1. 我們收集的資料

我們不收集

• 姓名、Email、電話、住址、生日
• 精確或概略位置
• 通訊錄、相片、麥克風、相機內容
• 廣告識別碼（IDFA），也不做跨 App 或跨網站的追蹤

若你使用「Sign in with Apple」登入

此功能是選用的。若你使用 Apple 登入，我們會額外儲存 Apple 提供給本遊戲的使用者識別碼，用來把雲端存檔綁定到你的 Apple 帳號，方便換機取回存檔。若你選擇分享 Email，我們只保存其雜湊值（不可還原的代碼），不保存 Email 原文；若你選擇隱藏 Email，我們只會收到 Apple 的轉發地址，同樣只保存雜湊。我們不會收到你的 Apple 密碼。登入時 Apple 另會簽發一組授權憑證，我們加密保存，唯一用途是在你刪除帳號或解除連結時，向 Apple 撤銷本遊戲的 Apple 登入授權。首次綁定 Apple 帳號會獲得一次性的遊戲內獎勵；為防止重複領取，我們會保留一筆由 Apple 使用者識別碼產生的不可還原雜湊值（以及領取時間），即使你解除連結或刪除帳號也不會刪除這筆紀錄，但它無法還原成你的 Apple 識別碼，也不含任何遊戲進度。

網路連線的一般紀錄

當遊戲連到我們的伺服器時，連線經過 Cloudflare（見第 4 節）。為了防止濫用，系統會暫時使用 IP 位址做連線頻率限制；我們不會把 IP 位址與你的遊戲帳號一起長期保存。

2. 我們如何使用資料

• 提供遊戲功能：存檔備份、排行榜、推薦獎勵、每日內容。
• 維護與改善遊戲：以匿名統計了解遊戲是否太難、太簡單，修正錯誤。
• 防止作弊與濫用：為維護排行榜公平，伺服器會自動檢查上傳的存檔與排行榜成績是否合理（例如樓層進度速度、資源數量）。明顯不合理的紀錄會暫時不顯示在公開排行榜上，並由營運人員人工確認；這項檢查不會刪除或修改你的存檔。檢查結果與營運人員的處理備註只保存在伺服器後台，刪除帳號時一併刪除。

我們不會販售你的資料，也不會與第三方分享做行銷用途。遊戲裡唯一的廣告是你主動選擇觀看的獎勵型廣告（僅 App 版，見第 1、4 節），不會有強制或插播廣告，也不會用你的資料做個人化廣告。

3. 保存期限

• 遊戲存檔、排行榜資料、推薦碼關係、購買驗證紀錄、看廣告紀錄、暱稱檢舉紀錄（含暱稱處理狀態）：保存到你在遊戲內「刪除帳號」（或來信要求刪除）為止；我們保留清理長期未活躍帳號資料的權利。
• 匿名遊玩統計：為了長期比較平衡調整的效果而保存，內容不含可識別個人的資訊。
• 本機資料：存放在你的裝置上，刪除 App、在遊戲內「重置帳號」或「刪除帳號」即會清除。

4. 第三方服務

• Cloudflare：我們的伺服器與遊戲網站透過 Cloudflare 提供連線與防護，連線資料會經過其網路。
• Apple：App Store 發行與內購付款由 Apple 處理（我們收不到你的付款卡資料）；若使用 Sign in with Apple，驗證由 Apple 完成。
• Google AdMob（僅 App 版）：提供你主動選擇觀看的獎勵型廣告。我們只請求非個人化廣告、不彈出追蹤授權視窗；Google 會依其政策（policies.google.com/technologies/partner-sites）處理廣告相關資料（見第 1 節）。
• 本遊戲 App 不內含第三方分析 SDK。
• 遊戲的網頁版目前可能向 Google Fonts 讀取字型檔，屆時 Google 會依其政策看到你的 IP 位址；App 版將改為內建字型。

