最后更新：2026 年 9 月 27 日
一句话总结
Lassomark 在你的 Mac 上本地运行。你的录屏、截图、标注和 Prompt 都不会上传到任何服务器。我们只在检查更新和激活 Pro 版本时联网，收集的信息仅够完成这两件事。
App 在你电脑上做的事
- Lassomark 需要「屏幕录制」和「辅助功能」权限，用于画面标注、截图、录屏，以及在 Agent 模式下识别屏幕上的界面组件。这些处理全部在本机完成。
- 录屏文件直接保存在你 Mac 的桌面上；截图和复制的 Prompt 只放进你的剪贴板。App 不会把它们发给我们，也不会发给任何 AI 服务——Prompt 由你自己决定粘贴到哪里。
- 你的偏好设置（如光标、拖尾效果）和激活凭证保存在本机的系统偏好设置里。
App 会联网的两种情况
- 检查更新：App 会定期访问
lassomark.com/appcast.xml查看是否有新版本。请求中包含 App 版本号和 macOS 版本号（软件更新框架 Sparkle 的默认行为），我们没有开启其额外的系统信息统计。 - 激活 Pro 版本：你输入激活码后，App 会把激活码和这台 Mac 的匿名指纹发送到
api.lassomark.com。指纹是硬件 UUID 加盐后计算的 SHA-256 哈希值，无法反推出原始硬件信息，只用来执行「一个激活码最多 2 台 Mac」的规则。之后 App 会不定期查询这个激活码已绑定几台 Mac，用于在界面上显示。
购买时的信息
- 付款由我们的经销商 Creem 作为「记录商户（Merchant of Record）」处理。你在付款页填写的姓名、邮箱、账单地址和付款信息由 Creem 收集和处理，适用 Creem 的隐私政策。我们接触不到你的银行卡或支付宝账户信息。
- 付款成功后，Creem 会通知我们的服务器。我们只保存：订单号、邮箱的 SHA-256 哈希值（用于「找回激活码」时核对，不保存邮箱明文）、为这笔订单生成的激活码，以及订单状态（已付款 / 已退款）。
- 在 Creem 后台，我们可以看到订单信息（包括你的姓名和邮箱），仅用于处理退款、客服和对账。
官网
- 官网使用 Cloudflare Web Analytics 统计访问量。它不使用 Cookie，也不追踪你在其他网站上的行为，我们只能看到汇总后的数据（如页面浏览量、来源国家）。
- 购买页会在你的浏览器本地存储一个随机生成的订单标识，用于付款后显示你的激活码。它不包含任何个人信息，清除浏览器数据即可删除。
- 官网托管在 GitHub Pages，激活服务运行在 Cloudflare。和访问任何网站一样，这些服务商会在提供服务的过程中处理你的 IP 地址等网络信息。
我们不会做的事
- 不出售、不出租你的任何信息。
- 不向广告商或数据经纪商共享信息，不做个性化广告。
- 不在 App 里内置任何第三方统计或广告 SDK。
保存期限与你的权利
订单和激活记录会在激活码有效期间一直保存，否则我们无法为你找回激活码或核实授权。你可以随时发邮件到 bingbingmoment@qq.com，要求查询、更正或删除与你相关的记录。请注意：删除后，这个激活码将无法再找回，也无法在新的 Mac 上激活。
儿童
Lassomark 不面向 14 岁以下的儿童，我们也不会有意收集儿童的个人信息。
政策变更
如果本政策有实质性变化，我们会更新本页顶部的日期，并在更新日志中说明。
联系我们
Lassomark 由个人开发者饼饼开发和运营。关于隐私的任何问题，请发邮件到 bingbingmoment@qq.com。
Last updated: September 27, 2026
In short
Lassomark runs locally on your Mac. Your screen recordings, screenshots, annotations and prompts are never uploaded to any server. The app only goes online to check for updates and to activate Pro, and collects no more than those two tasks need.
What the app does on your Mac
- Lassomark needs Screen Recording and Accessibility permissions to annotate the screen, take screenshots, record the screen, and (in Agent mode) recognize on-screen UI elements. All of this is processed on your Mac.
- Recordings are saved straight to your Mac's Desktop; screenshots and copied prompts go only to your clipboard. The app never sends them to us or to any AI service — you decide where to paste a prompt.
- Your preferences and your activation credential are stored locally in macOS user defaults.
When the app connects to the internet
- Update checks: the app periodically fetches
lassomark.com/appcast.xml. The request includes the app version and macOS version (default behavior of the Sparkle update framework). Sparkle's optional system profiling is turned off. - Pro activation: when you enter an activation code, the app sends the code and an anonymous fingerprint of this Mac to
api.lassomark.com. The fingerprint is a salted SHA-256 hash of the hardware UUID; it cannot be reversed and is used only to enforce the "up to 2 Macs per code" rule. The app occasionally checks how many Macs the code is bound to, for display in the app.
When you buy
- Payments are processed by our reseller Creem, the Merchant of Record for all orders. The name, email, billing address and payment details you enter at checkout are collected and processed by Creem under Creem's privacy policy. We never see your card or Alipay account details.
- After a successful payment Creem notifies our server. We store only: the order ID, a SHA-256 hash of your email (to verify "recover my code" requests — the email itself is not stored), the activation code generated for the order, and the order status (paid / refunded).
- In the Creem dashboard we can see order details, including your name and email, which we use only for refunds, support and bookkeeping.
Website
- The website uses Cloudflare Web Analytics, which uses no cookies and does not track you across sites. We only see aggregated numbers such as page views and visitor countries.
- The purchase page stores a random order reference in your browser's local storage so it can show your activation code after payment. It contains no personal information and is removed when you clear your browser data.
- The website is hosted on GitHub Pages and the activation service runs on Cloudflare. As with any website, these providers process network information such as your IP address in order to serve requests.
What we never do
- We do not sell or rent any of your information.
- We do not share information with advertisers or data brokers, and we do not run targeted ads.
- The app contains no third-party analytics or advertising SDKs.
Retention and your rights
Order and activation records are kept for as long as the activation code is valid; without them we cannot recover your code or verify your license. You can email bingbingmoment@qq.com at any time to access, correct or delete records about you. Note that once deleted, the code can no longer be recovered or activated on another Mac.
Children
Lassomark is not directed at children under 14, and we do not knowingly collect their personal information.
Changes
If this policy changes materially, we will update the date at the top of this page and mention it in the changelog.
Contact
Lassomark is developed and operated by independent developer Bingbing. For any privacy question, email bingbingmoment@qq.com.