Privacy Policy
Updated: October 8, 2026. This page explains data flows, browser storage and usage considerations for the Xiao Feng Music Player website and online debugger. When the npm or CDN player is embedded on another website, that website’s configuration, providers and privacy notice also determine how data is handled.
How Data Is Used
Browsing the website and documentation does not require an account. Debugger configuration, playlist drafts and integration code are processed in the current browser. Editing a form does not by itself submit its contents to an AI provider. Running a preview, loading a cloud playlist or playing music requests the APIs and media in the active configuration.
Website hosting, CDNs, playlist APIs and cover, audio or lyrics servers may receive standard network information such as IP address, User-Agent, Referer and resource paths. Each provider manages its own logs and retention. The local cleanup button only affects this browser; it does not delete provider logs.
Data Saved on This Device
| Data | Location and purpose | Retention |
|---|---|---|
| Website appearance and accent | localStorage, to restore display preferences | Until cleared or removed by the browser |
| AI theme history | localStorage, for CSS, timestamps and the last applied style | Until records are deleted or cleared |
| AI provider and remember-key choices | localStorage, to restore selections | Until cleared |
| Remembered API keys | localStorage, stored separately for each provider | Until remembering is disabled, keys are cleared or site data is removed |
| Playback memory | localStorage under memoryKey when rememberPlayback is enabled | Until cleared or replaced |
Playback memory includes the current track, progress, volume, mute state, playback mode and lyrics preference. Other temporary debugger inputs generally stay in page memory; browser form-restoration behavior depends on browser settings. Private browsing, storage limits or browser settings may prevent persistence.
AI Themes and API Keys
“Remember key on this device” is enabled by default. Entered keys are saved locally and restored for their provider after reloads or browser restarts; check the switch before entering a key. Turning it off deletes that provider’s saved key and keeps subsequent input in page memory. “Clear all saved keys” removes all provider keys and the current input, disables their remember-key choices, and leaves theme history intact.
Browser storage is not an encrypted vault: scripts running on the same site can read it. On public or shared devices, turn remembering off before entering a key. Clear keys before leaving and, if necessary, revoke or replace them in the provider’s dashboard. This website does not request a ChatGPT web Session.
Restoring local data does not automatically fetch models or generate a theme. When you choose either action, the browser sends the API key directly to the selected AI provider. Generation also sends the built-in player styling rules, creative options and your theme brief. Keep credentials, personal information and confidential business content out of the brief. Keys are excluded from theme records and generated player integration code. Billing, model access and request retention depend on your provider’s actual settings and terms.
Generated CSS is checked for format and selector scope before preview. These checks constrain style behavior; they do not assess design quality. Theme records are saved locally. Deleting a record leaves its applied style unchanged; apply another theme or clear local data to reset it.
Clear Local Data
The control below deletes only known keys used by this website in the current origin and browser profile, including matching sessionStorage entries. It preserves unrelated keys belonging to other applications on this origin. Cookies, browser caches, downloaded files and third-party account data are not affected.
Close other tabs using this website first so they do not continue saving data. The current player is released before cleanup and reload. Later use may create new default preferences or playback memory. For a custom memoryKey in your own integration, remove that key separately on the corresponding website.
Remove AI theme history, remembered API keys and remember-key choices, website appearance and accent, and default playback memory used by this site. This stops the current player and reloads the page. Deleted records are not recoverable.
View equivalent cleanup code
Run this in the browser console on this website’s privacy page. It uses the same cleanup order and data scope as the button.
const keys = [ "vitepress-theme-appearance", "xf-site-accent", "xf-site-ai-themes-v1", "xf-site-ai-provider-v1", "xf-site-global-player-memory", "xf-docs-debugger-memory", "xf-music-player-memory", "xf-site-ai-credential-v1:openai", "xf-site-ai-remember-v1:openai", "xf-site-ai-credential-v1:gemini", "xf-site-ai-remember-v1:gemini", "xf-site-ai-credential-v1:deepseek", "xf-site-ai-remember-v1:deepseek", "xf-site-ai-credential-v1:doubao", "xf-site-ai-remember-v1:doubao", "xf-site-ai-credential-v1:qwen", "xf-site-ai-remember-v1:qwen", "xf-site-ai-credential-v1:zhipu", "xf-site-ai-remember-v1:zhipu"];const pending = [];window.dispatchEvent(new CustomEvent('xf-site-clear-data', { detail: { waitUntil: task => pending.push(task) }}));await Promise.all(pending);for (const storage of [localStorage, sessionStorage]) { for (const key of keys) storage.removeItem(key);}location.reload();External Resources and Integrations
Examples may use jsDelivr, unpkg, cloud playlist APIs or external media. A linked website controls data processing after navigation. Before production use, pin an appropriate CDN version and review media sources, API settings, cross-origin access and provider data terms.
Integrators should explain their own data purposes, storage, providers and deletion channels. The player’s default configuration is not a complete privacy design for an application.
Usage Notes and Disclaimer
- Audio and assets: Demo resources illustrate functionality. An accessible resource does not itself establish copyright permission. Confirm the relevant rights and permitted uses before public distribution or commercial use.
- Availability: Playback, cloud playlists and AI requests depend on networks, browsers, media formats, cross-origin policies and third-party services, and may fail or be interrupted. Demos do not guarantee continuous availability, performance figures or design results.
- Generated output: Test AI styles and integration examples in the target website, devices and browsers. Review generated code, retain the original configuration and check usage conditions for fonts, images and other assets before release.
- Local records: Browser cleanup, device changes, storage errors and deletion may remove records. Export important themes and configuration yourself; this website has no cloud recovery copy of those local records.
- Responsibility: These notes describe product boundaries. They do not exclude obligations required by applicable law or replace agreements with third-party providers.
Updates and Contact
This page will be adjusted when data processing, storage or features change. Use the corresponding provider’s account-management channels for its account data and records.
- Contact email: 1809185784@qq.com
- Developer: Xiao Feng