本地优先

提示词导演是用于收藏、整理、检索、备份和分享个人创作资料的 Chrome 扩展。扩展不提供开发者数据服务器，不创建账号，不收集使用统计，不投放广告，也不出售用户数据。

案例、媒体、标签、创作 Skill、设置和 API Key 默认保存在浏览器扩展的本地存储中。截图处理、文档提取、资料整理、ZIP 分享包和离线预览均在本机完成。

处理的数据

只有在用户主动收藏、导入、导出、分析、生成或进行提示词创作时，扩展才会处理相关数据。这可能包括：

• 用户明确选择的网页文字、图片、视频、文档、下载资源链接、截图、标题、作者与来源信息；
• 用户创建或确认的提示词、标签、色卡、创作 Skill、项目、笔记和设置；
• 用户连接的 AI 服务地址、模型、API Key、发送授权与服务能力信息；
• 用户主动导入、导出或分享的资料及本地生成的预览文件。

网页采集与本地保存

• 网页采集、截图、选图和列表采集只在用户主动启动后运行，不会绕过登录、验证码、付费墙、访问控制或反自动化限制。
• 正文与媒体会在保存前显示给用户确认；只有最终保存方案中的内容会写入案例。
• 公开媒体读取失败时，扩展可以在用户已授权的当前网页会话中读取用户已确认的媒体，但不会读取、保存或导出 Cookie、Token 或登录请求头。
• 用户保存所选抖音、YouTube 或 Bilibili 视频时，可由已安装的本机视频组件解析作品地址，向原网站下载并合并音视频。只传入本次作品与媒体地址，不导出浏览器 Cookie、登录请求头或 AI 密钥，不调用付费解析服务。暂存视频在传输完成、取消或连接关闭后清理，正式原件保存在资料库。
• PDF、Markdown、SKILL.md、TXT、HTML 和 RTF 仅在用户明确选择且真实类型与容量校验通过后保存；压缩包、程序和未知文件不会自动导入。
• API Key 不进入导出包、分享包、创作草稿、诊断包或日志。

可选 AI 服务

提示词导演允许用户为文字标签、Skill 提炼、创作规划、图片分析、视频分析、图片生成和视频生成分别选择第三方 AI 服务或自定义兼容接口。

• 安装扩展不会自动发起 AI 请求。真实请求需要服务、模型、必要权限和用户发送授权；付费媒体分析或生成还需要当前操作的单次确认。
• 扩展只发送完成当前任务所必需、且由用户明确选择或提交的内容，不会自动发送整库、未选择案例或 API Key。
• 纯文字创作模式不会读取、分析或发送图片。
• 内容通过 HTTPS 直接发送给用户选择的服务。开发者不接收或中转 AI 请求内容；第三方服务按其自身条款和隐私政策处理数据。

分享、保留与删除

数据只会在用户主动发送到已配置的 AI 服务、交给配对的本机 Agent、导出或迁移资料、或创建并分发分享包时离开扩展的本地存储。本地数据会保留，直到用户修改或删除、清除扩展数据，或卸载扩展。用户可以在卸载前创建本地备份，并在设置中清除 API Key 和发送授权。

启用 Agent 连接后，所请求的案例内容和原件会交给配对的本机 Agent。Agent 宿主可能按用户指令及其自身设置将材料发送给所配置的模型或服务，这部分处理由宿主管理。断开连接会拒绝新的 Agent 请求，已提交的任务继续执行。

Chrome Web Store Limited Use

提示词导演对权限和用户数据的使用遵守 Chrome Web Store User Data Policy 的 Limited Use 要求，只用于提供或改进本政策所述、用户可见的单一用途与功能。用户数据不会被出售，不会用于个性化广告、再营销或基于兴趣的广告。除用户为明确支持请求另行授权，或法律与安全义务确有要求外，不允许人工读取用户数据。

权限用途

• activeTab、scripting：仅在用户主动启动采集、选图或截图操作时访问当前页面。
• webRequest：仅在已授权网站上识别媒体响应地址与类型，用于视频数量角标和采集预览。候选保存在浏览器会话中，换页或关闭标签页后清除；不会读取请求凭据、修改请求或上传浏览记录，跨域媒体仍受网站权限约束。
• alarms：安排或恢复本地后台任务，不用于跟踪。
• contextMenus、sidePanel：提供右键收藏入口和侧边栏工作区。
• downloads、offscreen：保存用户请求的文件，并在本机处理截图、媒体、文档或 ZIP。
• storage、unlimitedStorage：保存用户选择的资料、媒体、设置与本地 AI 配置。
• 固定 GitHub 与 GitHub Pages 域名：读取官方精选目录、用户选择的精选 Release 资源和视频组件安装包；本地开发版还会检查官方更新，并在用户确认后下载程序更新包。
• 可选的 downloads.open：仅在用户选择安装视频组件时申请，供用户点击“打开安装包”打开已下载的官方安装包；不会自动执行下载文件。
• 可选的 nativeMessaging：在用户启用 Agent 连接或安装视频组件时申请。配对的 Agent 可按指令搜索案例、读取选定原件、采集网址和回存材料，不能通过该接口读取 AI 服务密钥。本机视频解析独立于 Agent 开关，仅在用户保存所选视频时调用。
• 启用 Agent 连接时，可选的 <all_urls> 用于配对 Agent 按用户指令在独立标签页采集网址；不会记录或上传浏览历史。
• 可选的 <all_urls>、clipboardRead 与 declarativeNetRequestWithHostAccess：仅在用户主动使用相应功能并授予所需权限后使用。

