DRAFT — pending 行銷主管 and 資安團隊 review. Technical statements are 未查證 until verified against the production app code.
Splatnook (“the app”, “we”) is a 3D splat and USDZ viewer that works with Google Drive, served at viewer.formchime.com. Operator: 張瀚 (Han Chang), Taiwan — the same developer as FormChime. Contact: [email protected]. Effective date: [上線當天填入].
The English version prevails if the versions differ.
The app requests only the https://www.googleapis.com/auth/drive.file scope. We access only the ID, name, type, size and contents of files you open with the app from Google Drive via “Open with”, or that you select in the Google Picker (Google’s file picker) — only the files you select — and the annotation files the app creates. For these files we also read the file’s permission fields (whether you can edit, comment on or download it) and the app’s own properties; when you use “Open with”, Google also passes your Google account ID (a numeric user ID, not your email). We use this solely to display 3D content in your browser and to provide share links and annotations. The app cannot see or list other files in your Drive. We do not request your Google account email or contacts.
File contents are downloaded directly from Google to your browser and rendered locally. We do not upload, copy or store your files or Google user data on our servers, do not sell it, do not use it for advertising, and do not use it to train AI models.
The app’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
No person reads your Google user data unless you give explicit consent, it is needed for security purposes (such as investigating abuse), it is required by law, or the data is aggregated and anonymized. We do not transfer Google user data to third parties except as needed to provide or improve user-facing features, as required by law, or in a merger or acquisition with prior notice to you.
Annotations are saved in your own Google Drive as a companion JSON file created by the app. The model file’s app properties store only that JSON file’s ID and a version number. Adding or editing annotations requires edit access to the file. Share links contain only the Drive file ID. A recipient needs access to the file in their own Google Drive (the owner must share it with them) and will be asked to select it once with the Google file picker before it can be viewed. We store none of this on our servers. If you also share the annotation file with recipients, they can see your annotations. Annotations may contain personal information you type into them; they remain under your control in your Drive.
Payments are processed by Polar Software Inc. (polar.sh) acting as Merchant of Record, under its own privacy policy; data may be processed in the United States and other countries. We receive only your email, order ID and license key, used to provide the unlock and support. We never receive card details. Paid features are not available in all regions (currently not in Japan).
We do not retain your file contents or other Google user data. Access tokens live only in browser tab memory, expire within about an hour and are cleared when you close the tab. Purchase records (email, order ID, license key) are kept for 7 years, or longer if required by law, then deleted. Email [email protected] to request deletion of other data; we respond within 30 days.
We use no advertising or analytics cookies. Service providers: Cloudflare (hosting; keeps standard request logs such as IP address and browser type, for security and operations) and Polar (payments). The page loads Google Identity Services and Google Picker scripts from Google, which Google processes under its own privacy policy. The 3D rendering libraries (three.js and Spark) are hosted on our own site, not loaded from a third-party CDN.
Our providers may process data outside your country.
The whole site uses HTTPS. Access tokens are never written to localStorage or sent to our servers.
張瀚 (Han Chang) is the controller of your personal data. Under Taiwan’s Personal Data Protection Act and other applicable data protection law (such as the EU GDPR, where it applies), you may request access to, a copy of, correction of, or deletion of your personal data, ask us to stop collecting, processing or using it, object to processing, or complain to your data protection authority. Email [email protected] and we will reply within 30 days. Where applicable data protection law requires a legal basis: performance of a contract (paid unlock) and our legitimate interest in running the service. Purposes (PDPA): 090 consumer/customer management and service; 069 contract, quasi-contract or other legal relationship matters. If you do not provide an email address you cannot purchase, but free viewing is unaffected.
You can revoke access at any time at myaccount.google.com/permissions. After revoking, we can no longer access your files; annotations already saved in your Drive are not affected.
The app is not directed at children under 13 (16 in the EEA, or the local minimum age), and we do not knowingly collect children’s personal data.
We will post updates here and change the effective date, notify you in the app (and by email if you have purchased) of material changes, and seek your consent before using Google user data in new ways.
