隐私政策 Privacy Policy
01引言与适用范围
本隐私政策（以下简称“本政策”）适用于由 ALEX.H.Y（以下简称“我们”）在 Apple App Store、Google Play 以及我们可能使用的其他应用分发平台上发布的游戏与应用（合称“本服务”）。
本政策说明我们在你下载、安装、启动、游玩或使用本服务时，如何收集、使用、存储、共享和保护你的信息，以及你享有的权利。
本政策仅适用于我们提供的游戏与应用，不适用于 Apple、Google 等平台自身提供的服务。你在 App Store 或 Google Play 上的账号、支付及平台使用数据，由相应平台按照其隐私政策处理。
我们建议你在使用本服务前仔细阅读本政策。使用本服务即表示你已阅读并理解本政策；如你不同意，请停止使用并卸载相关应用。
如对本政策有任何疑问，或希望行使本政策项下的权利，请发送邮件至 heyucrystal@gmail.com。
就本政策而言，个人信息的数据控制者为 ALEX.H.Y。
02我们收集的信息
我们遵循最小必要原则，仅收集实现下述目的所必需的信息。具体收集范围取决于你使用的游戏、设备、所在地区以及你启用的功能。
2.1 你主动提供的信息
- 账号信息：若游戏支持账号、登录或云存档，我们可能收集用户名、邮箱地址、登录凭证（由平台或认证服务处理）以及你选择的头像。
- 客服与反馈：当你联系客服或提交反馈时，我们可能收集你的联系方式、消息内容以及你主动附带的文件。
- 用户内容：你在游戏内创建的昵称、头像、关卡、评论或其他内容（如适用）。
- 活动信息：当你自愿参与测试、问卷或活动时提供的信息。
2.2 游戏进度与交易信息
- 游戏进度、分数、成就、道具、设置及偏好。
- 内购与订阅记录，包括交易标识、商品、金额与状态。支付由 Apple 或 Google 处理；我们不会收到你的完整银行卡号或支付凭证。
2.3 设备与技术信息
- 设备型号、操作系统与版本、语言与地区、应用版本、IP 地址，以及由 IP 地址推导的大致位置。
- 崩溃日志、性能数据、诊断信息及其他技术日志。
- 设备标识符与广告标识符（例如 IDFA、Android 广告 ID），用于游戏运营、分析、广告与反作弊。是否收集取决于游戏功能及你的授权。
2.4 第三方 SDK
我们的游戏可能接入分析、崩溃报告、广告、云存储、登录或支付类第三方 SDK。这些 SDK 可能收集设备标识符、IP 地址、游戏事件、崩溃日志及广告互动信息。
具体第三方 SDK 及其收集的数据，以各游戏实际集成的版本为准，并与我们在 App Store 隐私标签和 Google Play 数据安全表单中的披露保持一致。
2.5 我们不会主动收集的信息
- 我们不会主动请求访问你的精确地理位置、健康数据、生物识别信息、通讯录、短信或通话记录。
- 相机、麦克风、照片等权限仅在你使用相关功能时请求。拒绝授权不会影响其他功能，但可能导致该特定功能无法使用。
- 我们不会收集政府身份证号码、完整银行卡号等敏感信息。
03我们如何使用信息
- 提供与运营：创建或登录账号、保存游戏进度、同步云存档、提供游戏内容与功能。
- 交易与权益：处理内购、订阅、退款与虚拟道具发放（支付由平台处理）。
- 客服与支持：回复你的问题，处理投诉与反馈。
- 通知：经你同意后发送游戏更新、活动或服务通知；你可以随时在系统设置中关闭。
- 改进与安全：分析使用趋势、诊断崩溃、优化性能、检测作弊、欺诈与滥用。
- 广告（如适用）：展示广告并衡量广告效果；个性化广告仅在取得你的同意后提供。
- 法律合规：遵守适用法律、响应有权机关的合法要求、行使或抗辩法律主张。
我们不会以金钱对价出售你的个人信息，也不会将其用于与游戏无关的营销。
04处理个人信息的法律依据
若你位于欧洲经济区（EEA）、英国或瑞士，我们基于以下一项或多项法律依据处理你的个人信息：
- 履行合同：向你提供游戏、内购、云存档与客服支持。
- 同意：个性化广告、营销通知、设备权限或非必要 SDK。
- 合法利益：保障游戏安全、反作弊、改进功能，且不损害你的基本权利与自由。
- 法律义务：遵守税务、消费者保护及其他适用法律。
你可以随时撤回同意，但撤回不影响撤回前基于同意进行的处理的合法性。
05第三方服务与数据共享
我们不会出售或出租你的个人信息。
我们仅在以下情形共享信息：
- 平台服务：Apple 与 Google 用于应用分发、账号登录、支付、崩溃报告与平台分析；其处理行为受各自隐私政策约束。
- 服务提供商：云托管、数据库、分析、崩溃报告、广告、客服与反作弊服务商。我们要求其仅按我们的指示处理信息，并采取适当保护措施。
- 法律要求：为遵守法律法规、司法或行政命令，或保护我们、用户及公众的权利、财产与安全。
- 业务转移：若本服务或相关业务发生合并、收购或资产转让，个人信息可能作为资产一并转移；我们会要求接收方继续受本政策约束。
我们可能使用的第三方服务类别如下：
| 类别 | 用途 | 可能涉及的信息 |
|---|---|---|
