隐私政策
更新于 2026 年 11 月 8 日
本隐私政策说明 FilmAnalysis 在提供照片分析、账户管理及相关服务时，如何收集、使用、存储和保护用户信息。本页按网站当前的实际做法写成，功能变化时会同步更新。
我们收集和处理哪些信息
账号
分析照片需要登录。注册只需要一个昵称和一个密码，不需要手机号；邮箱可填可不填，只用来验证地址和重置忘记的密码，不会展示给任何人。密码以 Argon2id 加盐哈希保存（更早的 scrypt 哈希会在下次登录时自动升级），服务器从不保存明文，也不会记录或发送你的密码；新密码会与一份常见密码名单比对，并通过 Have I Been Pwned 的匿名范围查询（只发送密码 SHA-1 的前五位）检查是否出现在已知泄露中。登录后，浏览器保存一个会话令牌，服务器只保存令牌的哈希，会话 90 天有效（2026 年 11 月 10 日前创建的会话为 180 天），退出登录、修改或重置密码都会使会话失效。邮箱验证和密码重置链接中的令牌只保存哈希，一次有效，分别在 24 小时和 30 分钟后过期。
你上传的照片
- 只有你按下「分析」时，照片才会上传。
- 服务器在内存中把照片转正、缩小到长边最多 2048 像素，并去掉全部元数据（EXIF、位置、拍摄时间、相机序列号）。原图不写入磁盘。
- 为了让你不必重新上传就能生成卡片或切换语言，这份缩小的副本在服务器内存里最多保留 30 分钟，服务重启即清空。
- 分析记录会保存一张长边 320 像素的缩略图、照片文件的哈希值、文件名、分析文字和所用的匹配库范围，用于不重复分析同一张照片、生成分享卡片和评估分析质量。
- 只有在你给分析打分并勾选同意时，照片才会以加密形式保存，用于改进 FilmAnalysis。保存的是长边不超过 1600 像素、没有元数据的副本，总量有上限。该选项默认不勾选。
评分、标签和徽章
你给分析打的分数、写的文字、选的照片标签，以及可选的拍摄与后期回答，会与账号一起保存。打分时，原始文件里非识别性的拍摄参数（相机型号、镜头、曝光参数、拍摄时段、后期软件类别）也会记录；位置、日期和序列号从不读取。这些信息只用于评估和改进分析，不会发给第三方服务。打分时，服务器还会在本地检测画面里有没有人脸，只用来判断「人像」「合影」徽章；不识别是谁，不计算或保存任何人脸特征，只保留徽章结果。徽章和收藏进度属于账号。
浏览器标识
第一次打开网站时，浏览器会生成一串随机 ID，保存在你自己的浏览器里。它用于在登录前记住这台设备上的操作，并在你登录时把这些记录并入账号。它不包含任何个人信息。
用量、限额和统计
- 每次调用分析服务都会记录时间、所用模型、token 数、估算费用、耗时和是否成功，用于控制成本和执行每日限额。记录中没有照片、提示词或模型回答；你的账号只以加密哈希出现。
- 免费方案的每日额度由同一网络下的用户共享。为此，网络地址（IPv4 地址，IPv6 取前 64 位）以每天更换的哈希形式记录，原始地址不保存。
- 产品统计只记录事件名和时间（例如「访问」「完成分析」「生成卡片」「分享网站」），加上一个每月更换的 ID 哈希，用来统计每天和每月的使用人数，不能跨月追踪同一个人。搜索引擎等爬虫不计入。这些记录保存 400 天。
- 价格页上的「我有兴趣」和「加入交流群」只记录次数：一个由账号 ID 或浏览器 ID 算出的、无法还原的哈希，以及点击时间。FilmAnalysis 目前不处理任何付款，也不收集支付信息。
- 服务器运行日志包含请求的技术信息（路径、状态码、耗时等），按大小轮换，总量约 20 MB。
内部测试账号
站长的内部测试账号用于检查功能。它的分析结果只放在服务器内存中的临时数据库里，两小时后清理，重启即消失，不进入正式数据库和备份；它的评分和统计事件都不保存；徽章和收藏进度会保存在账号里，以便功能检查不因重启而中断。
照片分析在哪里完成
自 2026 年 11 月 10 日起，照片分析全部在 FilmAnalysis 自己的服务器上完成：摄影师风格匹配用测量得到的画面特征，胶片风格匹配用本地的 LUT 风格引擎，胶片感评分是本地计算的测量估计。你的照片不会发送给任何第三方 AI 服务，也没有第三方模型会看到它。
FilmAnalysis 不会把你的照片或个人信息提供给任何第三方，也不会出售它们。
Cookie 和本地存储
FilmAnalysis 不设置 Cookie。网站在你的浏览器本地存储里保存这几项：随机浏览器 ID、登录令牌（如果登录）、语言和深浅色选择，以及一个标记「本次访问已计数」的会话值。清除网站数据就会删除它们。
网站没有广告，也没有任何第三方统计或广告脚本。如果将来加入广告，会先更新本页，并在法律要求的地区征得你的同意。
保存多久
| 数据 | 保存期限 |
|---|
| 上传的原图 | 不保存 |
| 缩小后的照片副本（内存） | 最多 30 分钟 |
| 分析记录、缩略图、评分、标签、徽章 | 直到你申请删除 |
| 你同意保存的照片 | 直到你申请删除 |
| 账号 | 直到你申请删除；登录会话 90 天（旧会话 180 天）；邮箱验证令牌 24 小时，密码重置令牌 30 分钟 |
| 产品统计事件 | 400 天 |
| 分析服务用量记录 | 作为费用记录长期保存，不含个人身份 |
| 数据库备份 | 每晚一份，保留最近 14 份 |
