HyperCluster Foundation ("HyperCluster", "we", "us") is responsible for the personal data handled by hypercluster.org and every HyperCluster app and service: Passport, HYPEC and the HyperCluster blockchain, invite friends, HyperAI, HyperCloud, HyperCV, HyperAcademy, Quipu machines and the software for sharing your PC.

This policy says what we keep, why, who else receives it, how long we keep it and what you can ask us to do. The parts for each product give the details. Our Terms of Use are the rules for using the services.

For questions about your data, or to use your rights, write to [email protected].

This policy is written in English and in simplified Chinese. If the two versions differ, the English version prevails.

HyperCluster Foundation（"HyperCluster"、"我们"）负责 hypercluster.org 以及 HyperCluster 所有应用和服务所处理的个人数据，包括：Passport（HyperCluster 通行证）、HYPEC 与 HyperCluster 区块链、邀请好友、HyperAI、HyperCloud、HyperCV、HyperAcademy、Quipu 设备，以及用于分享你的电脑的软件。

本政策说明我们保存哪些数据、为什么保存、还有谁会收到、保存多久，以及你可以要求我们做什么。各产品的部分提供详细信息。我们的服务条款是使用本服务的规则。

如对你的数据有疑问，或希望行使你的权利，请发送邮件至 [email protected]。

本政策以英文和简体中文写成。两个版本如有不一致，以英文版本为准。

Every connection to our sites passes through Cloudflare (see Who else receives data). Our servers receive your IP address, your browser's details and the pages you ask for, and record some of this, for example with your sign-in sessions, to run and protect the services.

Each app keeps its own copy of the Passport details it needs (see the parts below). Our staff can see account and service records in our own tools when they need to, to run the services, help you or deal with abuse.

When you write to us, we keep your message and our reply.

We do not sell personal data. We do not use it for advertising, and we show no ads.

The HyperCluster assistant. A chat button on our sites answers questions about HyperCluster. What you type, the recent conversation, your language and the page you are on go to DeepSeek, a company based in China, whose AI writes the answer from HyperCluster’s own information. From the page we send its address (without anything after “?”, and never the secret part of a link), its title and heading and, on public pages only, up to the first 1,500 characters of its text; on members’ pages, only the headings. Email addresses, wallet addresses, keys, recovery phrases and long numbers in what you type are blanked before it is sent. Your name, account, IP address and cookies are not sent, and the assistant does not know who you are. Please don’t type personal details.

So that the conversation follows you across our sites, our server keeps it in memory only, up to 20 messages, until 2 hours after your last question, until you start a new one, or until the server restarts. It is never written to a database or to our logs, which keep only counts and errors. To limit use (30 questions an hour), we keep your IP address in memory for up to an hour. The assistant is not shown on share or claim pages, whose address is a secret. Its answers can be wrong; see the Terms (17.4).

与我们网站的每一次连接都经过 Cloudflare（见"还有谁会收到数据"）。我们的服务器会收到你的 IP 地址、浏览器信息以及你请求的页面，并记录其中一部分（例如与你的登录会话一起记录），用于运营和保护本服务。

每个应用会保存它所需的 Passport 信息副本（见下文各部分）。我们的工作人员在需要时，可以在我们自己的工具中查看账户和服务记录，用于运营服务、为你提供帮助或处理滥用行为。

你给我们写信时，我们会保存你的来信和我们的回复。

我们不出售个人数据，不将其用于广告，也不展示广告。

HyperCluster 助手。我们网站上的聊天按钮会回答关于 HyperCluster 的问题。你输入的内容、最近的对话、你的语言以及你所在的页面会发送给 DeepSeek（一家总部位于中国的公司），由它的 AI 根据 HyperCluster 自己的资料撰写回答。关于页面，我们发送它的地址（不含“?”之后的部分，也绝不包含链接中的秘密部分）、标题和主标题；仅在公开页面上，还会发送其正文的前 1,500 个字符；会员页面只发送各级标题。你输入内容中的电子邮箱、钱包地址、密钥、助记词和长串数字会在发送前被遮盖。你的姓名、账户、IP 地址和 Cookie 不会被发送，助手也不知道你是谁。请不要输入个人信息。

为了让对话在我们的各个网站间延续，我们的服务器只在内存中保存对话，最多 20 条消息，保存到你最后一次提问后 2 小时、你开始新对话，或服务器重启为止。对话绝不会写入数据库或我们的日志，日志只记录次数和错误。为了限制使用量（每小时 30 个问题），我们会在内存中保存你的 IP 地址最多一小时。助手不会出现在分享和领取页面上，因为这些页面的地址本身就是秘密。它的回答可能有误；见条款（17.4）。

Your account. Your name, email address and password, and your phone number if you add one. We keep your password only as a bcrypt hash, never the password itself. We also keep who invited you (see Invite friends).

