已上线内容，以及还没交的部分 What is live, and what is still open

网页 Sites

用户端 User app

一套代码（co.datadance.app）。先 iOS、安卓，网页跟版。 One codebase (co.datadance.app). iOS and Android first, web follows.

• 已完成Done iOS — 已上架 App Store iOS — live on the App Store
• 已完成Done 安卓 — 已上架 Google Play Android — live on Google Play
• 已完成Done 网页 — 同一套 Wallet，已在 app.datadance.ai Web — same Wallet, live at app.datadance.ai

插件 Plugins

ChatGPT、Claude 里装 DataDance。OAuth 打开 Wallet 同意，聊天只读画像。 Install DataDance in ChatGPT or Claude. OAuth opens Wallet consent. Chat reads the Portrait only.

• 已完成Done Claude 自定义连接器已验证可用 Claude custom connector verified
• 已完成Done Claude Connectors Directory
• 审核中In review ChatGPT Plugins Directory

为什么单独写这一节 Why this section exists

许可门、仅售已授权行、买方条款、隐私工单、掩码核验、同壳法律页、链上只放收据哈希——这些都要前后端一起设计。成本在工程和对齐上，不在「多买一张 GDPR 表」。公开报价仍是同一整包；这里是把产品考量写清楚，方便对照。 Licence gates, consented-only sales, buyer terms, privacy tickets, masked verify, Legal in the same shell, and hash-only on-chain receipts all need front and back design together. The cost is engineering and alignment — not “buy an extra GDPR form.” The public quote stays the same package; this section makes the product judgment visible.

• 收集前说清 — Connect 前有独立数据许可；隐私政策写明分析 / 研究用途，不是直销。 Purpose before collection — a separate data licence before Connect; the privacy policy states analysis / research, not direct marketing.
• 可拒绝、可撤回 — 未同意不能连站；撤回后停止新采集与新授权。已卖出的包按条例口径不从买方收回。 Refuse and withdraw — Connect stays closed without grant; withdraw stops new collection and new licences. Already-sold packs stay with the buyer, which matches the Ordinance.
• 只卖已授权 Connect 行 — 商家买包时过滤未授权主体。商家自己上传的商品包不走这份 C 端许可。 Consented Connect rows only — marketplace packs filter subjects without an active grant. Merchant-uploaded product packs are not this C-end grant.
• 查阅 / 更正 / 删除通道 — 应用内工单 + [email protected]，香港底线争取 40 日内答复。不是欧盟权利拼盘。 Access / correct / erase channel — in-app tickets + [email protected], Hong Kong floor aiming for reply within 40 days. Not an EU rights menu.
• 买家侧证据 — 下载前买方许可（分析、禁止直销、禁止转售）；Check a record 只核验买家已有邮箱；商业发票 PDF；链上仅存证哈希，数据集不上链。 Buyer-side evidence — buyer licence before download (analysis, no DM, no resale); Check a record only checks an email the buyer already holds; commercial invoice PDF; on-chain hash only — dataset stays off-chain.
• 刻意不做的 — 不把 s.33（未生效）当必须；不另造 DPA/GDPR 套件；不把发票当成私隐条例义务（发票是商业记账）。 Deliberately not inventing — no mandatory s.33 (not in operation); no bolted-on DPA/GDPR kit; invoices are commercial books, not a PDPO statute.

壳层 · Home / Referral / Me Shell · Home / Referral / Me

首页是 Earn。邀请在 Referral。我的里是账户、画像、语言和法律。底栏只出现在这三个路由。 Home is Earn. Referral is invite. Me is account, Portrait, language, and legal. The tab bar only appears on those three routes.

造型：芯片、搜索、底栏和主按钮用胶囊 999px。多块卡片用 22px。画布 #f6f4f0，表面 #fffefc，墨色 #1c1917。 Shape language: capsules 999px for chips, search, tabs, and primary buttons. Multi-block cards use 22px. Canvas #f6f4f0, surface #fffefc, ink #1c1917.

