English · 繁體中文

Effective date: 2026-11-06
Last updated: 2026-11-07

At a glance

  • Your browsing is never sent anywhere. Elselet has no account, no crash reporting, and no advertising, and we run no server for the App. Your URLs, page titles, bookmarks, notes, folder names, searches, and history are never sent to us or to anyone else.
  • Anonymous usage counts only. We use TelemetryDeck to count a short, fixed list of events, such as "a bookmark was saved." These events contain no content and cannot be linked to you (see Section 3).
  • Your data stays on your iPhone, encrypted. Bookmarks, folders, history, and open tabs are encrypted with a key protected by your Elselet password and tied to this device. They are left out of iCloud and computer backups.
  • No tracking. We do not track you across apps or websites and do not use the Advertising Identifier (IDFA).
  • Websites you visit can still see you. Elselet keeps your records private on your phone. It is not anonymity software: the websites you visit and your network provider can see those connections, as with any browser.
  • Purchases go through Apple. We never see your payment details.

1. Who this policy is from

Elselet ("the App") is made by TechnicolorLife LLC ("we," "us," or "TechnicolorLife"). This Privacy Policy explains what information the App handles, where it is kept, and what your choices are. On the App Store, the App's privacy label lists only "Usage Data: Product Interaction" and "Identifiers: Device ID" (the anonymous identifier in Section 3), both not linked to you, not used for tracking, and used for analytics.

2. What Elselet is for

Elselet is an iPhone private browser with encrypted bookmarks behind a password just for the App, separate from your iPhone passcode. It includes a web browser with tabs, bookmarks with notes and folders, browsing history, a "Share to Elselet" share extension, optional Face ID unlock, and a choice of search engine.

3. Information we collect: anonymous analytics only

We do not collect any personal information. There is no account, sign-up, or login, and the App contains no third-party SDKs: no advertising, tracking, crash-reporting, or analytics SDKs. To learn which features people use, a small client built into the App sends a short, fixed list of anonymous events directly to TelemetryDeck, a privacy-focused analytics service based in the EU.

3.1 Events the App sends

Each event is a fixed name and, where noted, one value from a short fixed list:

  • App session started (once each time the App is opened).
  • Setup finished, with whether Face ID was turned on.
  • Unlocked, with the method used (password or Face ID).
  • A bookmark was saved; a folder was created.
  • Shared links were imported (sent by the main App after you unlock it, never by the share extension).
  • The purchase page was shown, with where it was opened (bookmark limit or Settings); a purchase was completed or restored.
  • A setting was changed: which one (language, search engine, or site icons) and its new value, for example "DuckDuckGo" or "on."

Each event also carries the time it was sent and a random session ID that is created each time the App is opened and kept only in memory. The App's built-in client attaches these technical details as well: app version and build, iOS version, device model, system language and region, and an anonymous identifier. That identifier is a one-way hash of an app-specific identifier, made on your device, and TelemetryDeck salts and hashes it again on its server, so it cannot be linked to you, your Apple Account, or other apps. TelemetryDeck does not store IP addresses.

3.2 What is never sent

  • URLs, page titles, visited websites or domains, search terms, bookmark notes, folder names, or shared links.
  • Any count or measurement of your content, such as how many bookmarks or tabs you have or how long you spend on a page.
  • Anything from the share extension, which sends no events at all.
  • Anything from test or debug builds, which send nothing.

You can block telemetrydeck.com on your network to opt out entirely; the App works the same without it.

4. Data stored on your device

The following data is kept only on your iPhone. It is never collected by us.

4.1 Bookmarks, folders, history, and tabs

Bookmarks (URL, title, note, folder), folders and their names, browsing history, open tabs, and the "last used folder" setting are encrypted with AES-256-GCM. The key is protected by your Elselet password through a slow key-derivation function (PBKDF2-HMAC-SHA256, 600,000 iterations) and is also bound to this specific device through the Secure Enclave or a device-only Keychain item. This data is excluded from iCloud and computer backups.

4.2 Links shared into Elselet

When you save a link from Safari or another app with "Share to Elselet," the link is encrypted with a public key the moment it is shared (HPKE). It waits in the "Pending" list, and only the main App, once unlocked, can open it.

4.3 Website data (cookies, logins, cache)

Cookies, login sessions, and cache are managed by Apple's WebKit in a data store used only by Elselet, under iOS data protection. This website data is not additionally encrypted with your Elselet password. It is cleared automatically the first time you unlock the App after local midnight, and you can clear it at any time in Settings.

4.4 Site icons

To show bookmarks with their icons, the App downloads each website's own icon file (favicon) from that website and stores it encrypted, like your bookmarks. You can turn site icons off in Settings; the App then shows letters instead and does not download icons.