Your wallet. Its address. For a wallet Passport made for you, its recovery phrase, encrypted with a key our servers hold: our servers can therefore use the wallet (only for what the Terms list) and you can see the phrase after entering your password. If you link a wallet of your own, we keep only its address.

A record on the blockchain. When you create your Passport, an encrypted record of your name, email address, wallet address and sign-up date is stored on HyperCluster's storage network, and a fingerprint of it, with your wallet address, is written to chain 838838. The same happens when you change your name. The record is encrypted with a key our servers hold; the fingerprint on the blockchain does not show your details.

Signing in. For each sign-in session, your IP address and browser. Passport sessions last 24 hours and are then deleted. You can see your sessions in Passport and sign out the others. When you sign in or sign up with email and password, Cloudflare Turnstile checks that you are a person; for that, your IP address and browser information go to Cloudflare.

Emails. Passport sends you emails (to confirm your email address, to reset your password, to welcome you with your wallet address, and sign-up codes) through Mailgun, which receives your email address and the message.

What our apps receive. When you use an app with Passport, Passport gives it your Passport ID, name, email address (and whether it is confirmed) and wallet address. hypercluster.org and HyperCloud also receive your invite code, who invited you and how many people you invited. Passport tells our apps what you have paid for (product, amount, transaction) and, when they ask, what you own in the other apps. You can disconnect an app in Passport.

When a Passport is closed, we remove your name, phone number, password hash, wallet key and recovery data and the encrypted record, and mark your Passport as closed on the blockchain. We keep your email address and wallet address, who invited whom, and the records of your payments, top-ups and rewards, which we need for our accounts, to meet the law and to prevent abuse.

你的账户。你的姓名、电子邮箱和密码，以及你选择添加的手机号码。我们只以 bcrypt 哈希值的形式保存你的密码，绝不保存密码本身。我们还会保存邀请你的人（见"邀请好友"）。

你的钱包。钱包地址。如果钱包由 Passport 为你生成，我们还保存其助记词，并用我们服务器持有的密钥加密：因此我们的服务器可以使用该钱包（仅限服务条款列出的用途），你也可以在输入密码后查看助记词。如果你绑定自己的钱包，我们只保存其地址。

区块链上的记录。你创建 Passport 时，一份包含你的姓名、电子邮箱、钱包地址和注册日期的加密记录会存放在 HyperCluster 的存储网络中，其指纹连同你的钱包地址会写入 838838 链。你修改姓名时也会如此。该记录用我们服务器持有的密钥加密；区块链上的指纹不会显示你的具体信息。

登录。每次登录会话的 IP 地址和浏览器信息。Passport 的登录会话有效期为 24 小时，之后即被删除。你可以在 Passport 中查看你的会话，并退出其他会话。你用邮箱和密码登录或注册时，Cloudflare Turnstile 会确认你是真人；为此，你的 IP 地址和浏览器信息会发送给 Cloudflare。

电子邮件。Passport 通过 Mailgun 向你发送邮件（确认你的邮箱、重置密码、附有你钱包地址的欢迎邮件，以及注册验证码），Mailgun 会收到你的邮箱地址和邮件内容。

我们的应用会收到什么。你通过 Passport 使用某个应用时，Passport 会把你的 Passport ID、姓名、电子邮箱（及其是否已确认）和钱包地址提供给该应用。hypercluster.org 和 HyperCloud 还会收到你的邀请码、邀请你的人以及你邀请的人数。Passport 会告诉我们的应用你购买了什么（产品、金额、交易），并在它们询问时告诉它们你在其他应用中拥有什么。你可以在 Passport 中断开与某个应用的连接。

Passport 关闭后，我们会删除你的姓名、手机号码、密码哈希值、钱包密钥、恢复数据以及上述加密记录，并在区块链上将你的 Passport 标记为已关闭。我们会保留你的电子邮箱和钱包地址、邀请关系，以及你的付款、充值和奖励记录，这些是我们记账、遵守法律和防止滥用所需要的。

The blockchain is public and permanent. Your wallet address and every transaction on chain 838838 (payments, top-ups, rewards, locked HYPEC) can be seen by anyone, for example on explorer.hypercluster.org, and cannot be deleted. Anyone who knows that an address is yours can see what it has done.

Adding HYPEC with USDT. We keep each request (amount, network, time) and the USDT transfer matched to it (network, sending address, transaction, amount), with the HYPEC price and the HYPEC sent. USDT transfers are public on BNB Smart Chain and TRON; Passport reads those public networks to find yours.

Paying. For each payment: the product, the price in US dollars and in HYPEC, any discount, the transaction and the time. The app you bought from receives a signed receipt with these details.

We do not collect card or bank details.