积分与兑换 Points & redeem

积分放在卡片里。兑换和明细一键到达。兑换现已支持 United Stables 数字美元，与礼品卡并列。 Points sit in a card. Redeem and History live one tap away. Redeem now supports United Stables — a digital dollar — next to gift cards.

活动 Campaigns

Summer Travel 与每日任务挂在首页积分卡附近。任务按顺序解锁。 Summer Travel and Daily Tasks sit near the points card on Home. Tasks unlock in order.

数据许可 Data licence

Connect 另有一份许可，和用户协议分开。可拒绝。未同意前不能连站。同意后，商家买到的只是已授权的 Connect 行。上传包是商家自己的商品，不走这份许可。 Connect uses a separate grant from the User Agreement. You can refuse. Connect stays closed until you agree. Merchants may licence consented Connect rows only. Upload packs are merchant products — they are not this grant.

• 授予 — 我的 → 数据许可，或连站前的底栏。我们读你登录后打开的记录，并可能向买包的商家授权，用于分析和产品研究。这不是营销同意。 Grant — Me → Data licence, or the sheet before Connect. We read records you open after sign-in, and may licence them to a business buyer for analysis and product research. This is not marketing consent.
• 撤回 — 同一页随时撤回。新采集和新授权停止。已经卖出的包不从买方删掉。 Withdraw — same page, anytime. New collection and new licences stop. A pack already sold is not deleted from the buyer.

查阅我的信息 · 40 日 View my information · 40 days

我的 → 查阅我的信息 / 隐私请求。可申请查阅、更正或删除。按香港《个人资料（私隐）条例》底线，我们争取 40 日内答复。也可写信 [email protected]。不是 GDPR 页面，不另造欧盟权利清单。 Me → View my information / Privacy requests. Ask to access, correct, or erase. Hong Kong PDPO floor: we aim to reply within 40 days. Or write [email protected]. This is not a GDPR page and does not invent an EU rights list.

怎么走 How it runs

五个分栏：店铺、社交、出行、生活、其他 — 只做海外站，不变。搜索覆盖全部分栏。其他里粘贴 URL 打开对应站点。只有 Connect 会输入账号 — 我们不存密码。目标站会话登录成功后才开始读取；未登录的首页和公开列表会等待。登录后由智能通用提取器找订单 / 行程 / 帖子 / 活动列表，丢掉登录墙、Cookie 条和空状态壳，保留原页可见并计数，按留下的记录发积分。 Tabs are Shops, Social, Travel, Life, and Other — overseas-first, unchanged. Search covers every tab. A pasted URL on Other opens that host. Connect is the only place credentials are entered — we do not store secrets. Reading starts only after the target site session is signed in — guest homes and public listings wait. After sign-in a smart generic extractor finds orders / trips / posts / activity lists, drops login-wall, cookie, and empty chrome, keeps the live page visible while counting, and awards points per kept record.

1. 选一个平台，或在其他里粘贴 URL。 Pick a platform, or paste a URL on Other.
2. 在应用内浏览器登录该站点。 Sign in on that site inside the in-app browser.
3. 通用提取器定位真实列表，丢掉脏壳，上传干净集合。 The generic extractor locates the real list, drops dirty chrome, and uploads the clean set.
4. 上线平台按留下的记录发积分。结果页写明留下了什么。 Live platforms award points per kept record. The sheet shows what was kept.

店铺 Shops

Amazon 置顶。目录含 SHEIN、Temu、Shopee、Rakuten、Mercari、Sephora、Best Buy，以及 Target、Nike、IKEA 等海外店铺。不含淘宝、京东、拼多多。 Amazon featured. Catalog includes SHEIN, Temu, Shopee, Rakuten, Mercari, Sephora, Best Buy, plus Target, Nike, IKEA, and the rest of the overseas shops. No Taobao, JD, or Pinduoduo.

社交 Social

社交已上线。登录后读取可见帖子或标题。目录含 X、Instagram、Facebook、LinkedIn、TikTok、Reddit、YouTube、Threads、Pinterest，以及 Discord、Twitch。不含小红书、微博、抖音。 Social is live. After sign-in we read visible posts or titles. The tab lists X, Instagram, Facebook, LinkedIn, TikTok, Reddit, YouTube, Threads, Pinterest, plus Discord and Twitch. No RED, Weibo, or Douyin.

