Local monitoring stays local.本机监测，数据留在本机。

1. Scope and product identity1. 适用范围与产品身份

Lynncat Pilot (Chinese name: 林猫驾驶舱) is an independent macOS utility designed for people who use Codex on Mac. It is not affiliated with or endorsed by OpenAI.林猫驾驶舱（英文名 Lynncat Pilot）是一款面向 Mac 上 Codex 用户的独立 macOS 工具，与 OpenAI 无隶属或背书关系。

Core monitoring works without an online account. The online account described below is optional and is used only for community and game features.核心监测功能无需在线账户。下文所述在线账户为可选功能，仅用于用户交流与游戏。

The Mac App Store edition can use optional Sign in with Apple. The account-enabled Direct edition can use a Lynncat username and password linked to the same service account. The current website download may expose a smaller feature set until an updated Direct build is released.Mac App Store 版可以使用可选的 Apple 登录；带账户功能的 Direct 版可以使用绑定到同一服务账户的林猫用户名和密码。在新版 Direct 构建发布前，当前网站下载版可能只提供较少的功能。

2. Information processed locally on your Mac2. 在 Mac 本地处理的信息

The app reads operating-system information needed to display CPU load, memory use, battery level and power state, disk capacity, disk growth since launch, and live or cumulative disk read/write counters.应用会读取操作系统信息，用于显示 CPU 负载、内存使用、电池电量与供电状态、硬盘容量、启动后硬盘增长，以及实时或累计硬盘读写计数。

The cache feature estimates recognized user cache locations, cache growth, cache totals, and cache paths. This information remains on your Mac. Cleanup requires a deliberate user action and confirmation; the app is not designed to delete unrelated documents.缓存功能会估算识别到的用户缓存目录、缓存增长、缓存总量与缓存路径。这些信息保留在你的 Mac 上。清理需要用户主动操作并确认，应用不会以删除无关文档为设计目标。

Lynncat Pilot does not upload system metrics, disk counters, cache paths, or cache scan results to the optional account service.林猫驾驶舱不会把系统指标、硬盘计数器、缓存路径或缓存扫描结果上传到可选账户服务。

3. Codex log authorization and quota visibility3. Codex 日志授权与额度显示

To display quota-related signals, you may authorize a local Codex folder such as ~/.codex or ~/.codex/sessions. The app stores a macOS security-scoped bookmark locally so it can return to the folder you selected.为了显示额度相关信号，你可以授权 ~/.codex 或 ~/.codex/sessions 等本地 Codex 目录。应用会在本地保存 macOS 安全作用域书签，以便再次访问你选择的目录。

Authorized log contents are parsed on your Mac and are not uploaded to Lynncat Pilot's account service. Quota visibility depends on compatible events written by the installed Codex version. If a value is not present, the app shows it as unavailable rather than creating an estimate.授权日志的内容在你的 Mac 上解析，不会上传到林猫驾驶舱账户服务。额度显示取决于当前 Codex 版本写入的兼容事件；若某项数据不存在，应用会显示不可用，而不会虚构估算值。

4. Optional account and login methods4. 可选账户与登录方式

If you choose Sign in with Apple, the service processes a protected Apple account identifier, encrypted Apple refresh credential, app installation identifier, device and session records, nickname, points balance, active-minute records, and your preference to appear on the public leaderboard.如果你选择使用 Apple 登录，服务会处理受保护的 Apple 账户标识、加密的 Apple 刷新凭证、应用安装标识、设备与会话记录、昵称、积分余额、活跃分钟记录，以及是否出现在公开排行榜的设置。

If you use Lynncat login in the account-enabled Direct edition, the service processes a normalized protected username identifier, salted password hash, login-attempt security records, and the same account and session records. Plain-text passwords are not stored.如果你在带账户功能的 Direct 版中使用林猫账号登录，服务会处理规范化并受保护的用户名标识、加盐密码哈希、登录尝试安全记录，以及相同的账户与会话记录。服务不会保存明文密码。

Lynncat Pilot does not request your Apple ID password, contacts, phone number, precise location, payment-card details, or advertising identifier.林猫驾驶舱不会请求你的 Apple ID 密码、通讯录、电话号码、精确位置、支付卡信息或广告标识符。

5. Community content and moderation5. 用户交流内容与管理

If you publish a community message, your chosen nickname, message text, relative posting time, and public-profile preference may be visible to other users. Reports you submit, moderation decisions, cooldown information, and anti-abuse identifiers are processed to operate and protect the community.如果你发布交流内容，你选择的昵称、留言文字、相对发布时间与公开资料设置可能会被其他用户看到。你提交的举报、内容管理决定、发布冷却信息与防滥用标识会被处理，用于运营和保护社区。

Blocked-author choices are stored locally for your own view. Do not post confidential information, personal data belonging to others, or content you do not want to be public.屏蔽作者的选择保存在本机，仅影响你自己的显示。请勿发布机密信息、他人的个人数据或任何你不希望公开的内容。