区块链是公开且永久的。你的钱包地址以及 838838 链上的每一笔交易（付款、充值、奖励、锁定的 HYPEC）任何人都能看到（例如在 explorer.hypercluster.org 上），并且无法删除。任何知道某个地址属于你的人，都能看到该地址的全部操作。

用 USDT 充值 HYPEC。我们会保存每一次充值申请（金额、网络、时间）及与之匹配的 USDT 转账（网络、发送地址、交易、金额），以及 HYPEC 价格和发出的 HYPEC 数量。USDT 转账在 BNB 智能链和 TRON 上是公开的；Passport 会读取这些公开网络来找到你的转账。

付款。每笔付款的产品、美元价格和 HYPEC 价格、折扣、交易和时间。你购买的应用会收到一份包含这些信息的签名收据。

我们不收集银行卡或银行账户信息。

We keep who invited whom, for good, and the rewards each purchase earned. Your invite code is also your public HyperCluster ID, which is used to link machines to you.

The people up to three steps above you see, in Passport, that you joined, with your name and email partly hidden (for example "Ja** D**" and "ja***@example.com"), when you joined, whether you have bought anything, and how much they have earned from your purchases. They do not see what you bought.

Rewards are paid through a release contract on chain 838838, so the wallet that receives them and the amounts are public.

The invite code you arrive with is kept in your browser until you sign up (see Cookies).

我们会永久保存邀请关系，以及每笔购买产生的奖励。你的邀请码同时也是你公开的 HyperCluster ID，用于把设备绑定到你名下。

你上方最多三层的人可以在 Passport 中看到你已加入，你的姓名和邮箱会被部分隐藏（例如"Ja** D**"和"ja***@example.com"），以及你的加入时间、是否购买过产品，和他们从你的购买中赚取了多少。他们看不到你买了什么。

奖励通过 838838 链上的释放合约发放，因此接收奖励的钱包和金额是公开的。

你访问时带来的邀请码会保存在你的浏览器中，直到你注册（见 Cookie）。

Chatting with your own model. When you chat with a chat model you fine-tuned, in HyperAI, through the API or through an AI agent, your messages go to the member's PC that runs the model, and its reply comes back through our server. We hold the reply in memory for 10 minutes after it is ready, so that it can be collected, and do not store it. We record only when and where it ran, how many tokens went in and out, how long it took and what it cost, never the words. In HyperAI, the conversation stays in your browser's page.

No outside AI company. Nothing you send to HyperAI goes to DeepSeek or any other AI company: your models run on members' PCs, and pictures sent for analysis are read on HyperCluster's own AI chips.

Pictures read on our AI chips. When your app or AI agent sends a picture to be read (through the API or MCP), we first remove its location and camera details, turn it the right way up and make it no larger than 1280 pixels. It is read only by AI chips that HyperCluster runs, not by members' machines; sometimes a second chip checks the result. The picture is not stored: we keep only its fingerprint (SHA-256), its size and a fingerprint of the result, with the record of the call. What was found is sent back to you and not kept.

The general chat has closed. HyperAI's general chat, whose replies DeepSeek wrote, closed on 8 October 2026. All its conversations, messages, reports on replies and photos were deleted then. What each reply cost stays in your credit history, without its words.

Training your own AI. Datasets you upload are checked and converted on our servers, then encrypted with a key of their own (which our servers hold) and stored on HyperCluster's storage network; the unencrypted copy is deleted from the server. To train, the member's PC that runs your job decrypts and reads your dataset. Results come back encrypted and are kept for 7 days. Job logs are kept. Your models are kept encrypted until you delete them. When you try a model, or call it through the API, the photo you send goes to the member's PC that runs it, and we do not keep it.

API. We keep a fingerprint of each API key, not the key, and a record of each call: time, key, address called, model, result, charge and duration.

Credit. We keep your credit purchases, what each use cost and your free use.

We do not use your messages, photos, datasets or models to train AI models.

和你自己的模型对话。你在 HyperAI 中、通过 API 或通过 AI 智能体和你微调的对话模型对话时，你的消息会发给运行该模型的会员电脑，模型的回复经我们的服务器传回。回复生成后，我们会在内存中保留 10 分钟以便你取回，不会保存。我们只记录它何时在哪里运行、输入和输出的 token 数量、用时和费用，从不记录对话内容。在 HyperAI 中，对话只留在你浏览器的页面里。

不经过外部 AI 公司。你发送给 HyperAI 的任何内容都不会发给 DeepSeek 或其他 AI 公司：你的模型在会员的电脑上运行，送来分析的图片由 HyperCluster 自己的 AI 芯片读取。

由我们的 AI 芯片读取的图片。你的应用或 AI 智能体（通过 API 或 MCP）发送图片请我们读取时，我们会先去除其中的位置和相机信息，将其转正，并缩小到不超过 1280 像素。图片只由 HyperCluster 运营的 AI 芯片读取，而不是会员的设备；有时会由第二个芯片复核结果。图片不会被保存：我们只随调用记录保留其指纹（SHA-256）、大小和结果的指纹。识别出的内容会发回给你，我们不会保存。

