🔒 隐私政策Privacy Policy

进入软件产品介绍服务条款 Open the app About Terms of Service

最后更新：2026 年 7 月 26 日

简单说：我们只收集让软件跑起来必需的数据，不出售你的个人信息，不做广告追踪，不接第三方分析或追踪脚本。你可以随时要求删除全部数据。

1. 我们收集哪些数据

数据	为什么需要
邮箱地址	登录凭据、发送验证码、退款与账单沟通
用户名	在牌桌和排行榜上显示
密码（哈希值）	验证登录。我们不保存明文密码，存的是 scrypt 加盐哈希，无法还原
登录令牌	保持登录状态。数据库里只存令牌的哈希值
订阅状态与到期时间	判断你能用哪些功能
支付记录（渠道、订单号、档位）	入账去重、对账、处理退款。我们不接触也不存储你的银行卡号
每日用量计数	执行免费额度限制
对局记录与手牌流水	提供战绩、复盘和排行榜功能。每位用户只保留最近 50 局
AI 复盘文本	供你回看。每位用户只保留最近 100 条
策略一致率统计	多策略训练功能的学习指标
IP 地址	仅在服务器内存中临时用于限流（防注册刷量、防密码爆破），不写入数据库，重启即清空。Web 服务器的访问日志会短期保留

我们不收集的东西

不收集你的真实姓名、身份证件、电话号码、住址
不收集精确位置信息
不接入任何第三方广告或行为分析 SDK
不读取你设备上的通讯录、相册、麦克风或摄像头

2. Cookie

我们只使用两个必要 Cookie，没有广告或追踪 Cookie：

sid —— 登录状态。设为 HttpOnly（脚本无法读取）、SameSite=Lax，在 HTTPS 下加 Secure 标记，有效期 30 天。
lang —— 你选的界面语言（中文/英文）。

3. 数据会发给谁

为了提供功能，部分数据会传给以下第三方服务商。我们只发送必要内容，不会为营销目的向任何人出售或出租你的个人信息。

AI 模型服务商 —— 为了让 AI 对手做决策、生成复盘和策略建议，我们会把当前牌局的局面信息（你的手牌、公共牌、下注动作流水、你在牌桌上的显示名）发送给 AI 模型接口。 不会发送你的邮箱、密码或支付信息。
支付服务商（PayPal / Stripe）—— 结账时由他们处理付款。我们向其提供你的邮箱和订单档位，他们向我们返回订单号与付款结果。 你的银行卡信息只经过他们，我们看不到。
邮件服务商 —— 发送验证码邮件时会用到你的邮箱地址。
服务器与基础设施提供商 —— 数据存放在我们租用的服务器上。

此外，在法律强制要求时（例如有效的司法机关要求），我们可能需要披露相关数据。

4. 数据保存多久

账号信息：账号存续期间一直保留，直到你要求删除。
对局记录：每位用户滚动保留最近 50 局；AI 复盘保留最近 100 条，更早的会自动清理。
登录令牌：30 天后自动失效并清除。
邮箱验证码：10 分钟后失效，并被自动清除。
支付记录：出于对账与法定财务义务的需要保留更长时间，即使账号已删除。
数据库备份：滚动保留约 30 天。删除请求会在下一个备份周期后从备份中消失。

5. 你的权利

无论你身在何处，你都可以要求：

访问 —— 索取我们持有的关于你的数据副本
更正 —— 修改不准确的信息（用户名可自行修改，其他联系我们）
删除 —— 注销账号并删除相关数据（法定必须保留的支付记录除外）
导出 —— 以机器可读格式获取你的数据
撤回同意 —— 停止使用并注销账号

如果你在欧盟/英国（GDPR）：我们处理数据的法律依据是履行与你的合同（提供服务）、遵守法定义务（财务记录），以及我们保障服务安全的正当利益（限流防滥用）。你有权向所在地的数据保护监管机构投诉。

如果你在加利福尼亚州（CCPA/CPRA）：我们不出售、不共享你的个人信息，也不会因为你行使隐私权利而对你区别对待。

行使任何权利请发邮件到 pangela@foxmail.com，我们会在 30 天内回复。为保护账号安全，我们可能需要你从注册邮箱发起请求以核实身份。

6. 数据安全

全站强制 HTTPS 加密传输。
密码使用 scrypt 加盐哈希存储，即使数据库泄露也无法还原出明文密码。
数据库里只存登录令牌的哈希值，拿到数据库也无法直接冒用登录态。
我们不存储任何银行卡信息。
登录、注册、发信、兑换等接口均有频率限制，防止暴力破解。

但请注意，没有任何系统能保证绝对安全。请为本服务使用独立的强密码。

7. 儿童

本服务面向 18 周岁及以上用户，不面向儿童，也不会有意收集儿童的个人信息。如果你认为有未成年人向我们提供了信息，请联系我们，我们会删除。

8. 国际数据传输

我们的服务器和上述第三方服务商可能位于你所在国家/地区之外。使用本服务即表示你理解你的数据可能被传输到这些地区进行处理。

9. 政策变更

本政策更新时会修改顶部的"最后更新"日期。涉及重大变更时我们会通过邮件或站内提示告知。

10. 联系我们

隐私相关的任何问题、请求或投诉： pangela@foxmail.com

进入软件 →

Last updated: 26 July 2026

In short: we collect only what the software needs to work, we do not sell your personal information, we run no advertising trackers and we embed no third-party analytics scripts. You can ask us to delete everything at any time.

