水浒 · 掌上梁山
隐私政策 / Privacy Policy
您的隐私与掌上梁山
本政策适用于王迪远开发的 iPhone 应用「水浒」（应用内主题「掌上梁山」，Bundle ID：com.wdyrix.shuihu），以及本应用的支持与隐私页面。1.1.0 版使用云端账户保存收藏及购买资产。我们不提供广告追踪，不出售个人数据，不使用第三方广告或分析 SDK。
账户与身份验证
无需注册、登录或提供手机号，即可领取和拆开卡包、兑换卡片、购买及使用沙漏。游客使用随机账户、会话凭证和 Apple 提供的应用交易标识，将云端收藏及剩余资产关联到同一 App Store 账户。我们验证 Apple 签名及设备验证数据，不请求您的姓名、邮箱或手机号；设备验证值不入库，完整签名及会话凭证不记入日志。绑定中国大陆手机号是可选的额外找回方式，不是领取、购买或使用资产的前提。通过 Apple 登录时，我们保存 Apple 提供的账户标识，不请求姓名或邮箱。通过中国大陆 +86 手机号登录时，您提供的完整号码会传给阿里云号码认证服务以发送验证码；业务数据库保存带密钥的手机号摘要及掩码，不保存完整号码或明文验证码。会话凭证保存在设备 Keychain 中，用于保持登录及同步资产。
验证码有效期为 5 分钟，只能使用一次。为限制滥发与猜测，我们保存手机号、会话及网络地址的摘要和发送计数，定期清理超过 24 小时的发送记录与已过期的验证码记录。这些信息仅用于身份验证和服务防护。
收藏、购买及使用记录
服务器保存您的卡片数量、心选、最近一包、开包次数、免费额度与恢复时间、沙漏、聚义印和保底进度，用于提供功能及跨设备同步。服务器记录交易编号、商品、发放数量及退款状态，用于核验付款、防止重复发货和处理退款。付款由 Apple 处理，我们不接触您的支付卡资料。
账户创建、绑定、开包、兑换、加速及购买状态变更会产生与账户关联的使用事件，用于维护服务和汇总分析；服务定期清理 90 天前的事件。应用不上传图录搜索文本或设备动作数据，也不将数据用于跨应用、跨网站的广告追踪。
本地缓存、动作感应及分享
应用在本机缓存收藏和下载的卡牌材质，已收藏卡片及已下载素材可离线欣赏；拆包、兑换和购买确认需要联网。游客资产同样保存在云端。同一 App Store 账户重新安装或换用支持的设备后，可恢复收藏及剩余余额，已消耗资产不会重新发放。iOS 可能依您的系统设置备份部分应用数据。
Core Motion 的设备倾斜数据仅在本机用于卡片动画，不保存、不上传。应用不读取联系人、位置、相机、麦克风、健康记录或照片图库。使用系统分享面板导出的海报包含您选择的卡牌和收藏信息，仅在您完成分享后交给所选对象；开发者不会自动收到分享内容。
服务提供方与网络请求
Apple 提供登录及内购服务；阿里云号码认证提供短信身份验证；火山引擎云服务托管业务服务器，TOS/CDN 提供卡牌材质。网络请求需要网络地址以传输内容和防护服务。我们仅向相应服务提供方传递提供这些功能所必需的信息，各服务提供方也依其服务和隐私政策处理信息。
本网站由 GitHub Pages 托管；GitHub 可为安全目的记录访问者 IP 地址，参见 GitHub 隐私声明。本页面不添加广告、分析脚本或 Cookie。
保存、恢复与删除账户
账户及收藏会保留至您删除账户。在首页菜单的「我的账户」中可以删除账户。游客确认后即可删除；已绑定 Apple 登录或手机号的账户，需重新通过 Apple 授权或当前手机号的删除专用验证码验证身份。成功后移除云端收藏、未使用沙漏、聚义印、会话、使用事件及可选登录身份关联，并清除本机账户缓存。Apple 登录账户同时撤销登录授权。
删除后保留防止重复发货、重复赠送及退款核对所需的最小交易记录和 App Store 标识的防重领关联，不用于恢复已删除的收藏或余额，不再保留可选 Apple 登录或手机号身份关联。生产数据库的轮换备份通常在 14 天内到期。删除账户不会自动申请 Apple 退款；退款请通过 Apple 的购买支持办理。仅删除 App 不会删除云端账户，您可以使用同一 App Store 账户重新安装以恢复剩余资产；之前绑定的手机号也可用于找回收藏。
支持邮件、儿童与政策更新
主动联系支持时，我们会收到您提供的邮箱、正文及自愿附件，仅用于回复与排查问题，不用于广告或出售。支持往来仅在处理请求及适用义务所需期间保留，您可以联系下方邮箱请求删除。请勿发送密码、验证码或不必要的私人信息。
本应用不是为儿童专门设计的服务。请遵守 App Store 的年龄要求，未成年人购买前应取得监护人同意。数据处理方式变化时，我们会更新本政策、生效日期及 App Store 隐私说明。
联系我们
开发者：王迪远（Diyuan Wang）
隐私与技术支持：wdyrix@gmail.com
Your privacy in Liangshan
This policy covers 水浒, an iPhone app developed by Diyuan Wang, themed in the app as 掌上梁山 (Liangshan), bundle ID com.wdyrix.shuihu, and its support and privacy pages. Version 1.1.0 uses cloud accounts to store collections and purchased assets. We do not sell personal data, track users for advertising, or use third-party advertising or analytics SDKs.