6. Points and games by edition6. 各版本的积分与游戏

Points and active minutes积分与活跃分钟

While an authenticated app window is active, periodic account heartbeats may record an eligible natural minute and award participation points. Message posting and game actions create point transaction records. Points are an in-app score only and cannot be purchased, transferred, redeemed, exchanged, or converted to cash.当已登录的应用窗口处于活跃状态时，周期性账户心跳可能记录符合条件的自然分钟并发放参与积分。发布留言和游戏操作会产生积分交易记录。积分仅为应用内分数，不能购买、转让、兑现、交换或兑换现金。

Texas Hold'em — Direct edition only德州扑克牌桌——仅限 Direct 版

This feature is not included in the Mac App Store binary. In the Direct edition, the service stores an opaque hand ID, requested and applied point change, resulting balance, settlement date, and idempotency information. These records prevent duplicate settlement, keep balances non-negative, and enforce a daily win limit of 7,500 points. Card faces and in-game decisions are not uploaded.此功能不包含在 Mac App Store 二进制中。在 Direct 版中，服务会保存不透明的牌局 ID、请求与实际积分变化、结算后余额、结算日期和幂等信息。这些记录用于防止重复结算、确保余额不低于零，并执行每天最多赢得 7,500 积分的限制。牌面和游戏操作不会上传。

Water Margin 108 collection水浒 108 将卡册

The service stores draw request IDs, selected card IDs, point costs, resulting balances, draw dates, whether a card was new, copy counts, first and latest draw times, and completion-reward status. This supports the 10-draw daily limit, equal 1-in-108 selection, duplicate counts, and the one-time 1,000,000-point completion reward.服务会保存抽卡请求 ID、抽中的卡片 ID、积分消耗、抽卡后余额、抽卡日期、是否为新卡、重复数量、首次与最近抽取时间，以及集齐奖励状态。这些信息用于执行每日 10 次限制、1/108 等概率抽取、重复卡计数与一次性 1,000,000 积分集齐奖励。

7. Retention, sign-out, and account deletion7. 数据保留、退出登录与账户删除

Account, session, points, active-minute, leaderboard, community, moderation, poker settlement, card draw, collection, and reward records are retained while your optional account remains active, subject to operational and legal requirements. Signing out revokes the current session but does not delete your balance or account history.在可选账户保持启用期间，账户、会话、积分、活跃分钟、排行榜、用户交流、内容管理、牌局结算、抽卡、卡册与奖励记录会依据运营和法律要求保留。退出登录会撤销当前会话，但不会删除积分余额或账户历史。

Use the in-app account deletion control to request deletion. The service first attempts to revoke the Apple credential and then removes account-linked records. If Apple or the service is temporarily unavailable, deletion may fail safely and ask you to retry.你可以使用应用内的账户删除功能提出删除请求。服务会先尝试撤销 Apple 凭证，再删除账户关联记录。如果 Apple 或服务暂时不可用，删除可能会安全失败并提示稍后重试。

8. Service providers, security, and tracking8. 服务提供商、安全与追踪

Apple provides authentication when you choose Sign in with Apple. Lynncat Pilot's website and optional account features use Cloudflare infrastructure for hosting, serverless processing, database storage, and service protection. These providers process data under their own applicable terms and privacy commitments.当你选择 Apple 登录时，Apple 提供身份验证。林猫驾驶舱的网站与可选账户功能使用 Cloudflare 基础设施进行托管、无服务器处理、数据库存储与服务保护。这些提供商会依据其适用条款与隐私承诺处理数据。

• No third-party advertising SDK is included.不包含第三方广告 SDK。
• No cross-app advertising profile is created.不建立跨应用广告画像。
• Personal information is not sold.不出售个人信息。
• Session tokens and Apple refresh credentials are protected and are not displayed as public profile data.会话令牌与 Apple 刷新凭证受到保护，不会作为公开资料展示。

9. Your choices and controls9. 你的选择与控制

• Use all core monitoring features without signing in.无需登录即可使用全部核心监测功能。
• Choose whether to authorize a Codex folder and revoke macOS file access through system controls.自主选择是否授权 Codex 目录，并可通过 macOS 系统控制撤销文件访问。
• Choose whether your nickname and points appear on the public leaderboard.自主选择昵称与积分是否出现在公开排行榜。
• Report community content, block authors locally, sign out, or request account deletion.可举报交流内容、在本机屏蔽作者、退出登录或请求删除账户。

10. Contact and policy changes10. 联系方式与政策更新

For privacy questions or account-deletion assistance, contact amwpessy@gmail.com. If app behavior or data practices materially change, this page will be updated with a revised date.如有隐私问题或需要账户删除协助，请联系 amwpessy@gmail.com。如果应用行为或数据处理方式发生重大变化，本页面将更新并标注新的日期。