iTally 隐私政策
iTally 是影视制作现场用的 Tally 显示工具。它不收集、不上传任何个人信息,也不把使用数据发往互联网:服务端运行在你自己的电脑上,Tally 只在同一局域网内传给浏览器、手机和手表,设置只保存在你自己的设备上。
一、我们不收集什么
- 没有账号、没有注册、不需要登录。
- 没有统计分析、埋点、广告,也没有任何第三方上报 SDK(桌面端、服务端、App 都没有)。
- 我们没有接收 iTally 数据的服务器;你的切换台、机位和 Tally 信息不会发给我们。
二、局域网内的通信
服务端运行在你自己的电脑上,只读取切换台:对 vMix、Blackmagic Design ATEM、OBS Studio 等只订阅和查询,对 TSL UMD 和 Contribution Tally 只接收切换台推送,从不发送切换或控制命令。浏览器里的控制台、手机网页、App 和 Apple Watch 通过局域网内的 HTTP / WebSocket 明文连接这台电脑。这些数据不经过我们的服务器,也不经过任何第三方。
控制台默认只能在运行服务的电脑上打开。「其他电脑」访问默认关闭;打开后,局域网里的其他电脑要输入访问码才能进入。连接是 HTTP 明文,同一网络里能抓包的人能看到内容,请只在信任的网络里打开。在控制台里点「查找」ATEM 时,服务端会在局域网里发 mDNS 查询,只用于列出附近的 ATEM。
三、保存在你电脑上的内容
- 配置文件
config.yaml:切换台类型、地址和端口、OBS Studio 或 Roland Smart Tally 的密码、机位名称和对应的画面、管理令牌(Admin Token)、其他电脑访问码。文件权限设为只有当前用户可读写。 - 服务日志:连接状态和错误。日志不记录管理令牌、访问码和切换台密码。iTally 不保存 Tally 历史。
- 位置:macOS 的配置在
~/Library/Application Support/iTally/config.yaml,日志在~/Library/Logs/iTally/;Windows 的配置在%APPDATA%\iTally\config.yaml,日志在%LOCALAPPDATA%\iTally\Logs\;Linux 的配置在~/.config/iTally/config.yaml,日志在~/.local/state/iTally/。 - 卸载 App 时这些文件不会自动删除,不需要时可以手动删掉(见文档「安装」一页的卸载步骤)。
- 浏览器里的控制台把主题偏好存在 localStorage,把管理令牌或访问码存在 sessionStorage(关闭标签页即清除)。手机网页不在浏览器里保存任何内容。
四、App 保存在设备上的内容
iOS / Android App 只保存上次连接的电脑地址、端口和机位(ID 与名称),以便下次打开直接显示 Tally,不上传。卸载 App 后,这些内容随应用数据一并删除。Apple Watch 版还在开发中,发布时如有不同会在本页说明。
五、系统权限
- 相机(iOS / Android):只用来扫描控制台上的二维码,画面不保存、不上传。
- 本地网络(iOS / watchOS):连接局域网里运行 iTally 的电脑所必需。
- 网络与局域网明文 HTTP(Android 的 INTERNET 权限和明文流量设置):iTally 服务端只提供局域网 HTTP,App 需要允许明文连接。
- 系统可能为服务端弹出防火墙提示;macOS 在「查找」ATEM 时可能弹出「本地网络」权限提示。
- 不使用麦克风、定位、通讯录和照片,也未申请相关权限。
六、桌面端的更新检查
桌面端的启动器每天会从我们的更新服务器(updates.ahua.space)下载一次静态的版本清单文件,以判断是否有新版本;有新版本时,下载经过签名的更新包。这只是下载文件,不发送任何个人信息。
七、本网站
本网站是纯静态页面:不使用 Cookie,不做统计,不加载第三方脚本或字体,文档搜索在你的浏览器里完成。你选择的深浅色主题存在浏览器的 localStorage,文档侧栏的展开状态存在 sessionStorage,都不会发给我们;语言由网址决定,不另外保存。网站的托管服务商可能按其自身政策保留常规的访问日志(如 IP 地址、访问时间和请求的页面),我们不用它做统计或追踪。
八、测试版本(TestFlight / 蒲公英)
通过 TestFlight 安装的测试构建,Apple 会依据其自身隐私政策收集崩溃日志与你主动提交的反馈;通过蒲公英分发的 Android 测试包,由蒲公英依据其自身隐私政策处理。我们能看到这些内容,仅用于修复问题与改进 iTally。
九、儿童
iTally 面向专业影视从业人员,不针对儿童,也不收集儿童的个人信息。
十、变更与联系方式
本政策由豹款影视制作车团队发布,如有变化会在本页更新并修改上方「最后更新」日期。任何疑问或数据相关问题,请联系 [email protected]。
iTally Privacy Policy
iTally shows tally on film and video sets. It collects and uploads no personal data and sends no usage data to the internet: the server runs on your own computer, tally travels only across your local network to browsers, phones and watches, and your settings stay on your own devices.