出行 Travel

Airbnb 置顶，然后是 Booking、Expedia、Agoda、Trip.com、Hotels.com、Tripadvisor。Summer Travel 仍从首页连 Airbnb 或 Booking。 Airbnb featured, then Booking, Expedia, Agoda, Trip.com, Hotels.com, and Tripadvisor. Summer Travel still connects Airbnb or Booking from Home.

生活 Life

餐饮、出行、活动：Luma、Uber、Uber Eats、DoorDash、Deliveroo、foodpanda、Eventbrite、Ticketmaster、Meetup。不含滴滴。 Food, rides, and events: Luma, Uber, Uber Eats, DoorDash, Deliveroo, foodpanda, Eventbrite, Ticketmaster, and Meetup. No DiDi.

其他 Other

粘贴任意已登录页面——订单、行程、帖子或活动。打开按钮在输入框旁边。 Paste any signed-in page — orders, trips, posts, or events. The open action sits beside the field.

连接与结果 Connect & result

目标站登录成功后，智能通用提取器才在页面里找订单、行程、帖子或活动列表；丢掉登录墙、Cookie 同意条和「暂无」空壳。读取时原页面保持可见并计数；留下的每条记录发积分。结果页写新记录数、来源主机，然后回 Earn 或再读一次。五个海外分栏不变。 Only after the target site session is signed in does a smart generic extractor find orders, trips, posts, or activity lists; it drops login walls, cookie banners, and empty-state chrome. The live page stays visible while we count; each kept record awards points. The result shows new records, the source host, then back to Earn or read again. Overseas-first tabs stay the same.

画像 Portrait

人生胶囊现在住在 Wallet，入口是 我的 → 画像。它是从用户已分享痕迹里蒸馏出的生活方式图：购物节奏、地点、活动。它不是 ChatGPT 历史，也不是订单表倾销。 Life Capsule now lives in Wallet as Portrait — Me → Portrait. It is a distilled lifestyle picture from traces the user already shared: shopping rhythm, places, events. It is not ChatGPT history, and it is not a dump of the order table.

保险库 Vault

主题、住过的地方、活动、近期标题。空的条带不说话。原始标题默认不出保险库，除非分享级别是 Intimate，而且也只给几条例子。 Themes, places you stay, events, recent titles. Empty bands stay quiet. Raw titles stay out unless the share level is Intimate, and even then only a few examples.

提取 Extract

提取走四步：保险库 → 清洗爬虫脏行 → Gemini 精炼 → 写入。保存下来的提取才是 MCP 对外的内容。 Extract runs four steps: vault → clean dirty crawler rows → Gemini refine → write. The saved extract is what MCP serves.

OAuth 2.1 + PKCE

ChatGPT 和 Claude 对 DataDance 发起 OAuth 2.1 + PKCE。助手打开 Wallet 同意页。人用应用里同一套 Web3Auth 登录，选允许或拒绝，助手拿到短时 ddc_mcp_… 令牌。目录或连接器不需要人粘贴密钥。 ChatGPT and Claude start OAuth 2.1 + PKCE against DataDance. The assistant opens Wallet consent. The human signs in with the same Web3Auth login already used in the app, picks allow or deny, and the assistant receives a short-lived ddc_mcp_… token. Nobody pastes a secret for a directory or connector.

发现在 API 源站：/.well-known/oauth-protected-resource 和 /.well-known/oauth-authorization-server。客户端用 CIMD 或 POST /oauth/register 注册。未认证的 POST /mcp 返回带 resource_metadata 的 401。 Discovery lives on the API origin: /.well-known/oauth-protected-resource and /.well-known/oauth-authorization-server. Clients register with CIMD or POST /oauth/register. An unauthenticated POST /mcp returns 401 with a resource_metadata challenge.

分享级别 Share levels

• 公开列表 — 只有名字、handle、已连接来源。 Public listing — name, handle, connected sources only.
• 透明画像 — 购物节奏、旅行地点、活动主题。 Transparent portrait — shopping rhythm, travel places, event themes.
• 亲密画像 — 同上，外加几条示例标题。 Intimate portrait — the same, plus a few example titles.

