隐私说明
新小蜜（NewBee）是一个非官方网站，用中文和英文介绍新西兰政府的公开办事信息。我们只收集提供服务所需的最少信息。
不登录时
- 提问内容：你向 AI 提的问题会匿名记录（问题文字、AI 回答的开头一段（最多 800 字）、用到的指南、耗时和费用），用来发现答得不好的地方、改进指南。记录里没有你的姓名或邮箱；没登录时只保存 IP 地址的最后两段（例如 *.*.12.34），不保存完整 IP。回答摘录里的邮箱、证件号和你在问题里写过的电话号码会先替换掉。请不要在问题里填写护照号、IRD 号码、银行账号等个人信息。
- 本机保存：你选的身份、AI 记住的情况、配色和语言偏好，只保存在你这台设备的浏览器里（localStorage）。当前对话只保存在当前标签页里，关掉就清除。
- 防刷限制：为防止滥用，服务器会按 IP 地址临时限制提问频率，完整的 IP 地址不会写进记录。
- 留言和报告错误：你在「关于」页（/about/#contact）留言时，我们会保存留言内容、你填写的相关页面和联系方式（可选），以及 IP 地址的最后两段，只用来核实、修改指南和回复你。不想被联系就不要填联系方式。
- 访问统计：为了统计每天有多少人使用，我们记一个只在当天有效的匿名编号（由 IP 和浏览器信息加密生成，无法反推），第二天就更换；不保存 IP，也无法跨天识别同一个人。
用 Google 账号登录后
- 我们会从 Google 收到：你的 Google 账号编号、邮箱、名字和头像链接。我们不会读取你的 Gmail 邮件、通讯录或其他任何数据。
- 我们会把你的身份（例如「工签/新移民」）和 AI 记住的情况（例如「孩子 8 岁」）保存到你的账户里，方便换设备继续使用。不保存你的问答内容。
- 登录状态用一个仅限本站的安全 cookie（nb_sid）保存，有效期 60 天；我们只存它的加密摘要。
- 登录后提的问题，在匿名提问记录里会带一个匿名用户编号（由你的 Google 账号编号加密生成，不含邮箱），用来统计使用情况。运营后台看到的邮箱一律打码（例如 x****r@g****.com），看不到名字和头像。删除账户后，这个编号就再也对应不到你。
谁会处理这些信息
- Cloudflare：网站托管和数据库（账户数据存放在 Cloudflare D1）。
- Anthropic（Claude）：生成 AI 回答。你的问题、对话上下文和你设置的身份/记住的情况会发给它处理，用于生成这一次的回答。
- Google：只用于「用 Google 账号登录」。
我们不出售、不出租你的信息，也不用它做广告。
查看和删除
- 在网站的「我的档案」页可以查看、修改或删除你的身份和 AI 记住的情况。
- 登录后，在「我的档案」页点「删除我的账户和数据」，会立即永久删除你的账户、档案和所有登录会话。
- 退出登录后，这台设备上的档案会一并清除。
其他
本站不是政府网站，不提供移民、法律、税务或医疗方面的个人建议。如本说明有更新，会在本页标明更新日期。
Privacy
NewBee is an unofficial website that explains New Zealand government services in plain language. We collect only what we need to run the service.
If you don’t sign in
- Your questions: questions you ask the AI are logged anonymously (the question text, the first part of the AI’s answer (up to 800 characters), which guides were used, response time and cost) so we can spot weak answers and improve the guides. The log does not contain your name or email; if you’re not signed in, we keep only the last two parts of your IP address (for example *.*.12.34), never the full address. Emails, ID numbers and any phone number you typed in your question are removed from the answer excerpt. Please don’t include passport, IRD or bank account numbers in your questions.
- Saved on your device: your chosen situation, what the AI remembers, and your theme and language preferences are stored only in your browser (localStorage). The current conversation is kept only in the current tab and is cleared when you close it.
- Abuse prevention: the server temporarily rate-limits questions by IP address. Full IP addresses are not written to the log.
- Messages and error reports: when you leave a message on our About page (/en/about/#contact), we keep the message, the page you mention, the contact details you choose to give (optional) and the last two parts of your IP address. We use them only to check and fix our guides and to reply to you. Leave the contact field empty if you don’t want a reply.
- Visit counts: to count daily visitors we keep an anonymous ID that is valid for one day only (a one-way hash of your IP address and browser details) and changes the next day. We don't store IP addresses and can't recognise the same person across days.
If you sign in with Google
- Google shares with us your Google account ID, email address, name and profile picture link. We never access your Gmail, contacts or any other Google data.
- We store your situation (e.g. “Work visa”) and what the AI remembers (e.g. “child is 8”) in your account so they follow you to other devices. We do not store your questions and answers in your account.
- Your sign-in is kept in a secure, site-only cookie (nb_sid) for 60 days; we store only a hash of it.
- Questions you ask while signed in carry an anonymous user ID in the question log (a one-way hash of your Google account ID, with no email address) so we can count usage. Our admin view only shows masked email addresses (e.g. x****r@g****.com) and never names or photos. Once you delete your account, that ID can no longer be linked to you.
Who processes this information
- Cloudflare: website hosting and database (account data is stored in Cloudflare D1).
- Anthropic (Claude): generates the AI answers. Your question, the conversation so far and your situation/remembered details are sent to it to produce each answer.
- Google: only for “Sign in with Google”.
We don’t sell or rent your information, and we don’t use it for advertising.
Seeing and deleting your data
- On the “My profile” page you can view, change or delete your situation and what the AI remembers.
- When signed in, “Delete my account and data” on the “My profile” page permanently deletes your account, profile and all sign-in sessions immediately.
- Signing out also clears the profile from that device.
Other
This is not a government website and does not give personal immigration, legal, tax or medical advice. If this notice changes, we’ll update the date at the top.