AT A GLANCE
启动配置留在本机，是否处理由你决定
TuStart 不包含广告、开发者遥测或自动崩溃上报，不出售本地扫描数据，也不建立广告画像。 “不上传”不等于“不读取”：为识别启动变化，应用需要读取下文列出的系统配置，并在本机保存记录。 扫描本身只读；可用的停用、恢复等操作需由你另行确认。
01
读取哪些信息，保存在哪里
以下信息用于展示启动项来源、比较前后变化、提醒你查看，以及为已确认的操作保留恢复依据。
- 系统启动配置：启动文件夹中的快捷方式、注册表 Run / RunOnce 等启动值、 开机或登录触发的计划任务，以及自动启动服务。内容可能包含项目名称、启用状态、 路径、命令行参数、触发条件和运行作用域。路径或参数可能带有 Windows 用户名； 服务配置还可能包含服务登录账户名称。应用不要求你提供 Windows 登录密码； 如果某个启动命令本身包含敏感信息，这些内容也可能随命令行被记录。
- 目标文件信息：在本机检查启动目标是否存在，并读取文件属性、版本、 发布者、数字签名及文件哈希，用于识别来源和变化。签名检查采用离线验证， 不会把文件送到开发者服务器或在线查毒服务。
- 记录与设置：扫描基准、变化前后的信息、信任或忽略规则、通知状态、 主题等设置会保存在当前 Windows 用户的本地应用数据中。 应用使用
%LOCALAPPDATA%\TuStart；Microsoft Store 打包环境下， Windows 可能将数据重定向到应用包对应的本地数据目录。 - 备份与诊断：执行符合条件的停用或恢复操作时，会保留相关原始配置、 数据库内的恢复信息和操作结果。日志记录运行、扫描和错误信息，可能包含项目名称、路径、 命令行或错误详情；日志和备份不会自动上传。
当前默认清理阈值为最近 500 份扫描基准和 10,000 条变化记录；待处理本地通知关联的记录 可能继续保留，因此这不是严格的数量上限。当前启动项及已消失项目的历史状态、设置、规则、 日志和恢复信息不受上述数量阈值统一清除，也没有统一的自动过期时间。
02
联网与第三方服务
TuStart 的启动扫描、签名检查、变化比较和记录管理在本机完成，不使用开发者云账号， 不包含向开发者发送安装统计、更新统计、扫描内容或诊断日志的功能。 本地通知通过 Windows 显示，不是向开发者发送的消息。
Microsoft Store 的安装、更新、账户及平台诊断属于 Microsoft 的服务，受 Microsoft 隐私声明 及你的 Windows 隐私设置约束。本政策不代替 Microsoft 对其服务的说明。 若你主动打开反馈网页或发送邮件，相应服务会接收你提交的信息，详见“联系我们”。
03
安全、保留与用户控制
本地记录依赖 Windows 用户账户和文件访问权限保护，不是加密云备份。 同一账户下拥有读取权限的程序或设备管理员可能访问这些文件。 请不要把含有私人路径或命令行参数的记录随意分享给他人。
- 你可以查看启动项与变化记录，调整提醒，撤销信任或忽略规则。清空变化时间线不会删除 当前启动项和最新基准；清理失效规则或已结束的操作记录，也不会删除仍生效或仍需恢复的记录。
- 退出应用可停止后续扫描与提醒；关闭主窗口可能只是收进托盘，并不等于退出。 是否停用某个启动项由你选择；需要额外系统权限的操作还受 Windows 权限控制。
- 如需清除本地数据，请先处理仍需恢复的启动项，保存所需备份，然后完全退出应用， 再清理对应的本地应用数据。删除数据库或备份不会自动恢复已被停用的启动项， 还可能使你失去应用内的恢复依据。手动备份时应在退出应用后完整保留数据库及其伴随文件。
- 卸载或重置的清理范围取决于安装方式和 Windows 的打包数据管理，不能把卸载等同于 恢复所有系统更改。你自行复制、另存的副本需要自行删除。
04
反馈、政策更新与联系我们
开发者为信神荼（Tu 系列工具）。如有隐私问题，或希望查询、更正、删除你主动提交给我们的信息， 请发送邮件至 xinshentu@gmail.com， 也可以使用 Tu 系列工具反馈页面。
反馈不是使用应用的必要条件。只有当你主动提交时，我们才会收到你填写的产品、反馈类型、正文、 可选联系方式及提交和处理时间，用于阅读、回复和处理问题。网页和邮件服务也会处理建立连接所需的 IP 地址、请求时间等网络信息；这与应用在本机处理数据不同。
反馈记录不会自动公开，也没有固定的自动删除期限；如需删除，请通过上述邮箱联系我们。 不要在反馈中填写密码、验证码或无关的敏感内容；发送日志前，请先检查并遮盖不想分享的信息。 我们无法远程读取或删除仅保存在你设备上的应用数据。
如应用功能或数据处理方式发生变化，我们会在此页更新政策和“最后更新”日期。 本政策说明应用自身的数据处理；Microsoft Store、Windows 和你主动访问的第三方服务另有各自的隐私政策。
ENGLISH VERSION
TuStart Privacy Policy
Effective and last updated: September 13, 2026 · Applies to the Microsoft Store version of TuStart
1. Summary
TuStart inspects Windows startup configuration and compares changes locally. It does not require an account, include advertising or developer telemetry, automatically upload crash reports, sell local scan data or build advertising profiles. Scanning is read-only; available disable and restore actions require a separate confirmation. Not uploading data does not mean the app never accesses it.