通用对话已关闭。HyperAI 的通用对话（其回复由 DeepSeek 撰写）已于 2026 年 10 月 8 日关闭。当时已删除其全部对话、消息、对回复的举报和照片。每条回复的费用仍保留在你的额度记录中，但不含对话内容。

训练你自己的 AI。你上传的数据集会在我们的服务器上经过检查和转换，然后用其专属密钥（由我们的服务器持有）加密，存放在 HyperCluster 的存储网络中；服务器上未加密的副本随即删除。训练时，运行你的任务的会员电脑会解密并读取你的数据集。训练结果以加密形式传回，保存 7 天。任务日志会被保留。你的模型以加密形式保存，直到你将其删除。你试用模型或通过 API 调用模型时，你发送的照片会传给运行该模型的会员电脑，我们不会保存。

API。我们只保存每个 API 密钥的指纹，而不是密钥本身，并保存每次调用的记录：时间、密钥、调用地址、模型、结果、费用和耗时。

额度。我们会保存你购买的 HyperAI 额度、每次使用的费用以及你的免费额度使用情况。

我们不会使用你的消息、照片、数据集或模型来训练 AI 模型。

Account. HyperCloud uses your Passport: your email address, Passport ID and wallet address. Each sign-in session records your IP address and browser, and lasts 7 days.

Files and notes. They are encrypted (AES-256-GCM) on our servers with a key our servers hold, then stored on HyperCluster's storage network: our main server keeps a copy of every file, and Quipu machines and members' PCs that share storage may keep encrypted copies they cannot read. Because our servers hold the key, they can decrypt your files, and do so when you, or someone you share with, opens or downloads them. Our staff have no tool for opening members' files and do not open them unless the law requires it.

Not encrypted. To show and search your files, our database keeps in plain form: file and folder names and paths, file types and sizes, upload, change and deletion times, and a fingerprint (SHA-256) of each file's content, made before it is encrypted. For notes: the title, the first 500 characters of the text, the word count and the size.

Share links. Anyone with a share link can see the item's name, type and size and download it, decrypted, until you stop sharing it.

Deleting. Deleted files and folders are kept for 30 days, then removed from our database and released from the storage network; the machines clear their copies over time. Deleted notes are removed straight away.

Plans and emails. We keep your plan, your renewal setting and your payment records. HyperCloud sends payment-due and plan-ended emails through SendGrid, which receives your email address and the message.

Accounts made before HyperCloud used Passport may still hold data from the older sign-in (a password hash and recovery-phrase data). Write to [email protected] to have it removed.

账户。HyperCloud 使用你的 Passport：你的电子邮箱、Passport ID 和钱包地址。每次登录会话会记录你的 IP 地址和浏览器信息，有效期 7 天。

文件和笔记。它们在我们的服务器上用服务器持有的密钥加密（AES-256-GCM），然后存放在 HyperCluster 的存储网络中：我们的主服务器保存每个文件的一份副本，分享存储空间的 Quipu 设备和会员电脑也可能保存它们无法读取的加密副本。由于我们的服务器持有密钥，服务器可以解密你的文件，并在你或你分享的对象打开或下载时解密。我们的工作人员没有打开会员文件的工具，除非法律要求，不会打开会员文件。

不加密的内容。为了显示和搜索你的文件，我们的数据库以明文形式保存：文件和文件夹的名称和路径、文件类型和大小、上传、修改和删除时间，以及每个文件内容在加密前生成的指纹（SHA-256）。对于笔记：标题、正文的前 500 个字符、字数和大小。

分享链接。任何拿到分享链接的人都能看到该项目的名称、类型和大小，并下载解密后的内容，直到你停止分享。

删除。删除的文件和文件夹会保留 30 天，之后从我们的数据库中移除，并从存储网络中释放；设备会逐步清除其副本。删除的笔记会立即移除。

套餐和电子邮件。我们会保存你的套餐、续费设置和付款记录。HyperCloud 通过 SendGrid 发送付款提醒和套餐结束邮件，SendGrid 会收到你的邮箱地址和邮件内容。

在 HyperCloud 改用 Passport 之前创建的账户，可能仍保存着旧登录方式的数据（密码哈希值和助记词相关数据）。如需删除，请发送邮件至 [email protected]。

Account. HyperCV uses your Passport: your name, email address, Passport ID and wallet address. Sign-in sessions last 24 hours.

Business checks. An organisation gives its legal name, registration number, country and address, a contact person's name and mobile number, and documents. The documents are encrypted and stored on HyperCV's own storage. To check them, our server reads the text in them, then sends it to an AI service: by default DeepSeek receives the text read from the documents, their file names and the details typed in, but not the documents themselves; if we use Anthropic instead, it receives the documents themselves with the name, registration number, country and address. The AI's assessment is kept. Our staff can see the details and open the documents. When an organisation is approved, a fingerprint of its name, registration number, country and address is written to the blockchain with its wallet and level.