Accounts and authentication
No app registration, sign-in or phone number is required to claim or open packs, exchange cards, or buy and spend hourglasses. Guests use random account and session credentials together with an app transaction identifier provided by Apple to associate cloud collections and remaining assets with the same App Store account. We validate Apple signatures and device verification data without requesting your name, email or phone number. Device verification values are not stored in the database, and full signed proofs and session credentials are not logged. Optional mainland China phone binding provides an additional recovery method; it is not a condition of using or purchasing assets. Sign in with Apple provides an account identifier; we do not request your name or email. For mainland China +86 phone sign-in, your full number is sent to Alibaba Cloud's phone verification service to deliver a code. Our business database stores a keyed hash and a masked number, not the full number or plaintext code. Session credentials are stored in the device Keychain for sign-in and synchronization.
Verification codes expire after five minutes and work once. Hashed phone, session and network identifiers and send counts help prevent abuse. Expired challenges and send records older than 24 hours are regularly removed. This information is used for authentication and service protection.
Collections, purchases and usage
Our server stores card quantities, favorites, your latest pack, pack counts, free-pack availability and recovery times, hourglasses, seals and foil guarantee progress to provide the app and synchronize devices. Transaction identifiers, products, quantities and refund status are retained to verify payments, prevent duplicate delivery and process refunds. Apple handles payment; we do not receive your payment card details.
Account creation, binding, pack opening, exchange, acceleration and purchase changes generate account-linked events for service maintenance and aggregate analysis. Events older than 90 days are regularly removed. The app does not upload artwork search text or motion data, or use data for advertising tracking across apps or websites.
Local storage, motion and sharing
Collections and downloaded card materials are cached locally for offline viewing. Opening packs, exchanges and purchase confirmation require an internet connection. Guest assets are also stored in the cloud. Reinstalling or using another supported device with the same App Store account recovers the collection and remaining balance without re-granting spent assets. iOS may back up some app data according to your system settings.
Core Motion tilt data is processed locally for animation without retention or upload. The app does not read contacts, location, camera, microphone, health records or your photo library. Posters exported through the system share sheet contain selected cards and collection information and are sent only to the destination you choose when you complete sharing. The developer does not automatically receive them.
Service providers and network requests
Apple provides sign-in and in-app purchases; Alibaba Cloud provides SMS authentication; Volcengine cloud services host our backend, and TOS/CDN deliver card materials. Network addresses are needed to deliver content and protect the service. We provide each service only with information needed for its function; providers also process information under their own service and privacy policies.
This website is hosted on GitHub Pages. GitHub may log visitor IP addresses for security; see the GitHub Privacy Statement. These pages add no advertisements, analytics scripts or cookies.
Retention and account deletion
Accounts and collections remain until you delete your account. Open the home menu and choose 我的账户 (My Account) to delete your account. Guests can delete after confirmation. Accounts bound to Apple sign-in or a phone number require renewed Apple authorization or a deletion-specific code sent to the current phone number. Deletion removes cloud cards, unused hourglasses, seals, sessions, usage events and optional sign-in identity links, and clears the local account cache. Apple sign-in authorization is also revoked for Apple sign-in accounts.
Minimal transaction records and an anti-duplicate association with the App Store identifier remain to prevent repeated purchase delivery or welcome rewards and reconcile refunds. They cannot restore deleted collections or balances. Optional Apple sign-in and phone identity links are removed. Rotating production database backups normally expire within 14 days. Account deletion does not request a refund from Apple; use Apple's purchase support for refunds. Removing the app alone does not delete your cloud account. Reinstall using the same App Store account to recover remaining assets. A previously bound phone number is also available for recovery.
Support, children and changes
If you email support, we receive your email address, message and voluntary attachments only to respond and investigate, not for advertising or sale. Correspondence is retained as needed for your request and applicable obligations; you may request its deletion at the address below. Do not send passwords, verification codes or unnecessary private information.
The app is not a service designed specifically for children. Follow the App Store age requirements; minors should obtain guardian consent before purchases. Changes to data practices will be reflected in this policy, its effective date and App Store privacy details.
Contact
Developer: Diyuan Wang (王迪远)
Privacy and support: wdyrix@gmail.com