| 应用商店与支付 | 应用分发、内购、订阅、退款 | 账号标识、交易记录、设备信息 |
| 分析与崩溃 | 了解使用情况、修复问题 | 设备与技术信息、游戏事件、崩溃日志 |
| 广告与归因（如游戏包含广告） | 展示广告、衡量效果、反作弊 | 广告标识符、IP 地址、大致位置、设备信息 |
| 云存储与登录（如适用） | 云存档、账号登录 | 账号标识、游戏进度 |
具体服务商与 SDK 以各游戏实际集成的版本为准，我们会在 App Store 隐私标签和 Google Play 数据安全表单中同步披露。
06数据存储与保留期限
- 信息可能存储在我们或服务提供商的服务器上，服务器位置可能在你所在国家或地区之外。
- 账号信息：在账号存续期间及注销后的合理期限内保留，随后删除或匿名化。
- 游戏进度：为实现云存档与跨设备同步而保留，直至你删除相关数据或注销账号。
- 客服记录：在处理完你的请求后的一段合理期限内保留。
- 交易记录：按税务、会计与消费者保护法律的要求保留。
- 分析与崩溃数据：按服务商政策保留，通常为较短期限，并优先以汇总或匿名形式保存。
- 广告标识符：按平台与广告合作伙伴的政策保留。
当信息不再需要时，我们会删除或匿名化处理。备份中的信息将在正常的备份周期内被覆盖或删除。
07数据安全
我们采取合理的技术与组织措施保护你的信息，包括传输加密（如 TLS）、访问控制、最小权限原则、供应商审查与安全更新。
但任何互联网传输或电子存储方式都无法保证绝对安全。若发生可能影响你权益的数据泄露，我们会按照适用法律的要求，及时通知你及相关监管机构。
请妥善保管你的账号凭证与设备，避免通过公共网络提交敏感信息。
08跨境传输
我们及服务提供商可能在你所在国家或地区之外处理信息。
- 若涉及欧洲经济区、英国或瑞士，我们会依据适用法律采用适当的保障措施，例如欧盟标准合同条款（SCC）。
- 若你位于中国大陆，我们会在依法需要时履行个人信息出境的相关程序，并在适用法律要求时取得你的单独同意。
你可以通过 heyucrystal@gmail.com 了解我们采用的传输保障措施。
09你的权利
根据适用法律，你可能享有以下权利：
- 查阅、复制我们持有的你的个人信息；
- 更正或补充不准确、不完整的信息；
- 删除你的个人信息；
- 限制或反对我们对你的个人信息进行处理；
- 请求转移你的个人信息（数据可携权）；
- 撤回你此前作出的同意；
- 通过 iOS 或 Android 系统设置，拒绝个性化广告或跨应用跟踪；
- 向当地数据保护监管机构投诉。
如需行使上述权利，请发送邮件至 heyucrystal@gmail.com，并在主题中注明“隐私请求 / Privacy Request”，简要说明你的请求内容。为保护你的信息安全，我们可能需要先验证身份。我们通常会在 30 日内答复；如法律另有规定，从其规定。
特定地区的补充权利
- 欧洲经济区、英国或瑞士：你有权向当地数据保护监管机构提出投诉。
- 美国加利福尼亚州：根据 CCPA/CPRA，你有权知悉、删除、更正个人信息，拒绝出售或共享个人信息，并有权不因行使权利而受到歧视。我们不会以金钱对价出售个人信息；若我们在取得你同意后使用个性化广告，可能与广告合作伙伴共享有限的标识符，你可以通过系统设置或邮件退出。我们不会因你行使权利而歧视你。
- 中国大陆：根据《中华人民共和国个人信息保护法》等适用法律，你有权查阅、复制、更正、补充、删除、撤回同意、转移个人信息，并要求我们解释处理规则。
10儿童隐私
本服务面向一般用户，并非专门面向儿童。我们不会在知情的情况下收集未满 13 周岁（美国）、14 周岁（中国大陆）或 16 周岁（欧洲经济区适用地区）儿童的个人信息，具体年龄界限以适用法律及相关游戏的年龄评分为准。
若你是父母或监护人，发现儿童向我们提供了个人信息，请发送邮件至 heyucrystal@gmail.com，我们会尽快删除。
若某款游戏被标记为面向儿童，我们会遵守适用的儿童隐私法律（如 COPPA），并相应调整数据收集与广告做法。
未成年人应在监护人的同意和指导下使用本服务。
11设备权限
本服务可能请求以下权限，仅在实现对应功能时使用：
- 通知：发送游戏更新、活动或提醒；你可以随时在系统设置中关闭。
- 存储/照片：保存游戏截图、导入头像或读取你选择的文件。
- 相机/麦克风：仅在你主动使用拍照、语音或视频功能时使用。
- 其他权限：例如陀螺仪、振动等，用于游戏交互。
你可以在设备的系统设置中查看、授予或撤销权限。拒绝授权可能导致相关功能无法使用，但不影响其他功能。
12政策更新
我们可能因法律变化、功能调整或第三方服务变更而更新本政策。更新后的版本将在本页面发布；如变更重大，我们会通过应用内提示或商店更新说明等方式通知你，并在法律要求时重新取得你的同意。
建议你定期查看本政策。若你在更新后继续使用本服务，即表示你接受更新后的政策（在法律允许的范围内）。
本政策的最新版本始终以本页面发布的内容为准。
01Introduction & Scope