4.5 Folder cover photos

You can choose a cover photo for a folder with Apple's photo picker. Only the photo you choose is copied into the App, where it is stored encrypted. The App gets no access to the rest of your photo library and does not ask for Photos permission.

4.6 Settings and security counters

Your settings (language, search engine, Face ID on or off) are stored on the device. A failed-password counter is stored in the device Keychain to slow down password guessing.

5. Your password, Face ID, and data loss

  • Your Elselet password is chosen by you and is never sent anywhere.
  • There is no password recovery. If you forget it, nobody, including us, can recover your data. The only way to start over is to delete and reinstall the App, which erases all Elselet data.
  • Your data does not move to a new phone. Because it is tied to this device and left out of backups, switching phones or restoring from a backup means the data is gone.
  • Face ID is optional and handled entirely by Apple's LocalAuthentication. The App never receives or stores face data; it only learns whether the scan succeeded. Your iPhone passcode is never accepted in place of your Elselet password.
  • Repeated wrong passwords cause growing wait times. Data is never erased automatically.

6. Network connections

The App connects only to:

  • Websites you choose to visit, and the content those websites load. Those websites and your network provider can see the connection, as with any browser. Their own privacy policies and cookies apply.
  • The search engine you pick (Google, DuckDuckGo, or Bing), when you type a search into the address bar. That search engine's privacy policy applies.
  • Websites' own icon files, for bookmark icons, if site icons are on.
  • Apple's App Store (StoreKit), for the purchase and "Restore Purchases."
  • TelemetryDeck, for the anonymous events in Section 3 only.

There are no other connections. We run no server of our own, so none of them goes to TechnicolorLife directly.

7. In-app purchase

"Elselet Full" is a one-time (non-consumable) purchase made through Apple's App Store. Apple handles the payment and the purchase record; we never see your card or other payment details. You can restore your purchase through the App.

8. Sharing out of Elselet

If you share a page from Elselet to another app, that app's own privacy practices apply to what you share.

9. Limits you should know about

  • Website cookies and cache are protected by iOS but are not encrypted with your Elselet password (see Section 4.3). They are cleared daily.
  • The App cannot block screenshots or screen recording.
  • Private browsing is not anonymity. There is no VPN, proxy, or tracker blocking.
  • The App cannot delete records you left in Safari or other apps.

10. Your rights (GDPR, CCPA/CPRA)

We do not collect personal data. The anonymous analytics in Section 3 contain none and cannot be tied back to you; to the extent any law treats them as processing, the legal basis is legitimate interests (understanding which features are used so we can improve the App), and you can opt out as described in Section 3.2. TelemetryDeck processes these events in the EU. You control your data directly on your device: you can delete bookmarks and history in the App, clear website data in Settings, use "Erase everything and start over" in Settings while unlocked, or delete the App to remove all of its data. TechnicolorLife does not sell or share personal information as defined under the CCPA/CPRA. If you believe your data has been handled improperly, you may contact your local data protection authority.

11. Children

Elselet is not directed at children. Because it gives unrestricted access to the web, it is rated 17+ on the App Store. We do not collect personal information from anyone, including children; the only data sent off the device is the anonymous events in Section 3.

12. Security

Your App data is encrypted as described in Section 4. No method of storage is 100% secure. Choose an Elselet password that others cannot guess, and keep your iPhone and Apple Account protected.

13. App Tracking Transparency

Elselet does not track you across apps or websites owned by other companies, so it never shows an App Tracking Transparency prompt.

14. Changes to this policy

We may update this Privacy Policy over time. Because there is no account, we will give notice of changes by updating this page, including the "Last updated" date, and through App updates.

15. Contact us

If you have questions about this policy, please contact us at:

privacy@technicolorlife.app
TechnicolorLife LLC

Elselet 隱私權政策

English · 繁體中文

生效日期：2026-11-06
最後更新：2026-11-07

如果中文版和英文版的內容有出入，以英文版為準。

重點摘要

  • 你的瀏覽內容不會傳到任何地方。Elselet 沒有帳號、沒有當機回報、沒有廣告，我們也沒有為這個 App 架設伺服器。你的網址、網頁標題、收藏、備註、資料夾名稱、搜尋字和歷史紀錄，都不會傳給我們或任何人。
  • 只有匿名的使用次數。我們用 TelemetryDeck 記錄一小組固定的事件，例如「存了一筆收藏」。這些事件不含任何內容，也無法連結到你本人（見第 3 節）。
  • 資料只存在你的 iPhone 上，而且加密。收藏、資料夾、歷史紀錄和分頁都經過加密，金鑰由你的 Elselet 密碼保護，並且綁定這台手機，不會進入 iCloud 或電腦備份。
  • 不追蹤。我們不會跨 App 或跨網站追蹤你，也不使用廣告識別碼（IDFA）。
  • 你造訪的網站仍然看得到連線。Elselet 讓你的紀錄在手機上保持私密，但它不是匿名工具。和任何瀏覽器一樣，你造訪的網站和你的網路業者都看得到這些連線。
  • 付款由 Apple 處理。我們看不到你的付款資料。

