存，用来识别账号和回复你的来信 | |
| profile | 名字（以及头像链接，我们不使用） | 只保存名字，作为昵称显示（可以修改）；不保存头像 |
我们不申请访问 Gmail、云端硬盘、通讯录、日历或任何其他 Google 服务，也拿不到你的 Google 密码。
2. 我们收集的其他数据
- 邮箱验证码登录：你的邮箱地址。验证码发到你的邮箱，服务器只保存它的摘要，10 分钟后失效。
- 你在网站上产生的内容：划线、提问和回答、投票、考试结果、书架和阅读进度。划线、问答和投票会和你的昵称一起对其他读者公开；书架、考试结果和阅读记录只有你自己能看到。
- 你主动发起的导入：从豆瓣导入时，你填写的豆瓣 ID（读取公开的“读过”列表）；从微信读书导入时，你粘贴的个人 API Key。如果勾选“以后自动同步”（默认勾选），我们会把豆瓣 ID 和微信读书 Key 加密保存（AES-256-GCM，密钥只存在我们的服务器上），只用来在你访问时更新读过的书和书架，每隔几小时最多一次；不勾选则只用这一次、不保存。你可以随时在头像菜单的“阅读记录同步”里修改或删除，注销账号时也会一并删除。我们只保留与书单匹配、并经你确认的书名和日期。
- 绑定微信读书后：我们用你的 Key（如上所述加密保存）只读、不写——微信读书为此开放的接口本身就是只读的。读取的内容包括：书单里的书你读到了哪里；你打开某本书的导读时，你在这本书里的划线和想法；微信读书给你的推荐；你的微信读书好友在读的书名（只记书名和人数，不记是谁）。阅读进度和匹配到的书名保存在你的账号下，只有你自己能看到。划线和想法在打开导读时现读，不保存；为了显示每条划线对应哪个核心观点，会把它们发给我们的 AI 服务商（Anthropic）处理一次，只保存对应关系。在“阅读记录同步”里删除绑定，Key 会立即删除。
- AI 阅读画像：登录后，你书架上和读完的书名会发送给我们的 AI 服务商（Anthropic），用来写一段阅读风格总结、从学科书单里推荐书，并把书单以外的书归到学科里显示在阅读地图上（只发送书名和作者；归类结果只按书名保存，不关联到你）。结果保存在你的账号下；不会发送你的其他信息。
- 登录 Cookie：一个只保存随机令牌、用于保持登录的 Cookie。不使用广告 Cookie，不做跨网站追踪。
- 日志和统计：服务器和 Cloudflare 会记录访问时间和 IP 地址，用于安全防护；我们自己的访问统计记录页面、时间、来源网站和国家或地区，访客用每天更换的代码区分（不保存 IP 本身）。不使用任何第三方统计或广告工具。
3. 我们怎样使用 Google 用户数据
Google 账号编号、邮箱和名字只用于：创建你的导读账号并让你登录；在你发布的划线、提问和投票旁显示昵称；回复你的来信，以及应你的要求导出或删除账号。
除此之外不作任何用途。特别是，我们不会：把它用于任何形式的广告（包括定向、个性化、再营销或基于兴趣的广告）；把它出售或提供给数据经纪商或信息转售商；用于评估信用或放贷；用它建立数据库或用户画像；用它开发、改进或训练通用（非个性化）的 AI 或机器学习模型。我们也不会把它发给 AI 服务商。
4. 共享、转移和披露
- 为我们提供服务的服务商：Cloudflare 负责网络传输和安全防护，传输的是加密流量；邮箱验证码通过 Resend 发送，它只拿到你的邮箱和验证码。
- AI 功能：你使用 AI 功能（生成导读、展开、提问）时，你的问题和相关导读内容会发给 Anthropic 生成回答，不会附带你的 Google 账号编号、邮箱或名字。
- 法律要求：法律要求时，或为保护用户和服务的安全。
除上述情况外，我们不出售、出租或共享 Google 用户数据。
5. 数据保护
- 网站全程使用 HTTPS（传输加密）。
- 登录 Cookie 只保存随机令牌，服务器只存它的 SHA-256 摘要；邮箱验证码只存摘要，10 分钟失效。
- 数据存放在导读自己的服务器的数据库里，不对外开放，只有网站运营者能访问；备份保存在同一台机器上。
- 登录完成后不保存 Google 密码或 OAuth 访问令牌。
6. 保存和删除
- 账号数据（Google 账号编号、邮箱、昵称）和你产生的内容，在账号存在期间保存。
- 登录状态 90 天后失效；邮箱验证码 10 分钟失效；发信记录保留 1 天；每日访客代码不能跨天关联。
- 删除数据：用账号对应的邮箱发信到 daodu-support@googlegroups.com 申请删除账号，我们会在 30 天内删除你的 Google 账号编号、邮箱、昵称和你发布的全部内容，备份中的也一并删除。
- 你也可以随时在 myaccount.google.com/permissions（Google 账号 → 安全 → 第三方应用）取消导读的授权。
7. 有限使用声明
导读对从 Google API 获得的信息的使用以及向其他应用的转移，遵守 Google API 服务用户数据政策，包括其中的“有限使用”要求。
8. 未成年人
导读不面向 13 岁以下的儿童，我们不会有意收集他们的个人信息。
9. 政策变更
如果我们改变 Google 用户数据的使用方式，或本政策有重要变化，会更新上面的生效日期，并在变更生效前在网站上提示。
10. 服务地区
导读面向中国大陆以外的国家和地区提供服务，请在你所在地法律允许的范围内使用。
11. 联系我们
导读 Primer · https://daodu.org · daodu-support@googlegroups.com