隱私政策
我們把這份文件寫得盡量白話，因為你有權知道我們拿了什麼。簡短版本是： 我們不放廣告、不接第三方追蹤 SDK、不做跨 App 追蹤、也不賣資料。 我們蒐集的東西只夠讓遊戲存檔能跨裝置還原、讓排行榜能運作、讓我們修得動當機問題。
一、我們蒐集哪些資料
| 類別 | 內容 | 為什麼需要 |
|---|---|---|
| 裝置識別碼 | App 首次啟動時在你裝置上產生的一組隨機字串 | 讓你不必註冊就能存進度（訪客帳號）。這串碼由 App 自己產生，不是廣告識別碼，也不能用來辨識你本人 |
| 帳號識別碼 | 若你選擇用 Apple 或 Google 登入，我們只保存該平台給我們的使用者代碼（sub） | 換手機時找回進度。我們不會取得也不保存你的電子郵件、真實姓名或通訊錄 |
| 遊戲存檔 | 關卡進度、星數、遊戲幣、成就、語言與音效偏好 | 雲端存檔與跨裝置同步 |
| 暱稱與頭像 | 你自己輸入的暱稱、你選的內建頭像 | 顯示在排行榜。這兩項其他玩家看得到，請勿填入真實姓名或個資 |
| 遊玩紀錄 | 你玩了哪一關、何時開始、玩了多久、通關或中途離開、誤答次數 | 判斷哪些關卡太難或有設計問題，用來調整難度曲線。這些數據我們只看整體統計 |
| 購買紀錄 | 交易編號、商品代碼、購買與到期時間 | 把你買的東西正確發給你、避免重複入帳、處理補發。信用卡號與付款資料全程由 Apple／Google 處理，我們看不到也不保存 |
| 錯誤日誌 | 當機或錯誤訊息、程式堆疊、作業系統與 App 版本 | 修 Bug。若你當時處於離線，這些紀錄會暫存在你裝置上，等連線後才送出 |
我們沒有蒐集的東西
精確位置、通訊錄、相簿、麥克風、健康資料、瀏覽紀錄、廣告識別碼（IDFA）。 App 內沒有任何第三方廣告或分析 SDK。
二、資料放在哪裡、保存多久
資料儲存在我們位於日本（AWS 東京區域）的伺服器。存檔與帳號資料會保留到你要求刪除為止； 錯誤日誌與遊玩紀錄保留最多 24 個月，之後會刪除或去識別化為統計數字。
三、我們會把資料給誰
只有在下列必要情況下，資料才會離開我們的伺服器：
- Apple／Google：驗證你的登入與購買憑證（是我們去問他們，不是把你的資料交出去）
- Amazon Web Services：我們的雲端主機供應商
- 法律要求：依法令或司法機關的正式要求
我們不會為了廣告或行銷目的，把資料提供、出租或販售給任何第三方。
四、你的權利
你可以隨時要求查閱、更正或刪除你的資料。刪除帳號會一併移除存檔、暱稱、 遊玩紀錄與錯誤日誌，且此動作無法復原（已完成的購買紀錄因會計與退款義務需另外保留）。
- App 內：設定 → 帳號 → 刪除帳號
- 來信：寄到 support@handchill.com，我們會在 30 天內處理
五、兒童
我們的遊戲適合所有年齡，但並非特別針對 13 歲以下兒童設計，也不會刻意蒐集兒童的個人資料。 若你是家長並發現孩子提供了個資給我們，請來信，我們會刪除。
六、政策變更
政策若有變更，我們會更新本頁最上方的日期；若屬重大變更，會在 App 內另行告知。
七、聯絡我們
Handchill（台灣）
電子郵件：support@handchill.com
Privacy Policy
We have written this in plain language because you deserve to know what we take. The short version: no ads, no third-party tracking SDKs, no cross-app tracking, and we never sell data. We collect only what is needed to restore your save across devices, run the leaderboard, and fix crashes.
1. What we collect
| Category | What it is | Why we need it |
|---|---|---|
| Device identifier | A random string generated on your device the first time the app launches | Lets you save progress without registering (guest account). It is generated by the app, is not an advertising identifier, and cannot identify you personally |
| Account identifier | If you sign in with Apple or Google, we store only the subject identifier (sub) that the platform gives us | Recovering your progress on a new device. We do not receive or store your email address, real name, or contacts |
| Game save | Level progress, stars, in-game currency, achievements, language and sound preferences | Cloud save and cross-device sync |
| Nickname and avatar | The nickname you type and the built-in avatar you pick | Shown on the leaderboard. Both are visible to other players, so please do not use your real name or personal details |
| Gameplay records | Which level you played, when you started, how long it took, whether you finished or quit, and how many wrong steps | To find levels that are too hard or badly designed and tune the difficulty curve. We only look at this in aggregate |
| Purchase records | Transaction ID, product ID, purchase and expiry time | To deliver what you bought, prevent double crediting, and handle re-grants. Card numbers and payment details are handled entirely by Apple/Google; we never see or store them |
| Error logs | Crash or error messages, stack traces, OS and app version | Fixing bugs. If you were offline at the time, these are queued on your device and sent once you reconnect |
What we do not collect
Precise location, contacts, photos, microphone, health data, browsing history, or the advertising identifier (IDFA). There are no third-party advertising or analytics SDKs in the app.
2. Where data lives and how long we keep it
Data is stored on our servers in Japan (AWS Tokyo region). Saves and account data are kept until you ask us to delete them. Error logs and gameplay records are kept for at most 24 months, after which they are deleted or reduced to anonymous statistics.
3. Who we share it with
Data leaves our servers only where necessary:
- Apple / Google — to verify your sign-in and purchase receipts (we ask them, we do not hand your data over)
- Amazon Web Services — our cloud hosting provider
- Legal requests — where required by law or valid judicial process
We do not provide, rent, or sell data to any third party for advertising or marketing.
4. Your rights
You may request access to, correction of, or deletion of your data at any time. Deleting your account removes your save, nickname, gameplay records, and error logs, and cannot be undone (completed purchase records are retained separately for accounting and refund obligations).
- In the app: Settings → Account → Delete account
- By email: support@handchill.com; we respond within 30 days
5. Children
Our games are suitable for all ages but are not directed at children under 13, and we do not knowingly collect personal data from them. Parents who believe their child has given us personal data should email us and we will delete it.
6. Changes to this policy
If this policy changes we will update the date at the top of this page, and for significant changes we will also notify you inside the app.
7. Contact
Handchill (Taiwan)
Email: support@handchill.com