1. What we do not collect
- No accounts, no sign-up and no sign-in.
- No analytics, tracking, advertising or third-party reporting SDKs, in the desktop app, the server or the mobile apps.
- We run no server that receives iTally data; your switchers, cameras and tally are never sent to us.
2. Traffic on your local network
The server runs on your own computer and only reads from the switcher: it subscribes to and queries vMix, Blackmagic Design ATEM, OBS Studio and the others, and only receives what TSL UMD and Contribution Tally switchers push. It never sends a switching or control command. The browser console, the phone web page, the apps and Apple Watch connect to that computer over plain HTTP / WebSocket on the local network. None of this passes through our servers or any third party.
By default the console opens only on the computer running the server. Access from other computers is off by default; when it is on, other computers on the network must enter an access code. The connection is plain HTTP, so anyone able to capture traffic on that network can read it; turn it on only on networks you trust. When you click Find for an ATEM, the server sends an mDNS query on the local network, used only to list ATEMs nearby.
3. What stays on your computer
- The config file
config.yaml: the switcher type, address and port, the OBS Studio or Roland Smart Tally password, camera names and their inputs, the admin token and the access code for other computers. Only the current user can read or write it. - The server log: connection states and errors. The log never records the admin token, the access code or switcher passwords. iTally keeps no tally history.
- Locations: on macOS the config is at
~/Library/Application Support/iTally/config.yamland the log in~/Library/Logs/iTally/; on Windows at%APPDATA%\iTally\config.yamland%LOCALAPPDATA%\iTally\Logs\; on Linux at~/.config/iTally/config.yamland~/.local/state/iTally/. - Uninstalling the app does not delete these files; remove them by hand if you no longer need them (see the uninstall steps on the Install page of the docs).
- The console in your browser keeps the theme choice in localStorage and the admin token or access code in sessionStorage, which is cleared when the tab closes. The phone web page stores nothing in the browser.
4. What the apps keep on the device
The iOS and Android apps keep only the address and port of the last computer and the camera (its ID and name), so the next launch goes straight to the tally screen. Nothing is uploaded, and it is deleted with the app data when you uninstall. The Apple Watch app is in development; anything different about it will be stated here on release.
5. Permissions
- Camera (iOS / Android): used only to scan the QR code in the console. Nothing is saved or uploaded.
- Local network (iOS / watchOS): needed to reach the computer running iTally on your network.
- Network and plain HTTP on the local network (Android's INTERNET permission and cleartext setting): the iTally server only speaks plain HTTP on the local network, so the app must allow it.
- The system may show a firewall prompt for the server; macOS may show a Local Network prompt when you use Find for an ATEM.
- Microphone, location, contacts and photos are not used and are not requested.
6. Desktop update checks
Once a day the desktop launcher downloads a static version manifest from our update server (updates.ahua.space) to see whether a new version exists; when one does, it downloads the signed update package. This only downloads files; no personal data is sent.
7. This website
This website is static: no cookies, no analytics, no third-party scripts or fonts, and the docs search runs in your browser. Your light or dark theme choice is kept in your browser's localStorage and the docs sidebar state in sessionStorage; neither is sent to us. The language comes from the address and is not stored. The host serving the site may keep ordinary access logs (such as IP address, time and page requested) under its own policy; we do not use them for analytics or tracking.
8. Beta builds (TestFlight / Pgyer)
For builds installed through TestFlight, Apple collects crash logs and the feedback you submit under Apple's own privacy policy. Android test builds distributed through Pgyer are handled under Pgyer's own policy. We see those reports only to fix problems and improve iTally.
9. Children
iTally is for professionals in film and video production. It is not aimed at children and collects no data from children.
10. Changes and contact
This policy is published by the 豹款影视制作车团队 (Efficient Film and Television Production Vehicle). Any change will be made on this page with a new "Last updated" date. Questions or data requests: [email protected].