5. 兒童

本遊戲並非專為 13 歲以下兒童設計，也不會刻意向 13 歲以下兒童收集個人資料。我們依美國 COPPA 與台灣個人資料保護法的精神，若發現不慎收集到 13 歲以下兒童的個人資料，會儘速刪除。未成年人使用本遊戲（含任何付費項目）應取得家長或法定代理人同意。如果你是家長並認為孩子的資料不應被保存，請依第 6 節聯絡我們。

6. 你的權利與刪除資料

你可以要求查詢、更正或刪除我們保存的你的資料。

• 遊戲內「刪除帳號（含雲端資料）」：玩家面板最下方「重置帳號」→「刪除帳號（含雲端資料）」，輸入「刪除」兩個字確認後，立即刪除我們保存的、與這台裝置相關的全部雲端資料（雲端存檔、排行榜資料、推薦關係、每日活躍與統計紀錄、購買驗證紀錄、看廣告紀錄、暱稱檢舉紀錄與暱稱處理狀態、Apple 登入連結），並清除這台裝置上的存檔；若你曾用 Apple 登入，我們同時向 Apple 撤銷本遊戲的 Apple 登入授權（你也可以隨時在 iPhone「設定」→ 你的名字 →「登入與安全性」→「使用 Apple 登入」自行停止使用）。需要連上網路才能執行；此動作無法復原。已購買的內購商品屬於你的 Apple ID，不受影響，但遊戲內的進度刪除後不會再回來。
• 遊戲內「重置帳號」（玩家面板最下方）：只清除這台裝置上的存檔與裝置憑證，之後遊戲會當成全新玩家重新開始，不會刪除雲端上已備份的資料；想連雲端一起刪除請用上一項。
• 來信要求刪除（例如無法使用 App 時）：請來信 [email protected]，信中附上你的暱稱與推薦碼（兩者都可在遊戲的玩家面板看到），我們會在收到後 30 天內刪除雲端存檔、排行榜資料與推薦關係，並回信確認。
• 本機資料隨時可以刪除遊戲 App 一併清除。

7. 資料安全

資料以加密連線（HTTPS）傳輸，伺服器端以存取憑證限制只能讀寫自己的存檔。沒有任何網路服務能保證絕對安全，若發生會影響你的資料外洩事件，我們會依法令通知。

8. 政策更新

我們可能因功能或法規變動而更新本政策，更新後會修改本頁最上方的「最後更新」日期；重大變更會在遊戲內公告。

9. 聯絡我們

任何隱私相關問題，請來信：[email protected]

1. Data we collect

What we do not collect

• Name, email address, phone number, home address, date of birth
• Precise or coarse location
• Contacts, photos, microphone or camera content
• The advertising identifier (IDFA); we do not track you across apps or websites

If you use "Sign in with Apple"

This feature is optional. If you sign in with Apple, we additionally store the user identifier Apple provides to the Game in order to bind your cloud save to your Apple account, so you can restore it on a new device. If you choose to share your email, we keep only a one-way hash of it, never the email itself; if you choose to hide your email, we receive only Apple's relay address and likewise keep only a hash. We never receive your Apple password. At sign-in Apple also issues an authorization token, which we store encrypted and use for one purpose only: to revoke the Game's Sign in with Apple authorization with Apple when you delete your account or unlink Apple sign-in. Linking an Apple account for the first time grants a one-time in-game reward; to prevent the reward from being claimed more than once, we keep an irreversible hash derived from your Apple user identifier (and the time it was claimed). This record is kept even if you unlink Apple sign-in or delete your account, but it cannot be turned back into your Apple identifier and contains no game progress.

General network logs

Connections to our server pass through Cloudflare (see Section 4). To prevent abuse, IP addresses are used temporarily for rate limiting; we do not keep IP addresses together with your game account for the long term.

