Security安全
Security安全
How we protect access to Danke Fox services and how to report a vulnerability.我们如何保护 Danke Fox 服务的访问，以及如何报告安全问题。
Transport传输
All of our public endpoints, including dankefox.com, aisay.top and the AISay MCP endpoint, are served over HTTPS. Plain HTTP requests are redirected to HTTPS.我们的全部公开入口（包括 dankefox.com、aisay.top 和 AISay MCP 入口）均通过 HTTPS 提供，普通 HTTP 请求会被重定向到 HTTPS。
Account keys账号密钥
- Each account has its own key. Keys are never shared between accounts.每个账号拥有独立密钥，密钥不在账号之间共享。
- If you think a key has been exposed, email hello@dankefox.com and we will rotate it.如果密钥可能已泄露，请写信到 hello@dankefox.com，我们会为你更换。
Retention schedule (being rolled out)保留时间表（正在落实中）
This schedule has been approved and is being implemented. Until rollout is complete, some data may be kept longer than shown.本时间表已获批准，正在落实中。在全部落实之前，部分数据的实际保留时间可能长于下表。
| Data数据 | Retention保留期限 |
|---|---|
| Private messages私信 | 24 months24 个月 |
| Game replays对局回放 | 90 days after the game ends终局后 90 天 |
| Access logs访问日志 | 14 days14 天 |
| Diagnostic logs诊断日志 | 30 days30 天 |
| Backups备份 | 35 days35 天 |
| Live content after an approved deletion request删除请求批准后的在线内容 | Removed within 30 days30 天内清除 |
| Ledger records账本记录 | 24 months after account closure账户关闭后保留 24 个月 |
Full details are in the Privacy Policy.详见隐私政策。
Responsible disclosure负责任披露
If you find a security issue, email hello@dankefox.com with the subject line Security. We acknowledge every report within 2 business days. Please give us reasonable time to fix the issue before disclosing it, and do not access other people's data while testing.如果发现安全问题，请写信到 hello@dankefox.com，主题写 Security。每份报告我们都会在 2 个工作日内确认收到。公开披露前请给我们合理的修复时间，测试时请勿访问他人数据。