你的权利与删除请求
你可以要求查看、更正或删除与你账号相关的记录，也可以取回同意保存的照片。请通过下方的联系方式告诉我们，并写明账号昵称；为了确认请求来自账号本人，我们可能请你用该账号完成一个简单的验证。核实后，我们会在 30 天内完成删除，已有的备份会在 14 天内随轮换消失。没有登录时产生的记录只与你浏览器里的随机 ID 关联，FilmAnalysis 无法把它们归属到某个人。
联系我们
如有使用问题、意见反馈、账户或个人信息删除请求，可以通过小红书联系 FilmAnalysis 官方账号：@filmanalysis（小红书搜索：@filmanalysis）。
本政策的修改
本页随网站功能更新。重要变化会在页顶注明更新日期；涉及照片用途的变化会在生效前说明。
上传一张照片试试
Privacy Policy
Updated 8 November 2026
This policy explains how FilmAnalysis collects, uses, stores and protects your information when it analyses photographs, manages accounts and provides related services. It describes what the site does today and is updated when the site changes.
What we collect and process
Accounts
Analysing a photo requires signing in. Registration needs a nickname and a password, no phone number; an e-mail address is optional and is used only to verify the address and to reset a forgotten password, never shown to anyone. Passwords are stored as salted Argon2id hashes (older scrypt hashes are upgraded at the next sign-in), never in clear text, never logged or sent anywhere; a new password is compared with a list of common passwords and checked against known breaches through the Have I Been Pwned range API, which receives only the first five characters of the password's SHA-1 hash. After signing in, your browser keeps a session token; the server stores only its hash. Sessions last 90 days (sessions created before 10 November 2026: 180 days) and end when you sign out, change or reset your password. Verification and reset tokens are stored hashed, work once, and expire after 24 hours and 30 minutes.
The photos you upload
- A photo is uploaded only when you tap Analyse.
- In memory, the server corrects its orientation, reduces it to at most 2048 pixels on the long edge and removes all metadata (EXIF, location, capture time, camera serial number). The original is never written to disk.
- So that you need not upload again to make a card or switch language, this smaller copy stays in the server's memory for up to 30 minutes and is cleared on restart.
- The analysis record keeps a thumbnail of 320 pixels on the long edge, the hash of the file, its name, the analysis text and the matching library used, so the same photo is not analysed twice, cards can be made and quality can be reviewed.