2. How we use data

• To provide Game features: save backup, leaderboards, referral rewards, daily content.
• To maintain and improve the Game: anonymous statistics show whether the Game is too hard or too easy, and help us fix errors.
• To prevent cheating and abuse: to keep the leaderboard fair, our server automatically checks whether uploaded save data and leaderboard results are plausible (for example, floor progress speed and resource amounts). Clearly implausible records may be temporarily hidden from the public leaderboard and are reviewed by our team; this check never deletes or changes your save data. Check results and our team's review notes are stored only on our server and are deleted when you delete your account.

We do not sell your data and do not share it with third parties for marketing. The only ads in the Game are rewarded ads you choose to watch (app version only; see Sections 1 and 4); there are no forced or interstitial ads, and we do not use your data for personalized advertising.

3. Retention

• Save data, leaderboard data, referral relationships, purchase verification records, ad-watching records and nickname report records (including nickname review status): kept until you use "Delete account" in the Game (or ask us by email to delete them). We reserve the right to clean up data of long-inactive accounts.
• Anonymous gameplay statistics: kept to compare the effect of balance changes over time; they contain no personally identifying information.
• Local data: stored on your device; it is removed when you delete the app or use "Reset account" or "Delete account" in the Game.

4. Third parties

• Cloudflare: our servers and the Game website are delivered and protected through Cloudflare, so connection data passes through its network.
• Apple: App Store distribution and in-app purchase payments are handled by Apple (we never receive your payment card details); if you use Sign in with Apple, authentication is done by Apple.
• Google AdMob (app version only): serves the rewarded ads you choose to watch. We request non-personalized ads only and show no App Tracking Transparency prompt; Google processes ad-related data under its own policies (policies.google.com/technologies/partner-sites; see Section 1).
• The Game app contains no third-party analytics SDK.
• The web version of the Game may currently load font files from Google Fonts, in which case Google sees your IP address under its own policy; the app version will bundle the fonts instead.

5. Children

The Game is not designed for children under 13 and we do not knowingly collect personal information from children under 13. In the spirit of the U.S. COPPA and Taiwan's Personal Data Protection Act, if we learn that we have collected personal information from a child under 13, we will delete it promptly. Minors should obtain the consent of a parent or legal guardian before playing or making any purchase. If you are a parent and believe your child's data should not be kept, please contact us as described in Section 6.

6. Your rights and deleting your data

You may ask to access, correct or delete the data we hold about you.

• "Delete account (including cloud data)" in the Game: bottom of the player panel, "Reset account" → "Delete account (including cloud data)". After you type the confirmation word, we immediately delete all cloud data we hold for this device (cloud save, leaderboard entry, referral relationships, daily-activity and statistics records, purchase verification records, ad-watching records, nickname report records and nickname review status, Apple sign-in link) and the save on this device is cleared. If you signed in with Apple, we also revoke the Game's Sign in with Apple authorization with Apple (you can also stop using it at any time in iPhone Settings → your name → Sign-In & Security → Sign in with Apple). An internet connection is required and the action cannot be undone. In-app purchases you made belong to your Apple ID and are not affected, but your in-game progress will not come back after deletion.
• "Reset account" in the Game (bottom of the player panel): clears only the save data and device credential on this device, and the Game restarts as a new player. It does not delete the backup copy in the cloud; use the option above to delete the cloud data as well.
• Deletion by email (for example if you cannot use the app): email [email protected] with your nickname and referral code (both are shown in the Game's player panel). We will delete your cloud save, leaderboard entry and referral relationships within 30 days of receiving your request and confirm by reply.
• You can always remove local data by deleting the app.

7. Security

Data is transmitted over encrypted connections (HTTPS), and server-side credentials restrict each device to reading and writing only its own save. No online service can guarantee absolute security; if a data breach affecting you occurs, we will notify you as required by law.

8. Changes to this policy

We may update this policy when features or regulations change. The "Last updated" date at the top of this page will be revised, and material changes will be announced in the Game.

9. Contact

For any privacy question, email: [email protected]