1. 本政策的提供者

Elselet（以下稱「本 App」）由 TechnicolorLife LLC（以下稱「我們」）開發。本隱私權政策說明本 App 處理哪些資訊、存在哪裡，以及你有哪些選擇。本 App 在 App Store 的隱私標籤只列出「使用資料：產品互動」和「識別碼：裝置 ID」（即第 3 節的匿名識別碼），兩者都不與你的身分連結、不用於追蹤，用途是分析。

2. Elselet 是什麼

Elselet 是一個 iPhone 私密瀏覽器，收藏都經過加密，並用一組只屬於本 App 的密碼保護，和 iPhone 的解鎖密碼分開。功能包括：有分頁的網頁瀏覽器、可加備註和資料夾的收藏、瀏覽歷史紀錄、「分享到 Elselet」分享延伸功能、可選用的 Face ID 解鎖，以及可選擇的搜尋引擎。

3. 我們蒐集的資訊：只有匿名分析

我們不蒐集任何個人資訊。沒有帳號，不需要註冊或登入，本 App 也沒有任何第三方 SDK：沒有廣告、追蹤、當機回報或分析 SDK。為了了解大家用了哪些功能，本 App 內建的一個小程式會把一小組固定的匿名事件，直接送到 TelemetryDeck，一個位於歐盟、注重隱私的分析服務。

3.1 本 App 會送出的事件

每個事件都是固定的名稱，部分事件附帶一個從固定清單裡選出的值：

  • App 開啟（每次打開 App 送一次）。
  • 完成設定，以及有沒有開啟 Face ID。
  • 解鎖，以及解鎖方式（密碼或 Face ID）。
  • 存了一筆收藏；新增了一個資料夾。
  • 匯入分享的連結（由主 App 在解鎖後送出，分享延伸功能本身不會送）。
  • 看到購買頁，以及從哪裡打開（收藏數量上限或設定）；完成購買或回復購買。
  • 變更設定：哪一項（語言、搜尋引擎或網站小圖示）以及新的值，例如「DuckDuckGo」或「開啟」。

每個事件也會帶上發送時間，以及一個工作階段 ID。這個 ID 在每次打開 App 時隨機產生，只存在記憶體裡。本 App 內建的小程式也會附上這些技術資訊：App 版本和組建編號、iOS 版本、裝置型號、系統語言和地區，以及一個匿名識別碼。這個識別碼是在你的手機上，把 App 專用的識別碼做單向雜湊產生，TelemetryDeck 在伺服器上會再加鹽雜湊一次，所以無法連結到你本人、你的 Apple 帳號或其他 App。TelemetryDeck 不會儲存 IP 位址。

3.2 絕不送出的內容

  • 網址、網頁標題、造訪過的網站或網域、搜尋字、收藏備註、資料夾名稱或分享的連結。
  • 任何關於你內容的數量或測量，例如收藏或分頁有幾筆、在網頁上停留多久。
  • 分享延伸功能不送出任何事件。
  • 測試版和開發版完全不送出任何資料。

你可以在網路上封鎖 telemetrydeck.com 來完全停用分析，App 的功能不受影響。

4. 存在手機上的資料

以下資料只存在你的 iPhone 上，我們不會蒐集。

4.1 收藏、資料夾、歷史紀錄和分頁

收藏（網址、標題、備註、資料夾）、資料夾和名稱、瀏覽歷史紀錄、開啟中的分頁，以及「上次使用的資料夾」設定，都以 AES-256-GCM 加密。金鑰由你的 Elselet 密碼透過慢速金鑰衍生函式（PBKDF2-HMAC-SHA256，60 萬次迭代）保護，並透過 Secure Enclave 或僅限本機的鑰匙圈項目綁定這台手機。這些資料不會進入 iCloud 或電腦備份。

4.2 分享進 Elselet 的連結

你從 Safari 或其他 App 用「分享到 Elselet」存下連結時，連結在分享的當下就會用公開金鑰加密（HPKE），放在「待整理」清單裡。只有在主 App 解鎖後才能打開。

4.3 網站資料（cookies、登入狀態、快取）

Cookies、登入狀態和快取由 Apple 的 WebKit 管理，存放在只有 Elselet 使用的資料區，受 iOS 資料保護機制保護。這些網站資料沒有額外用你的 Elselet 密碼加密。每天過了午夜後第一次解鎖本 App 時會自動清除，你也可以隨時在設定裡手動清除。