Sealed documents. Each file is encrypted with a key of its own, which our servers hold, and stored on HyperCV's own storage for 10 years (or longer if renewed); our servers decrypt it to show it to its holder and to people with a share link. The description, file names and fingerprints stay in our database.

What is public. On the blockchain, for ever: each file's fingerprint, the description with the file name, the address of the encrypted copy, the organisation's wallet and the time, and the reason for any withdrawal. The public check page also shows the organisation's name and verification level, and each file's name and fingerprint.

Credentials. The organisation enters details about the holder: name, an identifier such as a student or employee number, role or course, dates, and sometimes a photo. On the blockchain there is only a fingerprint of those details, with the holder's and the organisation's wallets and any change of status with its note. The check link shows the holder's name, identifier, role or course, dates and photo, and the organisation; the data behind the page also holds the holder's wallet address. Anyone who knows a holder's wallet address can find the check links of credentials written to it.

Sending to many people. Organisations can upload lists of documents or credentials, with recipients' details and, if they choose, email addresses. HyperCV keeps them with a fingerprint of each claim link and, so the organisation can see and download its list, an encrypted copy of each link until it is used or stops working. A claim link works for 30 days; the organisation can send a new one. HyperCV does not send emails; the organisation sends the links.

Share links and reports. For a share link we keep a fingerprint of its secret part, its end date and how often it was opened. If you report a shared document, we keep your reason and remarks, your IP address and which document you reported.

Organisations are responsible for having a lawful basis for the personal data they put into documents and credentials. If you want data about you changed or withdrawn, you can ask the organisation, or us.

账户。HyperCV 使用你的 Passport：你的姓名、电子邮箱、Passport ID 和钱包地址。登录会话有效期为 24 小时。

机构认证。机构需提供其法定名称、注册号、国家和地址、联系人的姓名和手机号码，以及相关文件。文件经加密后存放在 HyperCV 自己的存储中。为了审核，我们的服务器会读取文件中的文字，然后发送给一项 AI 服务：默认情况下，DeepSeek 会收到从文件中读取的文字、文件名以及填写的信息，但不会收到文件本身；如果我们改用 Anthropic，它会收到文件本身以及名称、注册号、国家和地址。AI 的评估结果会被保存。我们的工作人员可以查看这些信息并打开文件。机构通过认证后，其名称、注册号、国家和地址的指纹会连同其钱包和认证等级写入区块链。

存证文件。每个文件用其专属密钥加密（密钥由我们的服务器持有），存放在 HyperCV 自己的存储中 10 年（续存则更久）；我们的服务器会解密文件，以便向其持有人和拿到分享链接的人展示。说明、文件名和指纹会保留在我们的数据库中。

哪些信息是公开的。永久保存在区块链上的：每个文件的指纹、附有文件名的说明、加密副本的地址、机构的钱包和时间，以及任何撤回的原因。公开的核验页面还会显示机构名称和认证等级，以及每个文件的名称和指纹。

凭证。机构会填写持有人的信息：姓名、学号或工号等编号、职位或课程、日期，有时还有照片。区块链上只有这些信息的指纹，以及持有人和机构的钱包，和任何状态变更及其备注。核验链接会显示持有人的姓名、编号、职位或课程、日期和照片，以及签发机构；页面背后的数据还包含持有人的钱包地址。任何知道持有人钱包地址的人，都能找到写入该钱包的凭证的核验链接。

批量发送。机构可以上传文件或凭证的清单，附上接收人的信息，并可选择附上电子邮箱。HyperCV 会保存这些清单和每个领取链接的指纹；为了让机构查看和下载清单，还会保存每个链接的加密副本，直到链接被使用或失效。领取链接有效期为 30 天，机构可以重新发送新链接。HyperCV 不发送电子邮件；链接由机构发送。

分享链接和举报。对于分享链接，我们保存其秘密部分的指纹、截止日期和被打开的次数。如果你举报某份分享的文件，我们会保存你的理由和备注、你的 IP 地址以及你举报的是哪份文件。

机构须对其放入文件和凭证中的个人数据具有合法依据。如果你希望更改或撤回关于你的数据，可以联系该机构，也可以联系我们。

Learner. From your Passport: your Passport ID, name, email address and wallet address, and when you first and last visited. Sign-in sessions last 24 hours.

Learning. The courses you start and finish, the step you have reached, every quiz attempt with the answers you gave and your score, and a log of what you do (pages you open, sign-ins, steps completed, quizzes, certificates issued and viewed).

Certificates. When you pass a course and the certificate service is on, HyperCV records your certificate: a fingerprint of your name, Passport ID, course and date goes on chain 838838 with your wallet and HyperAcademy's. If your Passport has no name, your email address is used as the name. The public certificate page shows your name, the course and the date; its HyperCV check page also shows your Passport ID, and the data behind it holds your wallet address.