Splatnook（下稱「本工具」或「我們」）是可搭配 Google 雲端硬碟使用的 3D 高斯潑濺與 USDZ 檢視器，網址為 viewer.formchime.com。本服務由張瀚（Han Chang，台灣）提供，與 FormChime 為同一開發者。聯絡信箱：[email protected]。生效日期：〔上線當天填入〕。各語言版本如有出入，以英文版為準。
本工具只申請 drive.file 權限。我們僅存取您以本工具「開啟工具」開啟，或於 Google 檔案挑選器（Google Picker）中選取之檔案（僅限您選取的檔案），以及本工具建立的標註檔，其識別碼、名稱、類型、大小、內容、權限欄位（您是否可編輯、留言或下載）與本工具的應用程式屬性；以「開啟工具」開啟時，Google 也會傳送您的 Google 帳戶 ID（數字使用者代碼，非電子郵件），僅用於在您的瀏覽器中顯示 3D 內容及提供分享連結／標註功能，無法看到或列出雲端硬碟中的其他檔案。我們不要求存取您的 Google 帳號電子郵件或聯絡人。
檔案內容由 Google 直接下載到您的瀏覽器並在本機顯示。我們不會將您的檔案或 Google 使用者資料上傳、複製或儲存於我們的伺服器，不出售、不用於廣告、不用於訓練 AI 模型。本工具對 Google API 所取得資訊之使用與傳輸，遵守 Google API 服務使用者資料政策，包括「有限使用」規定。
除非取得您的明確同意、基於安全目的（如調查濫用）、法律要求，或資料已彙整匿名化，我們的人員不會讀取您的 Google 使用者資料。除為提供或改善使用者可見功能所必需、法律要求，或併購時並事先告知外，我們不會將 Google 使用者資料轉移給第三方。
標註儲存於您自己的 Google 雲端硬碟中、由本工具建立的附屬 JSON 檔；模型檔的應用程式屬性（appProperties）只記錄該 JSON 檔的識別碼與版本號。新增或編輯標註需具備該檔案的編輯權限。我們的伺服器不保存上述任何資料。若您也將標註檔分享給收件人，對方即可看到您的標註。分享連結僅包含檔案識別碼；收件人需在自己的 Google 雲端硬碟中具備該檔案的存取權（由擁有者分享給他），並會被要求用 Google 檔案挑選器選取該檔案一次，之後才能檢視。標註可能含有您輸入的個人資料，仍由您在雲端硬碟中自行管理。
付款由 Polar Software Inc.（polar.sh）以代理銷售商（Merchant of Record）身分處理，Polar 依其隱私權政策蒐集付款與帳單資訊，資料可能於美國等境外處理。我們僅取得您的電子郵件、訂單編號與授權碼，用於提供解鎖功能與客服，不取得卡號。付費功能並非於所有地區提供（目前不對日本提供）。
我們不保存您的檔案內容或其他 Google 使用者資料。存取權杖僅存在瀏覽器分頁記憶體，約一小時內失效，關閉分頁即清除。購買紀錄（電子郵件、訂單編號、授權碼）保存 7 年，或依法令要求的更長期間，之後刪除。如需刪除其他資料，請來信 [email protected]，我們將於 30 日內處理。
本網站不使用廣告或分析追蹤 Cookie。服務供應商：Cloudflare（網站託管，依其政策保存 IP、瀏覽器類型等一般連線紀錄，僅用於安全與維運）、Polar（付款）。頁面會從 Google 載入 Google Identity Services 與 Google Picker 程式，由 Google 依其隱私權政策處理。3D 顯示程式庫（three.js 與 Spark）由本站自行託管，不從第三方 CDN 載入。我們的供應商可能於您所在國家以外處理資料。
全站使用 HTTPS 傳輸；權杖不寫入 localStorage，也不傳送到我們的伺服器。
您的個人資料由張瀚（Han Chang）擔任控管者。依個人資料保護法及其他適用之資料保護法（如適用時之歐盟 GDPR），您得請求查詢、閱覽、製給複製本、補充或更正、停止蒐集處理利用或刪除您的個人資料，亦得向主管機關申訴。請來信 [email protected]，我們將於 30 日內回覆。蒐集目的：090 消費者、客戶管理與服務；069 契約、類似契約或其他法律關係事務。若不提供電子郵件，將無法完成購買，但不影響免費檢視功能。
您可隨時於 myaccount.google.com/permissions 撤銷授權。撤銷後我們將無法再存取您的檔案；已存於您雲端硬碟中的標註不受影響。
本服務不針對 13 歲以下兒童（歐洲經濟區為 16 歲，或當地法定年齡），我們不會故意蒐集兒童個人資料。
如有重大變更，我們會於本頁更新生效日期，並於服務中通知（已購買者另以電子郵件通知）；涉及 Google 使用者資料用途之變更，將事先取得您的同意。