Qianwei Screenshot & Recording

Settings/Account and data security

Account and data security

Qianwei Screenshot & Recording treats your account and private information carefully. This page explains how sign-in data is stored and shown, and what we do to protect it. The screenshot and recording themselves are not uploaded.

What sign-in can involve

When you sign in or bind an account in the client, that can include:

  • Email and phone number
  • The WeChat identifier from a WeChat QR sign-in (openid / unionid)
  • A sign-in token, used to stay signed in
  • A nickname, avatar, or other display fields, if WeChat or the account already has them

The password is used only to check the sign-in. The server stores a one-way hash. It does not store a recoverable plaintext password.

How the server protects this

Sensitive account fields such as email, phone number, and WeChat identifiers are stored with SM4 encryption. That is a data-protection measure. It is not a commercial-cryptography product certification or a cryptography assessment conclusion. A separate lookup hash supports sign-in and binding queries. The admin user list shows masked email and phone values by default, not the full plaintext.

Traffic between the client and the server uses HTTPS. The JSON body of a business request does not need a second encryption layer; TLS protects it in transit.

The full privacy terms are in the Privacy Policy.

How the client stores sign-in data locally

After a successful sign-in, the client may cache the token, email, phone number, and similar fields in local settings so the next launch can sign in automatically and show the account. Those sensitive items are encrypted on this PC, with a key bound to the device. When you view your own account in Settings, the email and phone number are shown in full so you can confirm what is bound. Local client logs mask email, phone, token, and similar values before writing them to a file.

If the local cache is damaged or cannot be decrypted, the client clears that sign-in data and you need to sign in again.

What you can do

  1. Turn on “remember me” or automatic sign-in only on a device you trust.
  2. Sign out after using a shared computer.
  3. Check from time to time that the bound email, phone number, and WeChat account are still yours.
  4. If you have a question, contact us through the product feedback channel.