工具 Tools

工具：get_public_profile、get_boundaries、get_life_capsule、search_life_signals（均为 readOnlyHint，destructiveHint: false）。每一级都剥掉价格、订单号和地址。Claude 官方目录已上架。ChatGPT 官方目录已提交审核。 Tools: get_public_profile, get_boundaries, get_life_capsule, search_life_signals (each readOnlyHint, destructiveHint: false). Prices, order IDs, and addresses are stripped at every level. The Claude directory listing is live. The ChatGPT directory listing is in review.

用户在聊天里怎么用 What the person does in chat

1. 在 Claude 连接器目录里找到 DataDance。ChatGPT 目录已提交审核，发布前仍用自定义连接器粘 MCP 地址。 Find DataDance in the Claude connectors directory. The ChatGPT listing is in review, so until it is published paste the MCP URL as a custom connector there.
2. 点连接。助手对 DataDance 发起 OAuth 2.1 + PKCE。 Connect. The assistant starts OAuth 2.1 + PKCE against DataDance.
3. 打开 Wallet 同意页。用 Web3Auth 登录，选公开 / 透明 / 亲密，允许或拒绝。 Wallet consent opens. Sign in with Web3Auth, pick Public / Transparent / Intimate, allow or deny.
4. 回到聊天。助手只能读已保存的提取，看不到原始订单。 Back in chat. The assistant reads the saved extract only — never raw orders.

官方目录 Directories

• 审核中In review OpenAI ChatGPT Plugins Directory — 已提交审核，等 OpenAI 审核。通过后还要自己点发布。 OpenAI ChatGPT Plugins Directory — submitted. Waiting on OpenAI's review. After approval, publish it from the portal.
• 已完成Done Anthropic Claude Connectors Directory — 已发布为 Community 连接器。claude.ai/directory/connectors/datadance Anthropic Claude Connectors Directory — published as a Community connector. claude.ai/directory/connectors/datadance

守这些规则：账号只走界面；插件读提取不读爬虫表；一个 MCP 地址、一类令牌、三档分享。 Keep these rules: GUI only for credentials; plugins read the extract, not the crawler table; one MCP URL, one token family, three share levels.

Claude 目录已经上架。ChatGPT 目录已提交，等 OpenAI 审核。手动令牌只留给 Developer 模式。 The Claude directory listing is live. The ChatGPT directory listing is in review. Manual tokens stay for Developer mode only.

2026 年 9 月 5 日界面 UI · 5 September 2026

纸面磁贴、封面贴边、Buy + Detail 胶囊。Account 在侧栏最底，下面分 Wallet / Information / Company。Legal 在右侧面板，隐私政策与用户协议直接内嵌，不用再登一次 Wallet。页脚固定在窗口底：Account information、Legal / Privacy、Privacy Policy、User Agreement。 Paper tiles, flush covers, Buy + Detail capsules. Account last in the nav, with Wallet / Information / Company tabs. Legal opens in the right panel; Privacy Policy and User Agreement are inlined — no second Wallet login. Footer stays at the window bottom: Account information, Legal / Privacy, Privacy Policy, User Agreement.

五语界面 · en / zh / zh-TW / ja / ko Five languages · en / zh / zh-TW / ja / ko

商家采购台支持五种界面语言：English、简体中文、繁體中文、日本語、한국어。选择会记在本机，下次打开仍用同一语种。 The merchant desk supports five UI languages: English, 简体中文, 繁體中文, 日本語, and 한국어. The choice is stored locally and reused on the next visit.

怎么切换 — 顶栏胶囊：地球图标 + 短徽章 EN / 简 / 繁 / 日 / 한，旁侧显示当前语言本名。点开下拉，每项仍是短徽章 + 母语名称（English、简体中文、繁體中文、日本語、한국어）。 How to switch — header capsule: globe icon + short badge EN / 简 / 繁 / 日 / 한, with the current native name beside it. The dropdown lists each language as short badge + native name (English, 简体中文, 繁體中文, 日本語, 한국어).