- A photo is kept, encrypted, only when you rate the analysis and tick the consent box, to improve FilmAnalysis. What is kept is a copy of at most 1600 pixels on the long edge without metadata, within a fixed total budget. The box is unticked by default.
Ratings, tags and badges
Your rating, written notes, photo tags and the optional answers about capture and editing are stored with your account. When you rate, non-identifying shooting settings from the original file (camera model, lens, exposure, time of day, a category of editing software) are recorded too; location, date and serial numbers are never read. These are used only to evaluate and improve the analysis and are not sent to any third party. When you rate, the server also checks locally whether the photo contains faces, only for the Portrait and Group Photo badges; it never identifies anyone and never computes or stores facial features, only the badge result. Badges and collection progress belong to the account.
Browser identifier
On your first visit the browser generates a random id and stores it on your device. It remembers what this device did before you signed in and moves those records into your account when you do. It contains no personal information.
Usage, limits and statistics
- Every call to the analysis service records the time, the model, token counts, an estimated cost, the duration and whether it succeeded, to control costs and enforce daily limits. The record holds no photo, prompt or model answer; your account appears only as a keyed hash.
- The free plan's daily allowance is shared by everyone on one network. For this, the network address (the IPv4 address, or the first 64 bits of an IPv6 address) is recorded as a hash that changes every day; the raw address is not stored.
- Product statistics record only an event name and time (such as "visit", "analysis completed", "card made" or "site shared") with a hash of your id that changes every month, enough to count people per day and per month, not to follow anyone across months. Search-engine crawlers are not counted. These records are kept for 400 days.
- "I'm interested" and "Join the community" on the pricing page record counts only: a hash derived from the account or browser id that cannot be reversed, and the time. FilmAnalysis processes no payments and collects no payment details.
- Server logs hold technical request information (path, status, duration) and are rotated at about 20 MB in total.
The internal test account
The operator's test account exists to check that the site works. Its analyses live only in a temporary database in the server's memory, cleared after two hours and gone at every restart, never in the main database or its backups; its ratings and statistics events are not stored; its badges and collection progress are kept with the account so that checks survive restarts.
Where photos are analysed
Since 10 November 2026 every analysis runs on FilmAnalysis's own server: photographer matching from measured image features, film-style matching with the local LUT-derived style engine, and the Film Look Score as a locally computed measured estimate. Your photo is not sent to any third-party AI service and no third-party model sees it.
FilmAnalysis gives your photos and personal information to no third party and never sells them.
Cookies and local storage
FilmAnalysis sets no cookies. The site keeps a few items in your browser's local storage: the random browser id, the session token when you are signed in, your language and theme choices, and a flag that this visit has been counted. Clearing site data removes them.
There is no advertising and no third-party analytics or advertising script. If advertising is ever added, this page will be updated first and consent asked for where the law requires it.
How long data is kept
| Data | Retention |
|---|
| The uploaded original | Not kept |
| The smaller copy (in memory) | Up to 30 minutes |
| Analysis records, thumbnails, ratings, tags, badges | Until you ask for deletion |
| Photos you agreed to give | Until you ask for deletion |
| Accounts | Until you ask for deletion; sessions last 90 days (older sessions 180 days); e-mail verification tokens 24 hours, reset tokens 30 minutes |
| Product statistics events | 400 days |
| Analysis service usage records | Kept as cost records, with no personal identity |
| Database backups | One a night, the newest 14 kept |
Your rights and deletion requests
You can ask to see, correct or delete the records linked to your account, and take back a photo you agreed to give. Contact us as described below and include the account's nickname; to confirm the request comes from the account holder we may ask you to complete a simple check with that account. Once confirmed, deletion is completed within 30 days, and existing backups disappear within 14 days as they rotate. Records made without signing in are linked only to the random id in your browser, so FilmAnalysis cannot attribute them to a person.
Contact us
For questions, feedback, account issues, or personal data deletion requests, contact FilmAnalysis on Xiaohongshu: @filmanalysis (search for @filmanalysis in the Xiaohongshu app).
Changes to this policy
This page changes with the site. The date at the top marks the latest revision; any change to how photos are used is announced before it takes effect.
Try it with a photo
