隐私政策
SK:Frenemy(以下称「本游戏」)是一款在线双扣纸牌游戏,由个人开发者开发和运营(以下称「我们」)。这份政策说明我们收集哪些信息、拿来做什么、存在哪里、存多久,以及你怎样删除它们。
1. 我们收集的信息
| 信息 | 用途 | 别人能不能看到 |
|---|---|---|
| 邮箱地址 | 注册和登录;找回密码时把验证码发到这里 | 不能 |
| 密码 | 登录。我们只保存加密后的哈希值,任何人(包括我们)都看不到原文 | 不能 |
| 8 位玩家 ID | 注册时自动分配,加好友时报给朋友用 | 能 |
| 昵称、头像 | 昵称从系统词库里组合,头像从系统给的几种里选 | 能(好友、同桌玩家) |
| 隐私设置 | 是否接受好友申请、战绩是否公开 | 系统按设置决定别人能做什么 |
| 好友关系、黑名单 | 好友列表、好友申请;你拉黑的人 | 好友关系只有双方能看到;黑名单只有你自己 |
| 举报记录 | 你举报别人、或别人举报你时,记录双方的玩家 ID、理由和时间,供我们处理违规 | 不能。被举报的人不会知道是谁举报的 |
| 聊天消息 | 和好友之间发送的表情消息 | 只有聊天双方 |
| 游戏内邮件的已读 / 删除状态 | 显示你的邮箱和未读数 | 不能 |
| 对局中的状态 | 座位、手牌、出牌等,只在对局进行时保存在服务器内存里 | 按游戏规则显示给同桌 |
| 登录凭证 | 让你不用每次都输密码;保证同一账号同时只在一台设备上登录 | 不能 |
| IP 地址 | 网络连接本身需要,用来把数据发回你的设备 | 不能 |
我们不收集:你的真实姓名、手机号、通讯录、位置、照片、设备上的其他文件,也不收集广告标识符。本游戏目前没有内购,我们不处理任何支付信息。
2. 保存在你设备上的信息
游戏会在你的设备上保存登录凭证(不是密码)、语言和声音等设置、通知开关、新手教程进度。这些只存在你的设备上,卸载游戏即删除。
3. 信息存在哪里、谁会接触到
- 游戏服务器:阿里云(Alibaba Cloud)香港地域。上面第 1 节的信息都存在这里。
- 发信服务:你使用「忘记密码」时,我们通过 Resend(Resend, Inc.)把验证码邮件发到你的邮箱。Resend 只会收到你的邮箱地址和邮件内容。
- 应用商店:你从 Google Play 或 Steam 下载游戏时,这些平台按它们自己的隐私政策处理你的信息。
除此之外,我们不会出售、出租或分享你的个人信息。只有在法律要求时,我们才会向有关部门提供必要的信息。
4. 安全
游戏和服务器之间的所有通信都通过 HTTPS / WSS 加密传输。密码以 bcrypt 哈希保存。数据库和管理后台不对公网开放。
5. 保存多久
- 账号信息、好友、聊天消息、邮件状态:保存到你注销账号为止。
- 找回密码的验证码:15 分钟后失效。
- 举报记录:最长 90 天,到期自动删除。
- 服务器运行日志:可能包含账号的内部编号和发生时间,用于排查故障;日志按大小自动轮换,旧日志会被覆盖。
- 数据库备份(如有):最长保留 30 天,到期自动删除。
6. 注销账号和删除数据
你可以随时在游戏里注销:「我的」→「账号与安全」→「注销账号」,输入密码确认。注销后,你的账号、昵称、头像、邮箱、好友关系和黑名单、你发过的聊天消息、邮件状态、设置,以及与你有关的举报记录会立即从服务器删除,不能恢复。
如果你已经无法登录游戏,请看 注销账号申请页。
7. 你的其他权利
你可以在游戏里随时查看和修改自己的昵称、头像和隐私设置。如需获取我们保存的关于你的数据副本、更正或删除数据,请发邮件联系我们,我们会在 30 天内答复。
8. 儿童
本游戏不面向 13 岁以下的儿童,我们也不会有意收集 13 岁以下儿童的个人信息。如果你认为有儿童向我们提供了个人信息,请联系我们,我们会删除。
9. 政策更新
如果我们改变收集或使用信息的方式(例如开始记录对局战绩),会先更新这份政策并修改上面的生效日期;重要变化会在游戏内邮件里通知。
10. 联系我们
Privacy Policy
SK:Frenemy (the "Game") is an online Shuangkou card game developed and operated by an independent developer ("we", "us"). This policy explains what we collect, why, where it is stored, how long we keep it, and how you can delete it.