联系方式

请通过 PromptDirector 支持页面 联系项目维护者。

Local-first handling

PromptDirector is a Chrome extension for collecting, organizing, searching, backing up, and sharing personal creative references. It has no developer-operated data server or account system, does not collect analytics, does not show ads, and does not sell user data.

Cases, media, tags, Creative Skills, settings, and API keys are stored in local extension storage by default. Screenshot processing, document extraction, archive creation, and offline previews run locally.

Data handled

PromptDirector handles data only when the user explicitly captures, imports, exports, analyzes, generates, or composes with it. This can include selected website text and resources, source URLs and attribution, screenshots, prompts, notes, projects, tags, Creative Skills, settings, and credentials for AI services chosen by the user.

API keys are excluded from exports, shared packages, drafts, diagnostics, and logs. Page capture runs only after a user action and does not bypass authentication, paywalls, access controls, CAPTCHAs, or anti-automation measures.

When the user saves a selected Douyin, YouTube or Bilibili video, an installed local video component may resolve its work URL, download from the original platform and merge audio and video. Only the selected work and media URLs are passed to it. It does not export browser cookies, login request headers or AI keys, or use paid parsing services. Temporary videos are removed after transfer, cancellation or connection closure; saved originals remain in the library.

Optional AI services

No external AI request runs merely because the extension is installed. A real request requires the configured service, selected model, required permission, and the user's sending consent. Paid media analysis or generation also requires a separate confirmation for the current action.

Only content selected or submitted for the current operation is sent directly over HTTPS to the provider or compatible endpoint chosen by the user. PromptDirector does not silently send the full library, unselected cases, images in text-only mode, or API keys. The developer does not receive or proxy AI request content.

Sharing, retention, and deletion

Data leaves extension storage only when the user explicitly sends it to a configured AI service, hands it to a paired local Agent, exports or migrates it, or creates and distributes a share package. Local data remains until the user edits or deletes it, clears extension storage, or uninstalls the extension. Users can create a local backup and remove saved API keys and consent in settings.

When Agent connection is enabled, requested case content and originals are delivered to the paired local Agent. Its host may send them to configured models or services according to the user's instructions and its own settings; the host manages that subsequent processing. Disconnecting rejects new Agent requests; submitted tasks continue.

Chrome Web Store Limited Use

PromptDirector uses permissions and user data only to provide or improve its disclosed, user-facing purpose and features. User data is not sold or used for personalized, retargeted, or interest-based advertising. Humans are not allowed to read user data unless the user separately authorizes access to specific content for a support request, or access is required for security or legal obligations.

Permission purposes

• activeTab and scripting: access the current page only after a user starts capture, visual selection, or a screenshot action.
• webRequest: identify media response URLs and types on authorized websites for video counts and capture previews. Candidates stay in the browser session and are cleared on navigation or tab closure. This does not read credentials, modify requests, or upload browsing history; cross-origin media still requires site permission.
• alarms: schedule or resume local background work; never for tracking.
• contextMenus and sidePanel: provide user-triggered capture and the side-panel workspace.
• downloads and offscreen: save user-requested files and process screenshots, media, documents, or ZIP archives locally.
• storage and unlimitedStorage: retain selected references, media, settings, and local AI configuration.
• Fixed GitHub and GitHub Pages origins: read the official curated catalog, selected curated Release resources and video component installers. Local development builds also check official updates and download program updates after user confirmation.
• Optional downloads.open: requested when the user chooses to install the video component, so their explicit Open installer click can open the downloaded official installer. Downloaded files are not executed automatically.
• Optional nativeMessaging: requested when enabling Agent connection or installing the video component. A paired Agent can search cases, read selected originals, capture URLs and save materials as requested; this interface does not expose AI service keys. Local video extraction is independent of Agent connection and runs only when saving selected videos.
• Enabling Agent connection requests optional <all_urls> access so the paired Agent can capture user-requested URLs in a dedicated tab; browsing history is not recorded or uploaded.
• Optional <all_urls>, clipboardRead, and declarativeNetRequestWithHostAccess: used only after the user starts the corresponding feature and grants the required access.

Contact

Contact the maintainer through the PromptDirector support page.