🎭兩真一假 破冰對話

【繁體中文】資料安全、私隱與技術邊界承諾

1. 零後端儲存（Zero-Persistence Architecture）：本工具運作於純瀏覽器揮發性記憶體（RAM），無伺服器資料庫、無活動紀錄檔。關閉瀏覽器分頁即刻徹底物理抹除，超越香港《個人資料（私隱）條例》（PDPO）與歐盟 GDPR 第 17 條「被遺忘權」之標準。

2. 點對點強固加密（E2EE）：採用 WebRTC（DTLS/SRTP）端到端通訊協定，所有敘述與投票僅在現場設備間直接傳輸，任何第三方信令伺服器均無法窺探內容。

3. AI 監管排除判定（EU AI Act & ISO 42001 Exemption）：本系統為純確定性規則工具（Deterministic System），不包含任何機器學習演算法、無自動化決策、亦絕不使用使用者資料進行模型訓練，正式判定豁免於歐盟《人工智能法案》（EU AI Act）與 ISO/IEC 42001 規範邊界。

4. 資訊安全合規（ISO 27001/27701 Alignment）：全面落實輸入長度邊界校驗、原生 DOM 字符轉義（XSS 免疫）與嚴格之內容安全策略（CSP）。

【English】Governance, Privacy & Regulatory Scoping Commitment

1. Zero-Persistence Architecture: Operating entirely within volatile browser RAM, this application maintains zero server databases and retains zero logs. Closing the session tab executes instant and permanent erasure, fully aligning with HK PDPO (Cap. 486) and EU GDPR Art. 17 ("Right to Erasure").

2. Peer-to-Peer Encryption (DTLS-SRTP): All narratives and votes are encrypted in transit directly between participant devices via WebRTC data channels, eliminating intermediary payload exposure.

3. AI Regulatory Exemption (EU AI Act & ISO 42001 Out-of-Scope): This utility operates strictly on deterministic logic. It employs zero machine learning models, executes zero automated inferences, and never ingests personal data for model training, formally exempted from the scope of the EU AI Act and ISO/IEC 42001.

4. Infosec & Privacy Control (ISO 27001/27701): Formally hardened with field-level truncation, native character escaping (XSS immunization), and restrictive Content Security Policy (CSP) protections.