1. Information we collect
| Information | Purpose | Visible to others? |
|---|---|---|
| Email address | Sign-up and sign-in; receiving password reset codes | No |
| Password | Sign-in. We store only a hash; nobody, including us, can see the original | No |
| 8-digit player ID | Assigned at sign-up; shared with friends to add each other | Yes |
| Nickname and avatar | Nicknames are built from a fixed word list; avatars are chosen from a fixed set | Yes (friends, players at your table) |
| Privacy settings | Whether you accept friend requests and show your record | Used to decide what others can do |
| Friends and block list | Friend list and requests; players you have blocked | Friendships: only the two of you. Block list: only you |
| Reports | When you report someone or are reported, we record both player IDs, the reason and the time so we can handle violations | No. Reported players are not told who reported them |
| Chat messages | Emote messages sent between friends | Only the two of you |
| In-game mail read/deleted state | Showing your inbox and unread count | No |
| Match state | Seats, cards and plays, held in server memory only while a match is running | Shown to your table according to the game rules |
| Session tokens | Keeping you signed in; allowing one device per account at a time | No |
| IP address | Required by the network connection to send data back to your device | No |
We do not collect your real name, phone number, contacts, location, photos, other files on your device, or advertising identifiers. The Game currently has no in-app purchases and we do not process payment information.
2. Information stored on your device
The Game stores a session token (not your password), language and sound settings, notification switches and tutorial progress on your device. They stay on your device and are removed when you uninstall the Game.
3. Where data is stored and who can access it
- Game server: Alibaba Cloud, Hong Kong region. Everything in section 1 is stored here.
- Email delivery: when you use "Forgot password", we send the code through Resend (Resend, Inc.). Resend receives only your email address and the message.
- App stores: Google Play and Steam handle your information under their own privacy policies when you download the Game.
Apart from the above, we do not sell, rent or share your personal information. We disclose information only when required by law.
4. Security
All traffic between the Game and our server is encrypted with HTTPS / WSS. Passwords are stored as bcrypt hashes. The database and admin console are not reachable from the internet.
5. Retention
- Account data, friends, chat messages and mail state: kept until you delete your account.
- Password reset codes: expire after 15 minutes.
- Reports: kept for at most 90 days, then deleted automatically.
- Server logs: may contain internal account IDs and timestamps for troubleshooting; logs rotate by size and old logs are overwritten.
- Database backups (if any): kept for at most 30 days, then deleted automatically.
6. Deleting your account and data
You can delete your account at any time in the Game: Me → Account & Security → Delete account, then confirm with your password. Your account, nickname, avatar, email, friends and block list, the chat messages you sent, mail state, settings and any reports involving you are deleted from our server immediately and cannot be recovered.
If you can no longer sign in, see the account deletion request page.
7. Your other rights
You can view and change your nickname, avatar and privacy settings in the Game at any time. To request a copy of your data, a correction or deletion, email us and we will reply within 30 days.
8. Children
The Game is not directed at children under 13 and we do not knowingly collect personal information from them. If you believe a child has given us personal information, contact us and we will delete it.
9. Changes
If we change how we collect or use information (for example, starting to record match history), we will update this policy and its effective date first, and announce important changes by in-game mail.
10. Contact
Email: support@skfrenemy.com