条款与隐私

软件本体（MIT，见仓库根目录 LICENSE）与驾驶舱 Pro / Max / 终身窗口密钥是两件事。MIT 覆盖源代码和核心浏览器库。Pro（$59/年）与 Max（$149/年）是对本地驾驶舱配额与定时调度的离线授权。终身窗口是一次买断的身份席位，可叠加在任意档位上。都不是云订阅、席位或 OEM。

支持：yvzhou142857@gmail.com · 产品站 cohbrowser.space · 公司站 yandot.site

销售方：上海奇点砚科技有限公司（Yandot）。结账由 Waffo Pancake（Waffo.com Limited）作为 Merchant of Record 处理付款、税务与退款咨询。本页无需登录即可阅读。

购买与退款

• 全线采用美元统一定价（Pro $59/年，Max $149/年）。终身窗口：$4.99 / 1、$19.99 / 5、$34.99 / 10、$59.99 / 20。以离线签名密钥交付。年付默认一年（exp）；终身窗口 exp=0。
• 付款后由发码主机邮件发送 COH- 密钥（旧钥 NOCT- 仍可用），邮件里是可在 Gmail 点击的 https://cohbrowser.space/activate.html?key= 链接。也可用购买邮箱在该页用 Google、GitHub 或 6 位验证码取回。在应用「授权」中粘贴，或设置 COH_LICENSE。
• 密钥在本机 Ed25519 验签，不回家心跳。
• 未激活且仍在支付平台退款窗口内：联系支持退款，密钥列入吊销名单。
• 已激活并使用过配额：按支付平台政策处理；退款完成后该 lic_id 进入吊销名单。
• 终身窗口一次买断、可叠加；注销 Pro / Max 不会清掉 lifetime.key。新的终身密钥会替换上一张加购钥。退款后同样吊销。
• 丢失密钥：用购买邮箱联系支持，按订单补发，不另开新席位。

免责与责任

同班 Cohorta 软件与密钥「按现状、按可用」提供，不作适销性、特定用途适用性或无中断的保证。驾驶舱里的 Agent 输出可能不准确、不完整或过时，不能当作法律、财务或专业建议；发布、付款与高风险动作默认要你本人确认。在法律允许的最大范围内，上海奇点砚科技有限公司不对间接、附带、后果性或惩罚性损害负责；就本产品产生的全部责任，不超过你在引起索赔的事件发生前 12 个月内就该产品实际支付给我们的金额。结账、税务与退款咨询由 Waffo Pancake（Waffo.com Limited）作为 Merchant of Record 处理。

期限与终止

本条款在你使用本产品期间持续有效。你可以随时停止使用并删除本机数据目录。年付 Pro / Max 到期后配额不再续期，除非你再次购买；终身窗口一次买断，退款后吊销。若你违反「可接受使用」、我们怀疑欺诈，或法律要求，我们可以暂停或吊销密钥、拒绝后续发码。因你违约而终止的，已使用配额不退款；非因你违约而终止且密钥尚未激活的，按支付平台政策退款。要注销购买邮箱对应的发码记录，写信到 yvzhou142857@gmail.com。

隐私

驾驶舱默认把身份、cookie、账号和运行证据留在本机（COH_DATA_DIR，默认 ~/.cohorta，目录权限 0700）。核心库与 daemon 不把页面内容或凭证上传到 Cohorta 服务器。本地处理、无跨境传输到 Cohorta；你主动访问的目标网站与代理除外。这是 GDPR 意义上的本地控制者模型：你是数据控制者，本机软件是处理器。

会出网的情况仅限你主动触发：购买跳转、你点击「检查更新」、下载 Chromium 运行时、你配置的代理与目标网站。

收集的数据

收集哪些数据，按你是否付钱、是否用本机软件区分：

• 购买时：Waffo Pancake 作为收款方处理卡号；我们只收到买家邮箱、订单号、商品、金额与支付状态，用于发码和退款吊销。我们不存储完整银行卡号。
• 你写信或在 activate.html 用 Google / GitHub / 邮箱验证码登录时：支持邮箱、你主动提供的订单信息，以及该登录方式回传的已验证邮箱（用于取回密钥）。
• 本机身份、cookie、账号与运行证据：默认只写在你电脑上的数据目录，不上传到 Cohorta 服务器。
• 你主动访问的网站、代理与更新检查：由那些服务自行处理，不经过我们的发码主机。

数据权利

你有权了解我们持有哪些与你购买相关的个人数据，查阅、更正、删除购买邮箱与发码记录，以及要求我们停止向该邮箱发码（注销账号意义上的购买记录）。本机身份与运行数据由你在本机删除数据目录即可处理。行使权利请写信到 yvzhou142857@gmail.com，我们在 30 个自然日内回复。你也可以向所在地数据保护机构投诉。卡组织交易记录由 Waffo Pancake 按 MoR 政策保留。

可接受使用

用于你有权操作的网站、内部 RPA、授权 QA 与开发。禁止未授权访问、滥用检测绕过宣传、以及把本产品当作「过所有检测」或无人值守发帖工具出售。生成不等于发布；高风险动作默认要人确认。

Team、云协作、代码签名分发权利与 OEM 不在 Community/Pro 范围内，需另行书面授权。

Terms and privacy

The software itself (MIT; see LICENSE at the repository root) and the cockpit Pro / Max / lifetime window keys are two separate things. MIT covers the source code and the core browser library. Pro ($59/year) and Max ($149/year) are offline licenses for local cockpit quota and scheduling. Lifetime windows are identity seats bought once, and they stack on any tier. None of these is a cloud subscription, a seat, or an OEM license.