2. Local access and storage
TuStart reads startup-folder shortcuts, registry startup entries, boot or logon scheduled tasks, and automatically started services. This may include names, enabled state, paths, command-line arguments, triggers and execution scope. Paths or arguments can contain Windows user names; service configuration may contain a service account name. The app does not ask for your Windows login password, but sensitive information embedded in a startup command may be recorded with it. The app locally checks file existence, properties, versions, publishers, signatures and hashes. Signature verification is offline and does not upload files to the developer or an online scanner.
Baselines, changes, trust and ignore rules, notification state, preferences, recovery data within the database and diagnostic logs are stored in the current Windows user's local application data. The app uses %LOCALAPPDATA%\TuStart; Windows may redirect this to package-specific local storage for a Store installation. Logs and backups can contain names, paths, commands and error details and are not automatically uploaded.
The current cleanup thresholds are 500 recent baselines and 10,000 change records. Records needed by pending local notifications may be retained beyond these thresholds. Current startup records, historical states of removed entries, settings, rules, logs and recovery data are not all cleared by these thresholds and have no single automatic expiry period.
3. Network and third-party services
Startup inspection, signature checks, comparisons and record management are local. TuStart has no developer cloud account or feature that reports installation statistics, update statistics, scan results or diagnostic logs to the developer. Windows notifications are local reminders. Microsoft Store installation, updates, accounts and platform diagnostics are governed by Microsoft's Privacy Statement and your Windows settings. Voluntary feedback and email are described below.
4. Security and your choices
Local files rely on Windows account and file permissions; they are not encrypted cloud backups. Other programs with access to your account, or a device administrator, may read them. You can inspect records, adjust reminders, revoke trust or ignore rules, and fully exit to stop further scanning. Closing the main window may only minimize it to the tray. Clearing the change timeline preserves current entries and the latest baseline. Cleanup of expired rules or completed operations preserves active rules and records still needed for recovery.
Before clearing local data, restore any startup entries you still need and retain necessary backups. Then fully exit the app and remove its local data. Deleting the database or backups does not undo disabled startup entries and may remove recovery information. Uninstall or reset behavior depends on the installation type and Windows package storage; uninstalling is not a guarantee that system changes are reversed. When backing up manually, fully exit first and retain the database with its companion files. Separately copied or saved files must be deleted by you.
5. Feedback, changes and contact
The developer is 信神荼 (Tu Tools). For privacy questions or requests to access, correct or delete information you voluntarily submitted, contact xinshentu@gmail.com or use the Tu Tools feedback page. Feedback is optional. We receive the product, category, message and optional contact details you submit, together with submission and processing timestamps, so we can handle and respond to your request. Website and email services also process connection information such as IP addresses and request times.
Feedback is not automatically published and has no fixed automatic deletion period; contact us to request deletion. Do not send passwords, verification codes or unrelated sensitive information. Review and redact logs before sharing them. We cannot remotely access or delete data stored only on your device. Changes to the app's data practices will be reflected here with an updated date. Microsoft Store, Windows and external services have their own privacy policies.