Skip to content

PRIVACY.md

Latest commit

 

History

History
65 lines (41 loc) · 3.18 KB

PRIVACY.md

File metadata and controls

65 lines (41 loc) · 3.18 KB
Raw

隐私与安全

FlowScope 是纯本机软件，不主动访问互联网、不上传遥测、不运行远程分析，也不开放 TCP 或 Named Pipe 监听端点。

默认保存

  • 稳定应用身份、显示元数据和首次/最后发现时间。
  • CPU、内存、磁盘 IO、上传/下载字节数的聚合桶。
  • 用户创建的告警规则与本地告警事件。

默认不采集或不保存

  • 网络包、HTTP/HTTPS 正文、聊天、密码、Cookie、文件内容。
  • 浏览器历史和进程完整命令行。
  • 远程 IP、域名和当前连接历史（当前连接仅在内存）。
  • 云端账户、遥测或崩溃自动上传。

权限模型

  • FlowScope.exe manifest 为 requireAdministrator，使同一进程可以读取应用级 ETW。
  • 配置与数据库目录 DACL 只允许 LocalSystem 和 Administrators；日志与临时导出允许交互用户读取。
  • Wails UI 只调用进程内固定控制方法；不存在独立 Agent、服务或 IPC 客户端。
  • 清空历史需要 UI 二次确认和 Go 侧精确确认串。

网络配置保证

FlowScope 没有修改代理、DNS、路由、网卡、VPN 或防火墙的代码路径。验证工具默认只绑定 127.0.0.1/::1，不会修改本机网络配置。

诊断脱敏

诊断只包含版本、运行时长、资源、队列计数、collector 状态、数据库体积/schema 和耗时，不包含远程 IP、域名、完整命令行、网络正文或用户文件内容。

Privacy and Security

FlowScope is entirely local software. It does not initiate Internet access, upload telemetry, run remote analysis, or expose a TCP or named-pipe listening endpoint.

Stored by Default

  • Stable application identity, display metadata, and first/last discovery timestamps.
  • Aggregated buckets for CPU, memory, disk I/O, and uploaded/downloaded bytes.
  • User-created alert rules and local alert events.

Not Collected or Stored by Default

  • Network packets, HTTP/HTTPS payloads, chats, passwords, cookies, or file contents.
  • Browser history or complete process command lines.
  • Remote IP addresses, domains, or current-connection history; current connections remain in memory only.
  • Cloud accounts, telemetry, or automatic crash uploads.

Permission Model

  • The FlowScope.exe manifest uses requireAdministrator so the same process can read application-level ETW.
  • Configuration and database directory DACLs allow only LocalSystem and Administrators; sanitized rotating logs and temporary exports remain readable by the interactive user.
  • The Wails UI calls a fixed in-process control surface. There is no independent Agent, service, or IPC client.
  • Clearing history requires both UI confirmation and an exact Go-side confirmation string.

Network-configuration Guarantee

FlowScope contains no code path that changes proxy, DNS, routing, adapters, VPNs, or firewall configuration. Validation tools bind only to 127.0.0.1 and ::1 by default and do not modify local network settings.

Diagnostic Redaction

Diagnostics contain version, uptime, resources, queue counters, collector status, database size/schema, and timings. They exclude remote IPs, domains, full command lines, network payloads, and user-file contents.