This Privacy Policy (the “Policy”) applies to the games and applications that ALEX.H.Y (“we”, “us”, or “our”) publishes on the Apple App Store, Google Play, and any other app distribution platforms we may use (collectively, the “Service”).
This Policy explains how we collect, use, store, share, and protect your information when you download, install, launch, play, or use the Service, and the rights you have.
This Policy applies only to the games and applications we provide. It does not apply to services provided by Apple, Google, or other platforms. Your account, payment, and platform usage data on the App Store or Google Play are processed by the relevant platform under its own privacy policy.
Please read this Policy carefully before using the Service. By using the Service, you acknowledge that you have read and understood this Policy. If you do not agree, please stop using the Service and uninstall the relevant application.
If you have any questions about this Policy or wish to exercise your rights under it, please email us at heyucrystal@gmail.com.
For the purposes of this Policy, the data controller is ALEX.H.Y.
02Information We Collect
We follow the principle of data minimisation and collect only the information necessary for the purposes described below. The information we collect depends on the game you use, your device, your region, and the features you enable.
2.1 Information You Provide
- Account information: if a game supports accounts, login, or cloud saves, we may collect a username, email address, login credentials (processed by the platform or authentication provider), and an avatar you choose.
- Support and feedback: your contact details, the content of your messages, and any files you voluntarily attach when you contact support or submit feedback.
- User content: nicknames, avatars, levels, comments, or other content you create in a game, where applicable.
- Event information: information you provide when you voluntarily participate in a test, survey, or event.
2.2 Gameplay and Transaction Information
- Game progress, scores, achievements, items, settings, and preferences.