会翻译 — 侧栏与页脚导航；Buy Data、My Data、Account 三个主区（含 Wallet / Information / Company 页签）；购买成功、买方许可、下载与核验等流程外壳与标签。 What is translated — sidebar and footer nav; Buy Data, My Data, and Account (including Wallet / Information / Company tabs); purchase, buyer licence, download, and verify chrome and labels.

正文仍用英文源 — Privacy Policy 与 User Agreement 的正文以英文为权威版本；Legal 面板的页签名、外壳与按钮会随语种切换，政策段落本身不另译。 English source of truth — Privacy Policy and User Agreement body stay English. Legal panel tab names, chrome, and labels follow the UI language; the policy paragraphs are not retranslated.

Buy Data 分页 — 首屏约 48 个包；更多时点 View more（或各语对应文案）再加载一批，文案会显示剩余数量。 Buy Data pagination — first screen shows about 48 packs; View more (localized) loads the next batch and shows how many remain.

返回路径 — Detail 与 My Data 用路由 from 状态记住从哪进来；返回回到 Buy Data 网格或 My Data 列表，而不是空白首页。 Back navigation — Detail and My Data pass a from route state so Back returns to the Buy Data grid or My Data list, not a blank home.

购买数据包 Marketplace purchase

Buy Data 网格：封面贴边、价格、Owned、Buy / Detail。详情层右上角 X 关闭。买成后绿色对勾。包进入 My Data，先接受买方许可再下载表格。 Buy Data grid: flush cover, price, Owned, Buy / Detail. Detail overlay closes with X. A green check means the purchase landed. The pack is in My Data — accept the buyer licence, then download the table.

卖的是已同意 Connect 行，或商家自己上传的包。数据包和 PII 不上链。 What you buy is consented Connect rows, or a merchant upload pack. Dataset and PII stay off-chain.

核验一条已知邮箱 Prove a known email is in the pack

Listing 与已购详情都有安静的「Check a record」。买家输入自己已经持有的邮箱（可选订单号），接口只回答是 / 否，命中时返回掩码，例如 j***@domain.com。不会列出包内其他邮箱。限 10 次/分钟，防止扫全表。香港 PDPO：这是核验买家已有的标识，不是为展示去新收集第三方个人信息。 Listing and owned detail both have a quiet “Check a record” card. The buyer enters an email they already have (optional order id). The product answers yes or no — a hit returns a mask such as j***@domain.com. Other emails are never returned. Rate limit 10/min so the list cannot be scraped. Hong Kong PDPO: this checks an identifier the buyer already holds; it is not a new collection of third-party PII for display.

接口 POST /api/data-nfts/:id/verify；买成后也可用 /purchased/:purchaseId/verify。大包由 DataDance Official 发布，按原上传表诚实合并，没有编造行。 API: POST /api/data-nfts/:id/verify; after purchase, /purchased/:purchaseId/verify. Large packs are published by DataDance Official from the existing uploaded table — honest counts, no invented rows.

账户 · Wallet / Information / Company Account · Wallet / Information / Company

Account 在侧栏最底。三个页签：Wallet 是 USD 余额、发票列表与收支卡片；Information 是本登录持有的资料；Company 是可选发票主体。购买后可在 My Data 或 Account 下载带 DataDance logo 的商业发票 PDF。官方记账是 USD，充值要等 DataDance 确认到账。余额不能提现。 Account is last in the nav. Three tabs: Wallet is the USD balance, invoice list, and income / expense cards; Information is what we hold on this login; Company is the optional invoice file. After a purchase, download a branded commercial invoice PDF from My Data or Account. Official bookkeeping is USD. Top-up credits after DataDance confirms the transfer. Balance cannot be cashed out.

法律页在右侧面板 Legal in the right panel

Legal / Privacy 留在同一壳层。Overview、Privacy Policy、User Agreement 是页签。复用的 Wallet 正文直接打开，不用第二次登录。商家查阅写信 [email protected]，香港 PDPO 底线 40 日。页脚始终在窗口底部。 Legal / Privacy stays in the same shell. Overview, Privacy Policy, and User Agreement are tabs. Published Wallet texts open here — no second login. Merchant access requests go to [email protected], Hong Kong PDPO 40-day floor. The footer stays at the window bottom.