学员。来自你的 Passport：你的 Passport ID、姓名、电子邮箱和钱包地址，以及你首次和最近一次访问的时间。登录会话有效期为 24 小时。

学习记录。你开始和完成的课程、你学到的步骤、每一次测验作答（包括你给出的答案和得分），以及你的操作日志（打开的页面、登录、完成的步骤、测验、证书的签发和查看）。

证书。你通过课程且证书服务开启时，HyperCV 会记录你的证书：你的姓名、Passport ID、课程和日期的指纹会连同你的钱包和 HyperAcademy 的钱包写入 838838 链。如果你的 Passport 没有填写姓名，会以你的电子邮箱作为姓名。公开的证书页面显示你的姓名、课程和日期；其 HyperCV 核验页面还会显示你的 Passport ID，页面背后的数据包含你的钱包地址。

Linking a machine. When you link a PC, it sends its public key, its name (by default, the computer's name), its operating system and its IP address. When you claim a Quipu machine, we note your email address with it.

Hardware. The operating system and its version, the maker and model, the processor, the memory, the disks (their identifiers, which on Windows are the volume serial numbers, where they are mounted, their file system, size and free space), AI chips, graphics cards (model, memory, driver, CUDA version and the card's unique ID) and the AI models installed for Ollama. We keep a history of changes.

While it is connected. Every minute, its IP address, processor and memory use, bandwidth and how long it has been on; and, each time it connects or disconnects, its IP address. These are kept. Every few seconds, whether someone is using the computer, its temperatures and its graphics card load; these are used live and not stored. We also keep the Cloudflare data centre and the country your machine connects through, what it shares, and your settings, with a log of changes.

Earnings are public. Each day's checked work is written to chain 838838 with the owner's wallet address, the machine's ID, the kind and amount of work and the HYPEC earned. A public proof page shows the machine's serial number, the wallet, the amounts and the job IDs.

The network map. The public map at hypercluster.org/network shows, for the city of each Cloudflare data centre (or the country, when the city is not known), how many machines connect through it, how many are online and what they share, counting machines seen in the last 7 days. It shows no machine IDs, owners or IP addresses. Where only a few machines are in one city, the count may point to a single machine.

Quipu machine orders. Your name, email address, phone number, delivery address and what you ordered. The order confirmation is sent through Mailgun.

绑定设备。你绑定电脑时，电脑会发送其公钥、名称（默认是电脑名）、操作系统和 IP 地址。你认领 Quipu 设备时，我们会记录你的电子邮箱。

硬件信息。操作系统及版本、制造商和型号、处理器、内存、硬盘（其标识，在 Windows 上为卷序列号；挂载位置、文件系统、容量和剩余空间）、AI 芯片、显卡（型号、显存、驱动、CUDA 版本和显卡的唯一 ID），以及为 Ollama 安装的 AI 模型。我们会保留变更历史。

连接期间。每分钟记录其 IP 地址、处理器和内存使用率、带宽以及开机时长；每次连接或断开时记录其 IP 地址。这些信息会被保存。每隔几秒还会获取是否有人在使用这台电脑、温度和显卡负载；这些信息只用于实时调度，不会保存。我们还会保存你的设备连接时经过的 Cloudflare 数据中心和国家、它分享的资源以及你的设置，并记录变更。

收益是公开的。每天经核查的工作会连同所有者的钱包地址、设备 ID、工作类型和数量以及赚取的 HYPEC 写入 838838 链。公开的证明页面会显示设备序列号、钱包、数量和任务 ID。

网络地图。hypercluster.org/network 上的公开地图按每个 Cloudflare 数据中心所在城市（城市未知时按国家）显示经该数据中心连接的设备数量、在线数量以及它们分享的资源，统计范围为过去 7 天内出现过的设备。地图不显示设备 ID、所有者或 IP 地址。如果某个城市只有少数几台设备，这一数量可能指向某一台设备。

Quipu 设备订单。你的姓名、电子邮箱、电话号码、收货地址以及你订购的产品。订单确认邮件通过 Mailgun 发送。

Cookies we set. Small files your browser keeps for our sites. We use them to keep you signed in, to protect sign-in, to remember your language and to remember an invite code:

Local storage. Some things are kept in your browser rather than in cookies: the invite code you arrived with (hc-ref, on every site, until you clear it); a sign-in token (token, 7 days) on HyperCloud and some older hypercluster.org pages; on some older pages, an invite code and a note that you closed a notice; and, on each site where you use the assistant, its conversation in that tab (hca:chat, until you close the tab).

Analytics. Two tools count visits:

• Google Analytics, on the pages of HyperCV and HyperAcademy, except HyperCV pages whose address holds a secret (share and claim links, and signing in). Google receives your IP address, browser details and the address of each page you open, and sets the _ga cookies.
• Umami, loaded from analytics.hefes.net on some older pages of hypercluster.org, on most HyperCloud pages and on the faucet. It receives your IP address, browser details and the page address, and sets no cookies.