- In-app purchase and subscription records, including transaction identifiers, products, amounts, and status. Payments are processed by Apple or Google; we do not receive your full card number or payment credentials.
2.3 Device and Technical Information
- Device model, operating system and version, language and region, app version, IP address, and approximate location derived from your IP address.
- Crash logs, performance data, diagnostics, and other technical logs.
- Device identifiers and advertising identifiers (such as IDFA and Android Advertising ID), used for game operations, analytics, advertising, and fraud prevention. Whether these are collected depends on the game's features and your authorisation.
2.4 Third-Party SDKs
Our games may integrate third-party SDKs for analytics, crash reporting, advertising, cloud storage, login, or payments. These SDKs may collect device identifiers, IP addresses, gameplay events, crash logs, and advertising interaction data.
The specific SDKs and the data they collect depend on the version integrated into each game, and are disclosed in the App Store privacy labels and Google Play Data Safety section for that game.
2.5 Information We Do Not Intentionally Collect
- We do not request access to your precise geolocation, health data, biometric information, contacts, SMS, or call logs.
- Permissions for the camera, microphone, and photos are requested only when you use the relevant feature. Declining a permission does not affect other features, but the specific feature may not work.
- We do not collect government identification numbers, full bank card numbers, or similar sensitive information.
03How We Use Information
- Providing and operating the Service: creating or logging into accounts, saving progress, syncing cloud saves, and delivering game content and features.
- Transactions and entitlements: processing in-app purchases, subscriptions, refunds, and delivering virtual items (payments are handled by the platform).
- Customer support: responding to your questions and handling complaints and feedback.
- Notifications: sending game updates, events, or service notices with your consent; you can disable notifications in your device settings at any time.
- Improvement and security: analysing usage trends, diagnosing crashes, improving performance, and detecting cheating, fraud, and abuse.
- Advertising, where applicable: displaying ads and measuring their effectiveness; personalised advertising is provided only with your consent.
- Legal compliance: complying with applicable laws, responding to lawful requests from authorities, and establishing, exercising, or defending legal claims.
We do not sell your personal information for monetary consideration, and we do not use it for marketing unrelated to our games.
04Legal Bases
If you are located in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process personal information on one or more of the following legal bases:
- Performance of a contract: providing the game, in-app purchases, cloud saves, and customer support.
- Consent: personalised advertising, marketing notifications, device permissions, and non-essential SDKs.
- Legitimate interests: securing the game, preventing cheating, and improving features, where these interests do not override your fundamental rights.
- Legal obligation: complying with tax, consumer protection, and other applicable laws.
You may withdraw your consent at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
05Third-Party Services & Sharing
We do not sell or rent your personal information.
We share information only in the following circumstances:
- Platform services: Apple and Google, for app distribution, account login, payments, crash reporting, and platform analytics. Their processing is governed by their own privacy policies.
- Service providers: cloud hosting, databases, analytics, crash reporting, advertising, customer support, and anti-cheat providers. We require them to process information only on our instructions and to apply appropriate safeguards.
- Legal requirements: to comply with laws, regulations, judicial or administrative orders, or to protect the rights, property, and safety of us, our users, or the public.
- Business transfer: if the Service or related business is involved in a merger, acquisition, or asset transfer, personal information may be transferred as an asset; we will require the recipient to continue to be bound by this Policy.
The categories of third-party services we may use are:
| Category | Purpose | Information potentially involved |
|---|---|---|
| App stores and payments | App distribution, in-app purchases, subscriptions, refunds | Account identifiers, transaction records, device information |
| Analytics and crash reporting | Understanding usage and fixing problems | Device and technical information, gameplay events, crash logs |
| Advertising and attribution, where a game contains ads | Displaying ads, measuring performance, fraud prevention | Advertising identifiers, IP address, approximate location, device information |
| Cloud storage and login, where applicable | Cloud saves and account login | Account identifiers, game progress |
Specific providers and SDKs depend on each game's actual integrations, and are disclosed in the App Store privacy labels and Google Play Data Safety section for that game.
06Data Retention
- Information may be stored on servers operated by us or our service providers, which may be located outside your country or region.
