Who runs this谁在运营
DINO Mail is a small, independently run mail service at di.fs.kg. It is not a company, a startup, or a product with investors — it is one mailbox system, run by one person, for people who want a quiet address of their own. DINO Mail 是 di.fs.kg 上一个独立运营的小型邮件服务。它不是公司，不是创业项目，也没有投资人——就是一个人维护的一套邮箱系统，给那些想要一个安静地址的人用。
Because there is exactly one operator, "we" in this document means that person, and questions reach a human rather than a support queue. 因为运营者只有一个人，本文里的「我们」指的就是这个人，你的问题会直接到人手上，而不是进某个工单队列。
What we store我们存什么
We keep what a mailbox needs to work, and nothing else. No profiles, no ad identifiers, no behavioural history. 我们只保存邮箱运转所必需的东西，不多存一样。没有用户画像，没有广告标识，没有行为轨迹。
- Account账户
- Your address, the name and domain parts separately, a PBKDF2-SHA256 hash of your password (never the password itself), display name, signature, and when the account was created. 你的邮箱地址、拆开的用户名与域名、密码的 PBKDF2-SHA256 哈希（不是密码本身）、显示名、签名，以及注册时间。
- Mail邮件
- Sender, recipients (to/cc/bcc), subject, plain-text and HTML bodies, a short preview snippet, threading headers, timestamps, and read/star/trash flags — for every message you send, receive, or draft. 发件人、收件人（含抄送与密送）、主题、纯文本与 HTML 正文、一段预览摘要、会话串联头、时间戳，以及已读／星标／回收站状态——你发出、收到、起草的每一封都是如此。
- Attachments附件
- Filename, type, and size. The file itself is kept only while a draft is unsaved; attachments on delivered mail are referenced by the provider's URL rather than copied into our database. 文件名、类型、大小。文件本体只在草稿未发送时保留；已送达邮件的附件按服务商提供的链接引用，不会整份复制进我们的数据库。
- Contacts & aliases联系人与别名
- What you enter: addresses, names, notes, and any alternate addresses you create on ip.fs.kg or ok.fs.kg. 你自己填的内容：地址、姓名、备注，以及你在 ip.fs.kg 或 ok.fs.kg 上创建的别名。
- Notification rules通知规则
- Your forwarding address, your Telegram chat ID, whether each is switched on, and the timestamp plus error text of the last attempt — so the settings page can tell you when something broke. 你的转发地址、Telegram chat ID、两个开关的状态，以及最近一次尝试的时间和错误信息——设置页靠这些告诉你哪里出了岔子。
- Abuse counters防滥用计数
- Short-lived counters keyed by user or IP, used only for rate limiting. They expire on their own. 按用户或 IP 计的短期计数，只用于限流，到期自动失效。
- Webhook ledger回调去重
- IDs of inbound-mail events already processed, so a retried delivery is never stored twice. 已处理过的入站邮件事件 ID，防止投递重试导致同一封信存两遍。
We do not scan message bodies for advertising, we do not build a profile out of them, and we do not use your mail to train models. 我们不会扫描邮件正文来做广告，不会拿它拼出画像，也不会用你的邮件训练模型。
Cookies and local storageCookie 与本地存储
One cookie. dino_session is what keeps you signed in. It is HttpOnly, Secure, and SameSite=Lax, it expires after 30 days, and it holds only your user ID, an expiry time, and an HMAC signature. No personal data, and no session table on the server for anyone to steal.
只有一个 cookie。dino_session 用来维持登录状态：HttpOnly、Secure、SameSite=Lax，30 天后过期，内容只有用户 ID、过期时间和一个 HMAC 签名。不含个人资料，服务端也没有会话表可供窃取。
One local storage key. dino-lang remembers whether you prefer English or 中文. That is the only thing written to your browser.