上链许可收据 On-chain licence receipt

买成后，流程和购买成功页同一条请求：先对许可收据做哈希（不含邮箱、不含数据集），再调用 DDC 链 44508 上 CommerceAttester 的 attest(bytes32)。链上只有这个哈希。数据集、邮箱和其他个人信息不上链。 After purchase — the same request as Purchase successful — we hash the licence receipt (no emails, no dataset), then call attest(bytes32) on CommerceAttester on DDC chain 44508. The chain stores that hash only. Dataset, emails, and other personal data are not on chain.

去哪看 Where to look

主入口是 My Data → Detail，打开完整许可收据页 /my-data/:purchaseId。不要只看药丸弹出层。 The place to look is My Data → Detail — the full licence receipt page /my-data/:purchaseId. Do not stop at the pill popover.

• My Data 磁贴 — 药丸：On-chain / Recorded (hash) / On-chain pending。 My Data tile — pill: On-chain / Recorded (hash) / On-chain pending.
• 完整收据页 — /my-data/:purchaseId 写收据哈希、交易、状态。已上链时有「在区块链浏览器打开」跳转。这是买方核验的页面。 Full receipt page — /my-data/:purchaseId shows receipt hash, transaction, and status. On-chain receipts include Open in explorer. This is the page the buyer checks.
• 未购 listing — /nft-data-market/:id 说明买成后才会写收据。 Unbought listing — /nft-data-market/:id says a receipt is written at purchase.
• 购买成功 — 绿色对勾下有一行「Licence receipt recorded」。 Purchase successful — a quiet “Licence receipt recorded” line under the green check.
• 浏览器 — 已上链收据有「在区块链浏览器打开」，新标签打开 testnet.datadance.ai/tx/{hash}。字段可能滞后；以 RPC 为准。 Explorer — On-chain receipts have Open in explorer, which opens testnet.datadance.ai/tx/{hash} in a new tab. Fields can be stale. RPC is the reliable check.

• On-chain — 链 44508 上已有交易哈希。 On-chain — a transaction hash exists on chain 44508.
• Recorded (hash) — 收据哈希已记在本站，自动 attest 未跑完或仍在等。 Recorded (hash) — the receipt hash is stored here; automatic attest did not finish or is still waiting.
• On-chain pending — 许可已付，收据还没上链。 On-chain pending — the licence is paid; the receipt is not on chain yet.

未上链的 pending 可由运维在 ops 订单接口重试。公开营销站和法律页不放链上装饰。2026-09-05 官方测试单 PO-20260905-ZKJ9 / 0TR3 已在链上。2026 收入账本的 31 笔许可收据也已上链。更早、不在这本账里的 pending 仍等重试。 Ops can retry a pending receipt on the ops orders API. The public marketing site and Legal pages do not show on-chain chrome. Official 5 Sep 2026 test orders PO-20260905-ZKJ9 / 0TR3 are on-chain. The 31 licence receipts in the 2026 revenue book are on-chain too. Older pending receipts outside that book still wait for a retry.

日常怎么用 How to use it day to day

1. 在 Buy Data 选包，Buy 或 Detail。 Pick a pack on Buy Data. Buy or Detail.
2. 绿色对勾后去 My Data，接受买方许可，再下载。 After the green check, accept the buyer licence in My Data, then download.
3. 核验上链：My Data → Detail，打开完整许可收据页，看哈希、交易和状态。已上链时点「在区块链浏览器打开」。 To check on-chain: My Data → Detail, open the full licence receipt page, read hash, transaction, and status. Use Open in explorer when the receipt is on-chain.
4. Account → Wallet 看 USD 账和收支。Company 可填发票主体。 Account → Wallet for the USD book and movements. Company is optional for invoices.
5. 法律与页脚都在本站。不要走 /orders 当工作台。 Legal and the footer stay on this site. Do not treat /orders as a workspace.

按交付面切人日 Person-days by delivery