- Account information: retained while your account is active and for a reasonable period after deletion, then deleted or anonymised.
- Game progress: retained to provide cloud saves and cross-device sync until you delete the relevant data or close your account.
- Support records: retained for a reasonable period after your request is resolved.
- Transaction records: retained as required by tax, accounting, and consumer protection laws.
- Analytics and crash data: retained under the provider's policy, usually for a limited period, and preferably in aggregated or anonymised form.
- Advertising identifiers: retained under the policies of the platform and advertising partners.
When information is no longer needed, we delete or anonymise it. Information in backups is overwritten or deleted in the normal backup cycle.
07Data Security
We take reasonable technical and organisational measures to protect your information, including encryption in transit (such as TLS), access controls, least privilege, vendor review, and security updates.
However, no method of transmission over the Internet or electronic storage is completely secure. If a data breach occurs that may affect your rights, we will notify you and the relevant authorities in a timely manner as required by applicable law.
Please protect your account credentials and device, and avoid submitting sensitive information over public networks.
08International Transfers
We and our service providers may process information outside your country or region.
- For the EEA, the UK, or Switzerland, we rely on appropriate safeguards under applicable law, such as the European Commission's Standard Contractual Clauses (SCCs).
- If you are located in Mainland China, we will complete the required cross-border data transfer procedures where required by law and obtain your separate consent where applicable.
You can contact us at heyucrystal@gmail.com for more information about the safeguards we use.
09Your Rights
Depending on applicable law, you may have the right to:
- access and copy the personal information we hold about you;
- correct or supplement inaccurate or incomplete information;
- delete your personal information;
- restrict or object to our processing of your personal information;
- request the transfer of your personal information (data portability);
- withdraw consent you have previously given;
- opt out of personalised advertising or cross-app tracking through iOS or Android settings;
- lodge a complaint with a supervisory authority.
To exercise these rights, please email heyucrystal@gmail.com with the subject “Privacy Request” and a brief description of your request. To protect your information, we may need to verify your identity first. We normally respond within 30 days or within any period required by applicable law.
Additional Regional Rights
- EEA, UK, or Switzerland: you have the right to lodge a complaint with your local data protection supervisory authority.
- California, USA: under the CCPA/CPRA, you have the right to know, delete, and correct personal information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising your rights. We do not sell personal information for monetary consideration. Where we use personalised advertising with your consent, we may share limited identifiers with advertising partners; you can opt out through your device settings or by emailing us. We will not discriminate against you for exercising your rights.
- Mainland China: under the Personal Information Protection Law of the People's Republic of China (PIPL) and other applicable laws, you have the right to access, copy, correct, supplement, delete, withdraw consent to, and transfer your personal information, and to request an explanation of our processing rules.
10Children's Privacy
The Service is intended for a general audience and is not directed to children. We do not knowingly collect personal information from children under 13 (United States), 14 (Mainland China), or 16 (where applicable in the EEA), as determined by applicable law and the age rating of the relevant game.
If you are a parent or guardian and believe that a child has provided us with personal information, please email heyucrystal@gmail.com and we will delete it promptly.
If a game is designated as child-directed, we will comply with applicable children's privacy laws (such as COPPA) and adjust our data collection and advertising practices accordingly.
Minors should use the Service only with the consent and supervision of a parent or guardian.
11Device Permissions
The Service may request the following permissions, which are used only for the corresponding features:
- Notifications: game updates, events, or reminders; you can disable them in your device settings.
- Storage/photos: saving screenshots, importing avatars, or accessing files you select.
- Camera/microphone: only when you actively use a photo, voice, or video feature.
- Other permissions: such as motion sensors or vibration, for game interaction.
You can view, grant, or revoke permissions in your device settings. Declining a permission may prevent the related feature from working but will not affect other features.
12Changes to This Policy
We may update this Policy in response to legal changes, feature changes, or changes to third-party services. The updated version will be posted on this page. If the changes are material, we will notify you through an in-app notice or store update notes and obtain your consent again where required by law.
We encourage you to review this Policy periodically. If you continue to use the Service after an update, you accept the updated Policy to the extent permitted by law.
The latest version of this Policy is always the one published on this page.