Privacy Policy

Welcome to our website. To help you use our services with confidence, we explain our privacy policy below to safeguard your rights. Please read the following information carefully:

Scope of the Privacy Policy: This privacy policy applies to all personal data collected by this website, including how we collect, process, and use such data when you use our services. This policy does not apply to other linked websites or personnel not managed by this website.
Collection, Processing, and Use of Personal Data: When you visit our website or use our services, we may ask for necessary personal information, which will be processed and used only for specified purposes. Without your written consent, we will not use your personal data for other purposes.
Legal Basis for Processing Data: We process your personal data based on your consent, to fulfill contractual obligations, or for our legitimate business interests, such as enhancing user experience or conducting analysis.
Data Protection: We adopt multiple security measures to protect your personal data, including firewalls and antivirus systems. Only authorized personnel can access your data, and they must sign confidentiality agreements. When we outsource services, we require that they comply with confidentiality obligations and ensure data security.
External Links: Our web pages may contain links to external websites. These linked websites do not fall under our privacy policy, and you should refer to their respective privacy policies.
Sharing Personal Data with Third Parties: We do not provide, exchange, rent, or sell your personal data to third parties, except as required by law or contractual obligations. We may share your data under the following circumstances:
- With your written consent.
- As required by law.
- To protect your life, body, freedom, or property from danger.
- For statistical or academic research with public institutions or academic research organizations, ensuring data is anonymized.
- When your actions on the website violate the terms of service, necessitating identification, contact, or legal action.
Data Retention: We retain personal data only for as long as is necessary to fulfill the purposes outlined in this policy, or as required by law. When the retention period ends, we delete or anonymize the data to ensure privacy.
Your Rights: Under applicable privacy laws, you have the right to request access to your personal data, correct inaccuracies, request deletion of your data, object to processing, and request data portability. You also have the right to lodge a complaint with a supervisory authority.
Use of Cookies: To provide you with the best service experience, we use cookies on your device. If you do not wish to accept cookies, you can increase the privacy level in your browser settings to refuse cookies. This may, however, affect the availability of certain features. You can also manage your cookie preferences through our Cookie Settings.
Privacy Policy Revisions: We may revise the privacy policy as needed, and any changes will be published on this website to ensure you are informed of how we handle your personal data.

VPN (虛擬私人網路)

虛擬私人網路，又稱為虛擬專用網路（英文︰Virtual Private Network，簡稱VPN），是一種常用於連接中、大型企業或團體與團體間的私人網路的通訊方法。虛擬私人網路的訊息透過公用的網路架構（例如：網際網路）來傳送內聯網的網路訊息。

虛擬私人網路利用已加密的通道協議（Tunneling Protocol）來達到保密、傳送端認證、訊息準確性等私人訊息安全效果。若使用得法，這種技術可以用不安全的網路（例如：網際網路）來傳送可靠、安全的訊息。需要注意的是，加密訊息與否是可以控制的。沒有加密的虛擬私人網路訊息依然有被竊取的危險。

以日常生活的例子來比喻，虛擬私人網路就像：甲公司某部門的A想寄信去乙公司某部門的B。A已知B的地址及部門，但公司與公司之間的信不能註明部門名稱。於是，A請自己的秘書把指定B所屬部門的信（A可以選擇是否以密碼與B通訊）放在寄去乙公司地址的大信封中。當乙公司的秘書收到從甲公司寄到乙公司的信件後，該秘書便會把放在該大信封內的指定部門信件以公司內部郵件方式寄給B。同樣地，B會以同樣的方式回信給A。

在以上例子中，A及B是身處不同公司（內聯網路）的計算機（或相關機器），透過一般郵寄方式（公用網路）寄信給對方，再由對方的秘書（例如：支援虛擬私人網路的路由器或防火牆）以公司內部信件（內部網路）的方式寄至對方本人。請注意，在虛擬私人網路中，因應網路架構，秘書及收信人可以是同一人。許多現在的作業系統，例如Windows及Linux等因應所用傳輸協議，已有能力不用透過其它網路設備便能達到虛擬私人網路連接。

有一些網站在中國大陸被屏蔽，而採用免費或付費的VPN來突破限制成為了一種流行的翻牆手段。許多外商公司欲連接回海外的伺服器也經常自行架設VPN向第三方VPN提供商購買服務。

直到20世紀90年代末，計算機網路上的計算機通過非常昂貴的專線和/或撥號連線互連。視站點間的距離，花費可達數千美元（56kbps連線）或上萬美元（T1）。由於避免了租用多條各自連接網際網路的專線的需要，虛擬私人網路可減少網路開支。用戶可以安全地交換私密數據，這使昂貴的專線變得多餘。

安全的虛擬私人網路使用加密穿隧協議，通過阻止截聽與嗅探來提供機密性，還允許發送者身份驗證，以阻止身份偽造，同時通過防止信息被修改提供消息完整性。

某些虛擬私人網路不使用加密保護數據。雖然虛擬私人網路通常都會提供安全性，但未加密的虛擬私人網路嚴格來說不屬於「安全」或「可信」的類別。例如，一條通過GRE協議在兩台主機間建立的隧道屬於虛擬私人網路，但既不安全也不可信。除以上的GRE協議例子外，原生的明文穿隧協議包括L2TP（不帶IPsec時）和PPTP（不使用微軟點對點加密(MPPE)時）。