隐私政策 — 邮箱留痕
最后更新：2026 年 7 月 15 日
概述
邮箱留痕（MailTrace）是一款本地化的照片时间水印与邮件记录工具。我们高度重视您的隐私。
本应用不会将您的照片或个人数据上传到 MailTrace 运营的服务器；仅在设备本地保存必要设置和历史记录元数据。当您主动发送邮件或导出时，iOS 会将相关图片、收件信息交给您选择的邮件或分享服务处理。
数据处理
- 照片处理：所有照片的水印添加和压缩均在您的设备本地完成。MailTrace 不会自动上传照片，也不会将照片上传到我们运营的服务器。
- 分享扩展：当您通过 iOS 分享面板将照片或截图分享到邮箱留痕时，图片会临时保存在本地 App Group 容器中。处理完成或取消后会清理对应文件；超过 24 小时的未完成导入会在 App 或分享扩展下次运行时自动清理。
- 邮件发送与导出：系统邮件可用时通过 iOS 系统邮件客户端发送；系统邮件不可用时，可通过 iOS 分享面板导出到其他应用。您主动发送或导出后，水印图片及相关收件信息将由所选服务按照其隐私政策处理。MailTrace 不接触、不存储您的邮箱密码。
- 邮箱地址：您设置的收件邮箱保存在设备本地（UserDefaults）。仅当您主动新建邮件时，收件地址会交给 iOS 系统邮件客户端；如改用其他分享服务，其后续处理受该服务规则约束。
- 水印设置：自定义水印文字仅保存在设备本地。
- 历史记录：应用会在设备本地保存记录元数据，例如时间、时区、留痕编号、邮件主题、备注、收件人、图片数量和状态。历史记录不保存原始照片，可在 App 内删除或清空。
权限使用
- 相机：仅用于拍摄照片，照片处理完全在本地进行。
- 照片库：通过系统选择器访问，应用无法浏览您的完整相册。
第三方服务
本应用不集成任何第三方分析、广告或追踪 SDK。系统邮件客户端及您主动选择的第三方分享应用属于外部服务，其数据处理受各自隐私政策约束。
数据存储
应用仅在设备本地存储以下设置和历史元数据：
- 收件邮箱地址（最多 3 个）
- 水印后缀文字
- 历史记录元数据（时间、时区、留痕编号、主题、备注、收件人、图片数量、状态）
- 通过分享扩展导入、等待处理的临时图片（处理或取消后清理；过期文件在下次运行时清理）
卸载应用后，以上数据将被完全删除。
儿童隐私
本应用不针对 13 岁以下儿童，不主动收集任何人的个人信息。
Privacy Policy — MailTrace
Last updated: July 15, 2026
Overview
MailTrace is a local photo timestamp watermarking and email record tool. We take your privacy seriously.
This app does not upload your photos or personal data to a server operated by MailTrace. It stores only necessary settings and history metadata locally. When you choose to send or export, iOS passes the relevant images and recipient information to the mail or sharing service you select.
Data Processing
- Photo processing: All watermarking and compression happens on your device. MailTrace does not automatically upload photos or send them to a server operated by us.
- Share Extension: Images shared to MailTrace are temporarily stored in the local App Group container. Files are removed after processing or cancellation. Unfinished imports older than 24 hours are removed the next time the app or Share Extension runs.
- Email sending and export: When system Mail is available, emails are sent through the iOS system mail client. Otherwise, you can export through the iOS share sheet. After you choose Send or Export, the stamped images and relevant recipient information are processed by the selected service under its privacy policy. MailTrace never accesses or stores your email password.
- Email addresses: Configured recipient addresses are stored locally in UserDefaults. When you create an email, iOS passes those addresses to the system mail client. Any service selected through the share sheet handles subsequent data under its own terms.
- Watermark settings: Custom watermark text is stored only on your device.
- History: The app stores local record metadata such as time, time zone, trace ID, email subject, note, recipients, image count, and status. History does not store original photos and can be deleted or cleared in the app.
Permissions
- Camera: Used solely for taking photos. All processing occurs locally.
- Photo Library: Accessed via the system photo picker. The app cannot browse your full photo library.
Third-Party Services
This app does not integrate any third-party analytics, advertising, or tracking SDKs. The system mail client and third-party sharing apps you deliberately select are external services governed by their own privacy policies.
Data Storage
The app stores only the following settings and history metadata locally on your device:
- Recipient email addresses (up to 3)
- Watermark suffix text
- History metadata (time, time zone, trace ID, subject, note, recipients, image count, and status)
- Temporary images awaiting processing after Share Extension import (removed after processing or cancellation; stale files are removed on a later launch)
All data is completely removed when the app is uninstalled.
Children's Privacy
This app is not directed at children under 13 and does not knowingly collect personal information from anyone.