Code and fonts from others. Some pages load code from jsDelivr (cdn.jsdelivr.net), HyperCloud's notes load an editor from cdn.quilljs.com, some older HyperCloud pages load Google Fonts, Passport's sign-in loads Cloudflare Turnstile, and HyperAcademy lessons with a video load it from YouTube, which may set its own cookies. Your browser connects to these services directly, so they see your IP address.

No advertising. We use no advertising cookies and no advertising or social-media trackers.

You can block or delete cookies in your browser. Without the sign-in cookies you cannot stay signed in.

我们设置的 Cookie。Cookie 是你的浏览器为我们的网站保存的小文件。我们用它来保持你的登录状态、保护登录过程、记住你的语言以及记住邀请码：

本地存储。有些信息保存在你的浏览器中，而不是 Cookie 里：你访问时带来的邀请码（hc-ref，所有网站，直到你清除）；HyperCloud 和 hypercluster.org 部分旧页面上的登录令牌（token，7 天）；在一些旧页面上，邀请码和你已关闭某条提示的记录；以及在你使用助手的每个网站上，该标签页中的对话（hca:chat，直到你关闭标签页）。

统计分析。有两个工具用于统计访问量：

• Google Analytics：用于 HyperCV 和 HyperAcademy 的页面，但地址中含有秘密的 HyperCV 页面（分享链接、领取链接和登录页面）除外。Google 会收到你的 IP 地址、浏览器信息以及你打开的每个页面的地址，并设置 _ga Cookie。
• Umami：从 analytics.hefes.net 加载，用于 hypercluster.org 的部分旧页面、大多数 HyperCloud 页面以及水龙头页面。它会收到你的 IP 地址、浏览器信息和页面地址，不设置 Cookie。

来自他方的代码和字体。部分页面从 jsDelivr（cdn.jsdelivr.net）加载代码；HyperCloud 的笔记从 cdn.quilljs.com 加载编辑器；部分旧的 HyperCloud 页面加载 Google Fonts；Passport 的登录加载 Cloudflare Turnstile；HyperAcademy 中带视频的课程从 YouTube 加载视频，YouTube 可能会设置自己的 Cookie。你的浏览器会直接连接这些服务，因此它们能看到你的 IP 地址。

没有广告。我们不使用广告 Cookie，也不使用任何广告或社交媒体跟踪工具。

你可以在浏览器中屏蔽或删除 Cookie。没有登录 Cookie，你将无法保持登录状态。

We share personal data only as this policy describes:

We may also give data to the police, courts or other authorities when the law requires it, or when it is needed to protect people's safety or rights, or to deal with illegal content. If the services are transferred to another organisation, your data would go with them; we would tell you first.

我们只按本政策所述的方式分享个人数据：

在法律要求时，或为保护他人的安全或权利、处理违法内容所必需时，我们也可能向警方、法院或其他主管机关提供数据。如果本服务转让给其他机构，你的数据将随之转移；我们会事先通知你。

To provide what you ask for: your account, payments, storage, training and running your AI, picture analysis, seals and credentials, courses and your machine's work and earnings.

For our legitimate interests: keeping the services and the network secure, preventing fraud and abuse, checking that machines do the work they are paid for, and understanding how the services are used so we can improve them.

To meet the law: for example keeping accounting records, and answering lawful requests from authorities.

With your consent, where the law requires it. Where we rely on consent, you can withdraw it at any time.

为了提供你所要求的服务：你的账户、付款、存储、训练和运行你的 AI、图片分析、存证和凭证、课程，以及你的设备的工作和收益。

为了我们的正当利益：保障本服务和网络的安全，防止欺诈和滥用，核查设备是否完成了所获报酬对应的工作，以及了解本服务的使用情况以便改进。

为了遵守法律：例如保存会计记录，以及回应主管机关的合法要求。

经你同意：在法律要求时。凡是基于你的同意的处理，你可以随时撤回同意。

The apps' databases run on servers HyperCluster operates itself, not on an outside database service. Encrypted copies of HyperCloud files are also kept on the storage network, which includes members' machines in many countries.

The outside services named above are in other countries, including China (DeepSeek) and the United States (Anthropic, Google, Mailgun, SendGrid), and Cloudflare works worldwide. So your data may be handled in countries other than your own, whose data-protection laws may differ from yours.

各应用的数据库运行在 HyperCluster 自己运营的服务器上，而不是外部数据库服务上。HyperCloud 文件的加密副本也保存在存储网络中，其中包括位于多个国家的会员设备。

上述外部服务位于其他国家，包括中国（DeepSeek）和美国（Anthropic、Google、Mailgun、SendGrid），Cloudflare 则在全球范围运营。因此，你的数据可能在你所在国家以外的国家处理，这些国家的数据保护法律可能与你所在地不同。

We keep data while it is needed for what this policy describes. Where we have not yet set a time limit, the table says so; you can always ask us to delete data we no longer need (see Your rights).