只有一个本地存储键。dino-lang 记住你选的是中文还是英文。写入浏览器的就这一项。
No advertising cookies, no analytics cookies, no cross-site identifiers. 没有广告 cookie，没有统计 cookie，没有跨站标识。
Who else sees your mail还有谁能看到你的邮件
Mail cannot move without other computers. These are the ones involved, and exactly what each can see: 邮件不可能只靠一台机器送达。以下是参与其中的服务，以及它们各自能看到什么：
- Cloudflare — hosts the site and stores the database. Traffic passes through their network, so they process it in transit. They also provide aggregate, cookieless visit counts. Cloudflare —— 托管站点并保存数据库。流量经过其网络，因此会在传输过程中被处理。此外还提供不含 cookie 的聚合访问统计。
- Resend — the mail provider for both directions. Every message you send or receive passes through them in full, attachments included. Resend —— 收发信服务商。你发出和收到的每一封邮件都完整经过它，包括附件。
- None for fonts — the Fraunces typeface is served from this site itself. No font request ever leaves for a third party. 字体不经过第三方 —— 标题字体 Fraunces 由本站自己提供，页面渲染不会向任何第三方发出字体请求。
- Telegram — only if you switch notifications on. A short summary (sender, subject, first lines) is sent to Telegram's Bot API. Telegram —— 只有你打开通知时才会用到。一封简短摘要（发件人、主题、开头几行）会发到 Telegram 的 Bot API。
- The address you forward to — only if you switch forwarding on. A complete copy of each new message goes there, through Resend. 你设置的转发地址 —— 只有你打开转发时才会用到。每封新邮件的完整副本会经由 Resend 送到那里。
Each provider has its own privacy terms, and their part of the path is governed by those. If you need a mailbox with no third-party processors at all, a self-hosted server is the honest answer — this one is not that. 每家服务商都有自己的隐私条款，它们负责的那一段受那些条款约束。如果你需要完全不经第三方的邮箱，老实说答案是自建服务器——这个站不是。
What we never do我们绝不做的事
- Show you ads, or work with ad networks and data brokers.给你看广告，或与广告网络、数据中间商合作。
- Sell, rent, or trade your address or your mail.出售、出租或交换你的地址与邮件。
- Profile you, score you, or read your mail to target anything at you.给你画像、打分，或通过读你的邮件来向你定向推送。
- Load third-party trackers or analytics beyond Cloudflare's aggregate counts.加载 Cloudflare 聚合统计之外的任何第三方追踪或分析脚本。
- Use your content to train models.用你的内容训练模型。
How long we keep it保存多久
- Mail — until you delete it. Deleting moves it to trash, which is a flag on the same row, not a hidden second copy. Emptying the trash removes the row.邮件 —— 直到你删除为止。删除只是把同一行标记为回收站状态，不会另存一份隐藏副本；清空回收站才会真正删掉这一行。
- Account data — until you ask for the account to be closed.账户数据 —— 直到你要求注销账户。
- Rate-limit counters — minutes to an hour, then they expire.限流计数 —— 几分钟到一小时，随后自动过期。
- Backups — the hosting provider may retain database snapshots for a short period after deletion; they age out on their own.备份 —— 托管服务商可能在删除后短期内保留数据库快照，到期自行清除。
Closing your account removes your mail, contacts, aliases, and notification rules. If you want a copy first, ask before you close it. 注销账户会删除你的邮件、联系人、别名和通知规则。想先留一份的话，请在注销前说一声。
How it is protected如何保护
TLS on every request, with HSTS so a browser will not quietly fall back to plain HTTP. Passwords are stored as PBKDF2-SHA256 hashes with a per-user salt, in a form that cannot be read back. Session cookies are signed, HttpOnly, and SameSite. The site ships a strict Content-Security-Policy that blocks third-party scripts, and every request that writes checks that it came from this site. 全站 TLS，并启用 HSTS，浏览器不会悄悄退回明文 HTTP。密码以带独立盐值的 PBKDF2-SHA256 哈希保存，无法反读。会话 cookie 经过签名，且为 HttpOnly 与 SameSite。站点下发了严格的 Content-Security-Policy 拦截第三方脚本，所有写操作都会校验请求是否来自本站。
An honest caveat: this is a small personal service, not an audited one. There is no SOC 2 report and no security team on call. Treat it like a mailbox run by a friend, not a bank. 说句实在话：这是一个小型个人服务，没有做过审计。没有 SOC 2 报告，也没有随叫随到的安全团队。请把它当成朋友帮你开的信箱，而不是银行。
Your choices你的选择
- See — everything stored about you is visible in the app itself.查看 —— 与您有关的全部数据，在应用里都能看到。
- Correct — display name, signature, contacts, and aliases are all editable.更正 —— 显示名、签名、联系人、别名都可以自己改。
- Export — ask, and you will get a dump of your mail.导出 —— 说一声，就把你的邮件打包给你。
- Delete — per message, or the whole account.删除 —— 可以逐封删，也可以整个账户删。
- Switch off — forwarding and Telegram notifications are off unless you turn them on.关掉 —— 转发和 Telegram 通知默认关闭，除非你自己打开。
To exercise any of these, write to hi@di.fs.kg. Requests are answered by a person, usually within a few days. 需要行使以上任何一项，请写信到 hi@di.fs.kg。由人来处理，通常几天内回复。
Children未成年人
DINO Mail is not directed at children under 13, or under the minimum age set by the law where they live. We do not knowingly hold accounts for them. If one exists, tell us and it will be removed. DINO Mail 不面向 13 岁以下儿童，也不面向当地法律规定的最低年龄以下的人。我们不会在知情的情况下为其保留账户。如果存在这样的账户，告诉我们，会删掉。
Changes to this policy政策变更
The date at the top is the date of the last real change. If a change affects what is collected or who can see it, it will be announced on the site before it takes effect — not quietly edited in. 页首的日期是最近一次实质修改的时间。如果变更涉及收集范围或可见范围，会在生效前在站内公告——不会悄悄改掉就算。
Contact联系我们
Questions, requests, or something that looks wrong: hi@di.fs.kg. 有疑问、有请求，或者发现哪里不对劲：hi@di.fs.kg。