Support: yvzhou142857@gmail.com · Product site cohbrowser.space · Company site yandot.site

Seller: Yandot (上海奇点砚科技有限公司), Shanghai, China. Checkout is handled by Waffo Pancake (Waffo.com Limited) as Merchant of Record, which processes payment, tax, and refund inquiries. You can read this page without signing in.

Purchases and refunds

• All plans are priced in US dollars (Pro $59/year, Max $149/year). Lifetime windows: $4.99 / 1, $19.99 / 5, $34.99 / 10, $59.99 / 20. Delivered as offline signed keys. Annual plans run for one year by default (exp); lifetime windows have exp=0.
• After payment, the key-issuing server emails you a COH- key (legacy NOCT- keys still work). The email contains an https://cohbrowser.space/activate.html?key= link you can click in Gmail. You can also retrieve the key on that page with your purchase email, using Google, GitHub, or a 6-digit code. Paste it into the app's "License" screen, or set COH_LICENSE.
• Keys are verified locally with Ed25519 signatures. There is no phone-home heartbeat.
• Not activated and still within the payment platform's refund window: contact support for a refund; the key is added to the revocation list.
• Activated and quota used: handled under the payment platform's policy; once the refund is completed, that lic_id is added to the revocation list.
• Lifetime windows are a one-time purchase and stack; canceling Pro / Max does not remove lifetime.key. A new lifetime key replaces the previous add-on key. It is likewise revoked after a refund.
• Lost key: contact support from your purchase email; we reissue it against the order and do not open a new seat.

Disclaimer and liability

The Cohorta software and keys are provided "as is" and "as available", without warranties of merchantability, fitness for a particular purpose, or uninterrupted operation. Agent output in the cockpit may be inaccurate, incomplete, or out of date, and is not legal, financial, or professional advice; publishing, payments, and high-risk actions require your own confirmation by default. To the maximum extent permitted by law, Yandot (上海奇点砚科技有限公司) is not liable for indirect, incidental, consequential, or punitive damages; our total liability arising from this product does not exceed the amount you actually paid us for the product in the 12 months before the event giving rise to the claim. Checkout, tax, and refund inquiries are handled by Waffo Pancake (Waffo.com Limited) as Merchant of Record.

Term and termination

These terms remain in effect while you use the product. You may stop using it at any time and delete the local data directory. When annual Pro / Max expires, the quota is not renewed unless you buy again; lifetime windows are a one-time purchase and are revoked after a refund. If you breach "Acceptable use", we suspect fraud, or the law requires it, we may suspend or revoke keys and refuse to issue further keys. If termination is due to your breach, used quota is not refunded; if termination is not due to your breach and the key has not been activated, refunds follow the payment platform's policy. To delete the key-issuance records for your purchase email, write to yvzhou142857@gmail.com.

Privacy

By default the cockpit keeps identities, cookies, accounts, and run evidence on this computer (COH_DATA_DIR, default ~/.cohorta, directory permissions 0700). The core library and the daemon do not upload page contents or credentials to Cohorta servers. Processing is local, with no cross-border transfer to Cohorta; the target websites and proxies you choose to access are the exception. In GDPR terms this is a local-controller model: you are the data controller, and the local software is the processor.

The software goes online only when you trigger it: the purchase redirect, clicking "Check for updates", downloading the Chromium runtime, and the proxies and target websites you configure.

Data we collect

What we collect depends on whether you pay and whether you use the local software:

• When you buy: Waffo Pancake, as the payee, processes your card number; we receive only the buyer email, order number, product, amount, and payment status, used to issue keys and to revoke them after a refund. We do not store full card numbers.
• When you email us or sign in on activate.html with Google / GitHub / an email code: your support email, order details you choose to provide, and the verified email returned by that sign-in method (used to retrieve keys).
• Local identities, cookies, accounts, and run evidence: by default written only to the data directory on your computer, and not uploaded to Cohorta servers.
• Websites you choose to visit, proxies, and update checks: handled by those services themselves, not through our key-issuing server.

Your data rights

You have the right to know what personal data related to your purchase we hold; to access, correct, and delete your purchase email and key-issuance records; and to ask us to stop issuing keys to that email (closing the purchase record, in the sense of deleting an account). Local identities and run data are handled by deleting the data directory on your computer. To exercise these rights, write to yvzhou142857@gmail.com; we reply within 30 calendar days. You may also lodge a complaint with your local data protection authority. Card-network transaction records are retained by Waffo Pancake under its MoR policy.

Acceptable use

Use it on websites you have the right to operate, for internal RPA, authorized QA, and development. Prohibited: unauthorized access, abusive detection-evasion marketing, and selling this product as a "passes all detection" or unattended posting tool. Generating is not publishing; high-risk actions require human confirmation by default.

Team, cloud collaboration, code-signing distribution rights, and OEM are outside the scope of Community/Pro and require a separate written license.