我们会在本政策所述用途需要期间保存数据。尚未设定期限的，表中会注明；对于我们不再需要的数据，你随时可以要求我们删除（见你的权利）。

Our sites use HTTPS, and our servers accept web traffic only through Cloudflare. Passwords are kept only as hashes. The recovery phrases of wallets Passport makes, HyperCloud files, HyperCV documents, training data and the Passport record are encrypted with AES-256-GCM. HyperAI API keys, machines' access keys, the codes and links we email you, and the secret parts of HyperCV share and claim links (apart from the encrypted copies in 8.6) are kept only as fingerprints.

Most of this encryption uses keys our servers hold, so it is not end-to-end: someone who took full control of our servers could read the data. No system is completely secure. If a breach puts your data at risk, we will tell you and the authorities where the law requires it.

我们的网站使用 HTTPS，我们的服务器只接受经由 Cloudflare 的网页流量。密码只以哈希值形式保存。Passport 所生成钱包的助记词、HyperCloud 文件、HyperCV 文件、训练数据和 Passport 记录均用 AES-256-GCM 加密。HyperAI 的 API 密钥、设备的访问密钥、我们通过电子邮件发送的验证码和链接，以及 HyperCV 分享链接和领取链接的秘密部分（8.6 所述的加密副本除外）只以指纹形式保存。

这些加密大多使用我们服务器持有的密钥，因此不是端到端加密：完全控制我们服务器的人可以读取这些数据。没有任何系统是绝对安全的。如果数据泄露使你的数据面临风险，我们会在法律要求时通知你和主管机关。

Depending on the law where you live, you can ask us to:

• give you a copy of the personal data we hold about you, in a form you can take elsewhere;
• correct data that is wrong or incomplete;
• delete your data, or close your account;
• stop or limit some uses of your data, or object to them;
• withdraw a consent you gave.

How to ask. Write to [email protected] from your Passport's email address. Say what you would like and which apps it is about. We may need to check that it is really you. We will answer as soon as we can, and within the time the law where you live allows. Asking is free.

What you can do yourself. In Passport: change your name and phone number, see your sign-in sessions and sign the others out, disconnect apps, and download your wallet's recovery phrase and key. In the apps: download your files; delete your files, notes, datasets and models; and stop sharing a machine. To change your email address, write to us.

What cannot be deleted. Records on the blockchain cannot be changed or removed by anyone, including us. We may also keep data the law requires us to keep (such as payment records), or that we need for a legal claim or an investigation. If we cannot do all you ask, we will tell you why.

For documents and credentials an organisation issued through HyperCV, you can also ask that organisation.

If you are not happy with our answer, you can complain to the data-protection authority where you live.

根据你所在地的法律，你可以要求我们：

• 提供我们所持有的关于你的个人数据副本，并以你可以转移到其他地方的格式提供；
• 更正错误或不完整的数据；
• 删除你的数据，或关闭你的账户；
• 停止或限制对你数据的某些使用，或对其提出反对；
• 撤回你曾给予的同意。

如何申请。请用你的 Passport 邮箱发送邮件至 [email protected]，说明你的要求以及涉及哪些应用。我们可能需要核实是你本人。我们会尽快答复，并在你所在地法律允许的期限内答复。申请是免费的。

你可以自己完成的操作。在 Passport 中：修改姓名和手机号码，查看登录会话并退出其他会话，断开应用连接，下载钱包的助记词和私钥。在各应用中：下载你的文件；删除你的文件、笔记、数据集和模型；停止分享设备。如需更改电子邮箱，请联系我们。

无法删除的内容。区块链上的记录任何人都无法更改或删除，包括我们。我们也可能保留法律要求我们保留的数据（例如付款记录），或因法律索赔或调查而需要的数据。如果我们无法完全满足你的要求，会告诉你原因。

对于机构通过 HyperCV 签发的文件和凭证，你也可以向该机构提出要求。

如果你对我们的答复不满意，可以向你所在地的数据保护主管机关投诉。

The services are not meant for anyone under 18, and we do not knowingly collect data about children. If you think a child has given us personal data, write to [email protected] and we will delete it.

本服务不面向未满 18 周岁的人，我们不会故意收集儿童的数据。如果你认为有儿童向我们提供了个人数据，请发送邮件至 [email protected]，我们会将其删除。

We will update this policy when what we do with data changes. The date at the top always shows the latest version. For changes that matter, we will tell you in the apps or by email before they take effect, where we reasonably can.

当我们处理数据的方式发生变化时，我们会更新本政策，页面顶部的日期始终显示最新版本的日期。对于重要变更，我们会在合理可行的情况下，在变更生效前通过应用内或电子邮件通知你。

HyperCluster Foundation. Privacy questions and data requests: [email protected].

HyperCluster Foundation。隐私问题和数据请求：[email protected]。