4.4 網站小圖示

為了在收藏旁顯示網站圖示，本 App 會從該網站下載它自己的圖示檔（favicon），並和收藏一樣加密保存。你可以在設定裡關閉網站小圖示，關閉後本 App 會改用文字代替，也不會再下載圖示。

4.5 資料夾封面照片

你可以用 Apple 的照片選擇器為資料夾挑一張封面照片。只有你選的那一張會複製進本 App 並加密保存。本 App 看不到相簿裡的其他照片，也不會要求照片存取權限。

4.6 設定和安全計數

你的設定（語言、搜尋引擎、Face ID 開關）存在手機上。密碼輸入錯誤的次數記在手機的鑰匙圈裡，用來減緩猜密碼的速度。

5. 密碼、Face ID 與資料遺失

  • Elselet 密碼由你自己設定，不會傳到任何地方。
  • 忘記密碼無法救回。任何人，包括我們，都無法幫你取回資料。唯一的重新開始方式是刪除並重新安裝本 App，這會清除所有 Elselet 資料。
  • 換手機時資料不會跟著走。資料綁定這台手機，也不進備份，所以換手機或從備份還原後，資料就不見了。
  • Face ID 可以自由選用，完全由 Apple 的 LocalAuthentication 處理。本 App 不會取得或儲存任何臉部資料，只會知道辨識是否成功。iPhone 的解鎖密碼不能代替 Elselet 密碼。
  • 連續輸入錯誤密碼，等待時間會越來越長，但資料不會被自動清除。

6. 對外連線

本 App 只會連線到：

  • 你自己選擇造訪的網站，以及這些網站載入的內容。和任何瀏覽器一樣，這些網站和你的網路業者看得到連線，並適用它們自己的隱私權政策和 cookies。
  • 你選擇的搜尋引擎（Google、DuckDuckGo 或 Bing），在你從網址列搜尋時。適用該搜尋引擎的隱私權政策。
  • 網站自己的圖示檔，用來顯示收藏的小圖示（網站小圖示開啟時）。
  • Apple 的 App Store（StoreKit），用於購買和「回復購買」。
  • TelemetryDeck，只用來送出第 3 節列出的匿名事件。

除此之外沒有其他連線。我們沒有自己的伺服器，所以沒有任何連線會直接傳到 TechnicolorLife。

7. App 內購買

「Elselet 完整版」是透過 Apple App Store 進行的一次性（非消耗型）購買。付款和購買紀錄由 Apple 處理，我們看不到你的信用卡或其他付款資料。你可以在本 App 內回復購買。

8. 從 Elselet 分享出去

你把網頁從 Elselet 分享到其他 App 時，分享出去的內容適用該 App 自己的隱私做法。

9. 你應該知道的限制

  • 網站的 cookies 和快取受 iOS 保護，但沒有用你的 Elselet 密碼加密（見第 4.3 節），每天會清除一次。
  • 本 App 無法阻止截圖或螢幕錄影。
  • 私密瀏覽不等於匿名。本 App 沒有 VPN、代理伺服器或阻擋追蹤器的功能。
  • 本 App 無法刪除你留在 Safari 或其他 App 裡的紀錄。

10. 你的權利（GDPR、CCPA/CPRA）

我們不蒐集個人資料。第 3 節的匿名分析不含個人資料，也無法追溯到你；如果任何法律將其視為資料處理，其法律依據為正當利益（了解哪些功能被使用，以改善本 App），你也可以依第 3.2 節的方式停用。TelemetryDeck 在歐盟處理這些事件。你可以直接在手機上管理自己的資料：在本 App 內刪除收藏和歷史紀錄、在設定裡清除網站資料、解鎖時在設定裡使用「清除全部並重新開始」，或刪除本 App 以移除所有資料。TechnicolorLife 不會出售或分享 CCPA/CPRA 所定義的個人資訊。如果你認為資料遭到不當處理，可以向你所在地的資料保護主管機關反映。

11. 兒童

Elselet 並非以兒童為對象。因為它可以自由瀏覽任何網站，在 App Store 的年齡分級為 17+。我們不向任何人蒐集個人資訊，包括兒童；唯一離開手機的資料是第 3 節的匿名事件。

12. 安全性

你的 App 資料會依照第 4 節的方式加密。沒有任何儲存方式能做到百分之百安全。請設定別人猜不到的 Elselet 密碼，並保護好你的 iPhone 和 Apple 帳號。

13. App 追蹤透明度

Elselet 不會跨其他公司的 App 或網站追蹤你，所以不會顯示「App 追蹤透明度」的詢問視窗。

14. 政策變更

我們可能會更新本隱私權政策。因為沒有帳號，我們會透過更新本頁面（包括「最後更新」日期）以及 App 更新來通知你。

15. 聯絡我們

如果你對本政策有任何問題，請來信：

privacy@technicolorlife.app
TechnicolorLife LLC