1. What we collect

Data	Why we need it
Email address	Login credential, verification codes, refund and billing correspondence
Username	Shown at the table and on the leaderboard
Password (hashed)	To verify logins. We never store plaintext passwords — only a salted scrypt hash, which cannot be reversed
Login token	Keeps you signed in. Only a hash of the token is stored
Subscription status and expiry	To determine which features you can use
Payment records (provider, order id, plan)	Deduplication, reconciliation and refunds. We never see or store your card details
Daily usage counters	To enforce free-tier limits
Game records and hand histories	To provide stats, reviews and leaderboards. Only the 50 most recent games per user are kept
AI review texts	So you can read them again later. Only the 100 most recent per user are kept
Strategy alignment counters	The learning metric for the multi-strategy training feature
IP address	Held in server memory only, for rate limiting (anti-spam, brute-force protection). Not written to the database and cleared on restart. Web server access logs are retained briefly

What we do not collect

No real name, identity documents, phone number or postal address
No precise location data
No third-party advertising or behavioural analytics SDKs
No access to your contacts, photos, microphone or camera

2. Cookies

We use two strictly necessary cookies and no advertising or tracking cookies:

sid — your login session. HttpOnly (not readable by scripts), SameSite=Lax, marked Secure over HTTPS, valid for 30 days.
lang — your chosen interface language.

3. Who we share data with

To provide the features, some data is passed to the third-party providers below. We send only what is necessary and we never sell or rent your personal information for marketing.

AI model provider — so that AI opponents can act and the coach can produce reviews and suggestions, we send the current hand's game state (your hole cards, the board, the action history and your display name at the table). We never send your email, password or payment information.
Payment providers (PayPal / Stripe) — they process the checkout. We pass them your email and the plan you chose; they return the order id and result. Your card details go only to them, never to us.
Email provider — your email address is used to deliver verification codes.
Server and infrastructure providers — the data is stored on servers we rent.

We may also disclose data where legally compelled to do so, for example by a valid order from a competent authority.

4. How long we keep it

Account data: kept while the account exists, until you ask us to delete it.
Game records: the 50 most recent games per user; AI reviews: the 100 most recent. Older entries are removed automatically.
Login tokens: expire and are purged after 30 days.
Email verification codes: expire after 10 minutes and are then deleted.
Payment records: retained longer for reconciliation and statutory financial obligations, even after account deletion.
Database backups: rotated for about 30 days. Deletions disappear from backups after the next rotation cycle.

5. Your rights

Wherever you live, you can ask us to:

Access — receive a copy of the data we hold about you
Correct — fix inaccurate information
Delete — close your account and erase your data (except payment records we must retain by law)
Export — obtain your data in a machine-readable format
Withdraw consent — stop using the service and close your account

If you are in the EU/UK (GDPR): our legal bases are performance of our contract with you (providing the service), compliance with legal obligations (financial records) and our legitimate interest in keeping the service secure (rate limiting). You have the right to lodge a complaint with your local data protection authority.

If you are in California (CCPA/CPRA): we do not sell or share your personal information, and we will not discriminate against you for exercising your privacy rights.

To exercise any right, email pangela@foxmail.com. We reply within 30 days. To protect your account we may ask you to send the request from your registered email address.

6. Security

HTTPS is enforced across the whole site.
Passwords are stored as salted scrypt hashes, so a database leak would not reveal them.
Only hashes of login tokens are stored, so database access alone does not let anyone impersonate you.
We store no card details at all.
Login, registration, email and redemption endpoints are all rate limited against brute force.

No system can be guaranteed absolutely secure. Please use a strong, unique password for this service.

7. Children

This service is intended for users aged 18 and over. It is not directed at children and we do not knowingly collect personal information from them. If you believe a minor has provided us with information, contact us and we will delete it.

8. International transfers

Our servers and the providers listed above may be located outside your country. By using the service you understand that your data may be transferred to and processed in those locations.

9. Changes to this policy

When this policy is updated we change the "Last updated" date at the top. For significant changes we will notify you by email or in the app.

10. Contact

Any privacy question, request or complaint: pangela@foxmail.com

Open the app →